Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VZVeQfsEjZA67IK9WUda6H8U9cU.roa
File: VZVeQfsEjZA67IK9WUda6H8U9cU.roa (raw, json)
Hash identifier: ZkuZvJzk1QLqgQdjJvoIVDv8+LY1KQ38rZalAPwoqoM=
Subject key identifier: 55:95:5E:41:FB:04:8D:90:3A:EC:82:BD:59:47:5A:E8:7F:14:F5:C5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A1C52D3D2C7B79F36167B2362893A8721
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VZVeQfsEjZA67IK9WUda6H8U9cU.roa
Signing time: Tue 22 Aug 2023 08:18:24 +0000
ROA not before: Tue 22 Aug 2023 08:18:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205175
IP address blocks: 31.13.212.0/24 maxlen: 24
2a00:1728:31::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1c:52:d3:d2:c7:b7:9f:36:16:7b:23:62:89:3a:87:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 22 08:18:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55955e41fb048d903aec82bd59475ae87f14f5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1b:7e:fb:53:34:44:7b:c7:18:7c:5b:78:71:
de:68:72:68:b7:98:35:5c:73:59:1a:75:71:57:32:
35:83:3c:c4:0e:cd:5d:41:03:d2:03:c0:5e:6f:34:
2a:39:fb:18:06:84:f1:a4:33:d9:c1:e3:17:ce:4d:
e0:10:e0:fd:46:34:3e:6e:b6:81:87:c7:7d:53:6e:
fe:72:88:3c:20:63:b4:44:c5:dc:1c:44:9b:d3:e4:
af:5e:0e:a4:4f:16:f7:d4:25:bc:11:01:65:9a:c7:
0b:87:58:1e:11:bf:c4:b6:ef:e7:7b:41:da:f4:c3:
d0:a1:81:36:c8:f0:8b:78:fd:25:26:29:57:71:37:
a7:a4:8a:ee:31:b9:1b:0a:4f:13:90:1a:a8:07:3c:
34:36:10:33:45:54:8c:cf:ae:d4:c8:d1:9a:b9:a6:
7b:9d:28:12:d2:c1:a2:92:b5:13:0e:9a:bf:7f:e6:
0b:b9:61:df:a7:2e:40:f9:90:2d:e4:86:40:39:80:
2d:d9:09:77:6c:66:98:7a:53:af:c8:63:62:5a:09:
a5:21:70:26:62:d8:0c:2a:d7:e1:19:94:3a:2d:c6:
45:a3:ff:91:20:3e:56:73:8d:5d:32:2a:f5:e9:44:
e1:2d:7a:d6:67:40:01:e8:4d:be:e7:9b:08:dc:12:
5d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:95:5E:41:FB:04:8D:90:3A:EC:82:BD:59:47:5A:E8:7F:14:F5:C5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VZVeQfsEjZA67IK9WUda6H8U9cU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.212.0/24
IPv6:
2a00:1728:31::/48
Signature Algorithm: sha256WithRSAEncryption
a4:24:e5:80:88:d1:81:f3:b6:28:a2:8b:16:17:4b:b9:ad:4f:
69:95:d0:8d:2b:00:68:53:b2:a6:6b:40:03:23:0c:e4:da:46:
8c:6f:1b:6c:be:03:26:28:d6:ee:0d:2c:81:9d:4b:4a:48:ef:
aa:05:34:d4:79:cc:5e:23:da:43:01:84:7f:5a:85:9b:fe:5f:
c9:93:96:fd:a4:4a:e5:35:80:7f:9c:4a:d4:e7:3e:50:f1:7d:
b9:07:e0:0c:cd:70:9e:11:cd:08:90:a8:6b:f6:84:05:8b:06:
8a:b7:e9:41:99:cd:a1:7e:f0:6e:2d:b7:d6:93:06:aa:c4:91:
d2:8d:1e:cf:3b:1f:f2:e1:fa:6b:5c:2d:51:b1:17:06:6b:47:
4f:b5:71:47:af:be:34:d4:63:56:ea:03:86:35:38:15:ee:91:
69:3f:e6:20:23:d3:9e:ee:e0:ee:12:e1:2b:fb:8c:b6:96:30:
80:02:4b:02:6a:a2:38:98:c9:a0:1e:e0:64:3a:6b:99:29:f4:
79:85:12:63:ba:58:ca:72:ab:0c:d9:26:e7:89:df:eb:a1:17:
6f:85:5d:2b:3a:11:88:f3:05:10:a4:a5:6e:f0:71:ba:5a:b6:
70:cd:f8:8e:3d:19:8e:5f:a7:78:bc:1d:40:31:72:cf:40:0a:
89:5a:e4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:34 2024 by rpki-client on console-ams.rpki-client.org