Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/VdvqQ0PVx1AA7hrXA8tHpPtreJE.roa
File: VdvqQ0PVx1AA7hrXA8tHpPtreJE.roa (raw, json)
Hash identifier: 8/3uE5SdaK6Mv1YS22htZ8/A3iusZ6tRhGg2Xda6mCo=
Subject key identifier: 55:DB:EA:43:43:D5:C7:50:00:EE:1A:D7:03:CB:47:A4:FB:6B:78:91
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01859AFE1109AAFEE22B98CA09ED9C4F4ACD
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/VdvqQ0PVx1AA7hrXA8tHpPtreJE.roa
Signing time: Tue 10 Jan 2023 09:23:39 +0000
ROA not before: Tue 10 Jan 2023 09:23:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 109.72.112.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 09 May 2023 04:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9a:fe:11:09:aa:fe:e2:2b:98:ca:09:ed:9c:4f:4a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 10 09:23:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55dbea4343d5c75000ee1ad703cb47a4fb6b7891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2b:25:dd:fc:6c:ab:e4:de:74:61:d9:00:b3:
83:99:cf:23:c3:7b:4f:05:71:f7:51:c8:d4:23:77:
ae:35:81:2b:a0:c9:39:48:15:c8:8a:a5:07:17:54:
52:34:fc:d7:ae:f0:4c:0d:28:4a:79:80:d8:d3:40:
b7:68:da:66:d3:e5:74:de:7c:1a:18:ba:4d:02:72:
69:5b:75:a0:69:bd:6f:a5:e4:8c:2f:84:96:91:7b:
b2:11:56:35:be:79:18:bf:2a:8f:65:8d:91:4c:dc:
a4:c0:fc:52:64:e1:ca:bf:c5:23:15:14:e3:87:0e:
9d:21:87:87:de:33:d9:2f:3c:ea:21:8e:62:74:65:
79:82:9b:69:19:2d:50:02:d3:ee:77:6a:90:00:1d:
2f:f8:35:25:0f:ba:11:03:03:7b:66:67:2f:35:27:
95:48:be:e2:69:56:3d:29:1d:be:77:24:cf:6b:51:
e2:22:d9:d1:47:d8:15:40:32:2b:25:f3:f5:68:e7:
54:ce:70:0f:ca:7a:17:39:2f:a1:8d:16:2d:76:c8:
0a:a6:67:0f:da:3c:8a:a2:c9:9d:2c:55:f8:0d:42:
f6:6b:41:c1:78:14:68:f0:74:b0:02:51:c1:94:95:
04:fc:bd:d3:3d:ee:90:15:02:96:a2:3d:e0:e0:2d:
5e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DB:EA:43:43:D5:C7:50:00:EE:1A:D7:03:CB:47:A4:FB:6B:78:91
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/VdvqQ0PVx1AA7hrXA8tHpPtreJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.112.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:dd:ab:f2:8f:2b:53:19:38:63:51:49:20:a7:ee:54:05:c7:
9f:71:c5:8e:12:0f:35:f2:6d:f0:f1:2c:38:7e:e7:36:53:90:
69:61:db:48:22:a2:ec:a3:ea:bd:e4:b4:90:12:f7:89:a3:71:
1e:27:94:39:fa:76:d7:94:a0:24:2b:a3:ff:79:1f:ef:77:a8:
63:1d:10:48:4e:d8:02:22:8f:e7:05:bc:a4:53:de:3c:b1:b1:
b4:c3:3b:3e:6d:21:b7:d6:8f:4f:95:0e:55:ec:a0:7f:64:e5:
ec:f4:92:d0:ec:a6:7b:ba:23:61:76:cb:29:a6:85:c0:78:e8:
62:65:24:9b:31:f8:26:f2:c1:43:34:57:e3:e3:65:1e:8c:7e:
fc:8c:ce:01:70:35:ff:61:9e:38:9b:5f:fb:c9:9c:8a:61:0b:
c0:4e:71:1c:74:15:9b:d7:ac:b1:03:5d:41:fc:5f:49:d4:93:
04:ff:f5:3d:15:c5:8d:9b:74:0c:88:78:2e:a9:46:02:bc:d9:
e9:73:ca:96:13:e2:93:b3:e2:92:cc:5d:6e:01:71:e5:8c:b0:
4d:0d:51:94:b0:c8:a3:28:53:df:59:5b:72:1b:9c:4d:fb:50:
e2:10:06:15:c6:09:81:23:5e:80:82:0f:68:b1:a8:3b:f9:fd:
1d:c0:a0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org