Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/VF0ZyMHJzbCTCSj4d0dfNiNUFHc.roa
File: VF0ZyMHJzbCTCSj4d0dfNiNUFHc.roa (raw, json)
Hash identifier: 59GBvGGS83cnwnAqAu9Jf+4cmKYKq3gyNfK17u4dKo8=
Subject key identifier: 54:5D:19:C8:C1:C9:CD:B0:93:09:28:F8:77:47:5F:36:23:54:14:77
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 018A428AC214DB8636D0DC3814B32BDEE276
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/VF0ZyMHJzbCTCSj4d0dfNiNUFHc.roa
Signing time: Tue 29 Aug 2023 18:25:04 +0000
ROA not before: Tue 29 Aug 2023 18:25:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 10753
IP address blocks: 5.102.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Aug 2023 17:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:42:8a:c2:14:db:86:36:d0:dc:38:14:b3:2b:de:e2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Aug 29 18:25:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=545d19c8c1c9cdb0930928f877475f3623541477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a7:35:1f:67:fd:90:06:3a:da:c5:88:0d:21:
b5:7a:97:9a:bb:df:ba:71:fb:37:9a:3c:0b:7d:e8:
fd:7b:dc:76:26:24:55:74:ea:3a:5d:17:3c:04:f7:
85:0c:0d:79:49:bf:09:1f:ee:40:6f:9a:78:a4:8d:
5d:23:07:14:c4:a5:7e:e3:43:dd:df:9c:80:8a:0b:
07:f6:80:36:59:b6:80:25:c8:b5:f6:93:fb:d2:90:
b0:4a:b1:09:34:ac:da:fd:7c:57:4a:b2:3a:5c:6a:
a9:82:a9:d9:7d:bb:36:94:73:7b:59:97:ee:be:5c:
12:67:e0:f0:b8:d6:e1:bf:e5:10:d8:e1:b5:87:c6:
5d:08:0c:cc:db:10:5d:c1:83:68:48:a1:34:1c:db:
05:be:b3:78:60:aa:bb:10:1d:35:99:fe:f5:5a:ad:
a6:bc:78:88:fb:bb:5b:4e:2c:e3:20:f3:43:55:08:
dd:e2:7b:2a:99:b6:89:e0:d5:f0:9f:36:96:d9:03:
88:cd:40:a5:fc:5d:a4:4e:26:3c:06:dc:ef:68:e0:
31:e4:59:a4:5b:76:da:87:1f:a9:d3:10:90:d6:84:
4c:57:63:cb:c3:b5:05:1f:ec:11:95:31:1c:86:cc:
92:8a:36:4d:97:8e:94:78:b0:e5:22:94:ca:dd:77:
95:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5D:19:C8:C1:C9:CD:B0:93:09:28:F8:77:47:5F:36:23:54:14:77
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/VF0ZyMHJzbCTCSj4d0dfNiNUFHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.39.0/24
Signature Algorithm: sha256WithRSAEncryption
03:6d:a6:f0:08:35:36:ef:50:58:73:35:65:41:94:fe:ec:09:
72:9a:6a:a2:4e:36:bc:96:df:88:4b:1a:4b:6f:78:73:8d:87:
a5:4e:eb:1e:a6:29:db:ef:f0:cd:14:8f:d3:c1:df:5b:1b:3e:
9f:bd:d2:f2:36:21:f1:b4:4d:78:5b:c6:a4:30:12:21:39:d2:
e2:37:1e:49:7f:14:99:69:8c:2e:ed:15:c5:58:ff:b0:d2:4d:
da:c9:61:49:f1:12:66:af:b3:e7:c9:21:1e:62:e1:5d:72:9d:
f2:61:ab:f8:67:2a:7c:13:28:da:7e:55:bc:e2:08:21:6d:34:
16:71:9e:86:dd:ee:7a:1b:2c:18:f9:60:f3:3f:31:2a:70:8e:
1e:71:78:c5:99:16:16:9f:89:ec:9a:95:b2:2d:bb:5f:a3:fe:
de:ee:6a:26:22:a5:cf:a2:3c:cc:60:62:82:7c:17:25:7a:c7:
f7:9f:66:63:89:1f:3f:6a:8d:1c:b3:df:63:a5:75:cc:d0:60:
ca:27:96:83:26:2f:ca:3b:c6:ae:cb:79:ca:c2:cf:a0:6c:64:
36:aa:47:e2:83:6f:a3:40:8a:2b:56:6c:5d:ab:d5:ef:cd:f9:
30:8f:b0:cc:84:33:b1:da:05:58:78:d4:d0:7f:e8:7c:05:fa:
74:68:5a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:06 2024 by rpki-client on console-ams.rpki-client.org