Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/VAOY801PkrzqxDDWxjroJ4rCKlo.roa
File: VAOY801PkrzqxDDWxjroJ4rCKlo.roa (raw, json)
Hash identifier: rV6POBuWt7ZSttGJ60GsdZDcd2dhokOY2agSLZ9XVSc=
Subject key identifier: 54:03:98:F3:4D:4F:92:BC:EA:C4:30:D6:C6:3A:E8:27:8A:C2:2A:5A
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018908594E09EC9A0BD5130ED71F1D910114
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/VAOY801PkrzqxDDWxjroJ4rCKlo.roa
Signing time: Thu 29 Jun 2023 18:10:17 +0000
ROA not before: Thu 29 Jun 2023 18:10:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 109.72.112.0/24 maxlen: 24
109.72.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Oct 2023 10:35:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:08:59:4e:09:ec:9a:0b:d5:13:0e:d7:1f:1d:91:01:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jun 29 18:10:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=540398f34d4f92bceac430d6c63ae8278ac22a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:12:54:b4:c5:15:24:cf:c3:21:dd:82:9b:5b:
f2:e1:b8:c3:f8:f0:ec:70:54:4b:ea:cb:ca:80:f4:
fc:29:90:ff:13:7e:ab:00:76:14:be:97:0a:d8:15:
09:ee:87:93:9a:6a:11:06:9e:76:aa:0c:98:d6:4e:
ba:d7:2e:9c:95:a6:f6:d3:3c:71:54:0b:05:7f:bc:
29:da:59:7c:af:b9:c7:6c:c9:8e:f9:95:c8:ca:72:
18:5f:b0:8d:57:2b:db:68:42:c7:f4:0f:6c:52:c9:
0d:30:44:2a:f3:82:84:4d:9f:b1:ce:49:03:4b:a1:
ae:df:5b:1e:0f:ca:25:75:ce:06:f7:e2:24:ca:1a:
f2:8a:29:73:cf:46:f2:22:8f:da:a1:17:80:be:5b:
1e:f4:c1:d7:6f:91:ea:41:ce:1c:c3:8e:e1:87:f8:
ef:59:8d:f4:b2:bd:a0:81:c3:02:a1:51:f9:9e:5c:
b9:3c:db:dd:14:c7:98:81:78:86:82:a0:44:a7:49:
ba:3d:0a:5e:69:1c:fa:28:74:bc:30:06:99:c4:3a:
79:1e:8a:4d:86:ca:e0:87:75:37:73:a1:ff:f0:31:
d9:7b:8e:7e:5c:e3:a4:47:57:4a:4c:00:d7:80:4d:
09:de:ec:8b:29:e1:3a:24:fb:3e:9c:67:77:7c:0a:
3f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:03:98:F3:4D:4F:92:BC:EA:C4:30:D6:C6:3A:E8:27:8A:C2:2A:5A
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/VAOY801PkrzqxDDWxjroJ4rCKlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.112.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:aa:8e:83:5c:a5:a8:e4:55:d2:a8:c0:43:2c:97:f5:d4:40:
77:ef:2f:75:8e:76:2e:16:ef:bf:e9:fa:97:46:16:d0:c4:63:
10:79:45:b1:c2:44:09:ef:4d:f2:c7:f0:f0:10:83:0f:16:46:
21:93:88:64:b8:44:01:60:8d:99:1e:29:b7:04:f1:74:1b:21:
a3:cd:c1:0d:34:99:62:e3:6d:15:4a:b9:18:83:a3:1b:95:91:
d8:ad:a8:95:aa:a0:22:7e:21:a0:2e:97:a2:5b:80:35:ad:64:
bb:81:e4:fc:36:a7:08:a1:7c:a9:23:36:19:e1:fb:ea:7b:53:
f5:6b:22:05:9c:23:ee:60:0f:52:55:bb:df:10:fc:6b:5c:b5:
15:d6:81:ec:17:86:d6:03:84:56:7f:46:f4:44:04:a5:6f:71:
ac:92:9b:63:fc:5f:cb:eb:2d:3a:bd:98:06:d5:4c:f0:dc:3d:
6c:31:1d:ce:99:71:86:6d:e0:09:f5:16:6c:2e:54:35:0a:21:
b9:82:8d:09:47:37:2f:c5:19:b4:9c:1a:ed:44:7e:fd:f4:78:
b4:cd:87:ae:a8:4b:6c:8e:c9:f7:5b:97:cb:f4:dc:cc:ee:1c:
38:f6:bc:98:17:0e:c5:0a:71:c5:06:c1:8a:9e:10:1f:32:e4:
c7:f0:f1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org