Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/VXNnPjfPIfpkShrw-1A6Ow6ZK4s.roa
File: VXNnPjfPIfpkShrw-1A6Ow6ZK4s.roa (raw, json)
Hash identifier: ylCtiLOfHVWi8Nd4dT2v2l/v+L1/5vTCVJ8R/KjVMLE=
Subject key identifier: 55:73:67:3E:37:CF:21:FA:64:4A:1A:F0:FB:50:3A:3B:0E:99:2B:8B
Certificate issuer: /CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
Certificate serial: 01856C1CC52E00852EB2EE51046C6E1B52DE
Authority key identifier: FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/VXNnPjfPIfpkShrw-1A6Ow6ZK4s.roa
Signing time: Sun 01 Jan 2023 06:55:02 +0000
ROA not before: Sun 01 Jan 2023 06:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2871
IP address blocks: 92.42.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:c5:2e:00:85:2e:b2:ee:51:04:6c:6e:1b:52:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
Validity
Not Before: Jan 1 06:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5573673e37cf21fa644a1af0fb503a3b0e992b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:50:a5:d5:45:9b:69:85:5e:5c:fd:15:54:37:
69:4d:4e:12:31:43:b1:e8:3f:b9:8e:ed:ce:0e:24:
d6:70:9a:aa:88:ff:45:60:26:67:d3:e5:08:9f:d9:
43:01:f1:2e:a8:4f:bf:de:35:71:3e:ad:92:55:87:
d4:56:d7:cf:09:35:09:75:7b:b8:9d:c0:0a:2c:82:
3d:10:91:e4:f4:73:a0:23:0a:62:e6:13:a5:3d:6b:
51:36:19:9d:8d:56:0c:60:25:1a:3f:88:cc:26:b1:
0f:46:4f:c6:d4:53:09:01:e1:98:96:ce:76:3e:97:
e2:fd:67:d4:11:bb:3d:21:4c:53:60:3f:61:17:9e:
4e:85:f5:45:a0:b8:f8:33:8c:4d:02:2e:05:63:8e:
49:7c:f0:ca:6f:26:a0:35:c2:f5:a2:b5:85:cb:df:
80:2a:a4:be:af:df:f7:06:9f:14:86:03:76:bd:43:
f8:12:89:2a:4f:93:00:65:2a:75:84:b9:4c:13:73:
52:65:2d:17:f7:3f:f3:bf:92:9a:36:56:23:88:83:
2c:2a:f9:72:ce:cc:ad:06:0f:c2:0a:52:4a:45:cc:
2c:a4:cc:11:14:b1:92:7c:8e:70:90:18:49:4a:05:
60:0a:50:ac:16:18:97:39:66:c9:e8:e9:32:79:43:
03:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:73:67:3E:37:CF:21:FA:64:4A:1A:F0:FB:50:3A:3B:0E:99:2B:8B
X509v3 Authority Key Identifier:
keyid:FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/VXNnPjfPIfpkShrw-1A6Ow6ZK4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.141.0/24
Signature Algorithm: sha256WithRSAEncryption
35:b5:d2:d0:93:35:15:b7:76:81:14:46:56:a4:bc:7a:17:2b:
d8:8b:1e:a1:64:4d:ed:3d:89:d7:27:7b:47:25:54:80:7c:07:
42:6e:6a:9a:b4:45:23:2e:79:78:cc:a4:17:da:a5:8b:77:e2:
a6:29:88:96:9a:25:76:77:ed:6e:72:41:e2:4b:da:7f:74:57:
21:5d:a9:b1:81:ef:1e:38:ba:d9:27:0b:9d:fd:86:4a:67:c8:
16:58:d0:5d:22:44:5e:99:3d:fd:45:02:1f:61:52:a1:4e:0c:
55:7d:5d:3e:f3:f0:26:07:b9:6a:ff:57:c7:5f:dc:d0:54:0c:
41:20:8c:4d:d7:b3:85:00:e1:41:3a:5f:59:db:a3:81:42:30:
d7:ce:61:c8:69:6e:60:86:d6:aa:da:9a:f9:cf:4a:09:9e:1a:
fc:6c:96:fa:a5:7c:77:e6:1e:20:a2:b6:7d:18:d5:77:db:89:
63:9e:41:9e:7d:5c:03:e3:f2:53:63:69:da:b2:ea:66:55:a8:
f0:60:e1:88:f8:41:65:1d:fa:0b:89:58:cf:a9:e5:34:38:fe:
56:92:85:64:dd:19:35:47:4e:4b:3f:34:3d:ab:c5:64:1c:01:
52:fd:5e:bf:3a:d8:10:e0:ef:50:42:bf:3d:64:87:39:4b:f1:
a3:a7:ce:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:34 2024 by rpki-client on console-fra.rpki-client.org