Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/VIFiaTGAU7606SLyGrk4kpHkz3M.roa
File: VIFiaTGAU7606SLyGrk4kpHkz3M.roa (raw, json)
Hash identifier: koC93J8hZ7D0yPYCjxELRRavMPIIcCK7n+8ff6bYw6w=
Subject key identifier: 54:81:62:69:31:80:53:BE:B4:E9:22:F2:1A:B9:38:92:91:E4:CF:73
Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial: 01856E6FCF273CF716CD497B6BB7205991FD
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/VIFiaTGAU7606SLyGrk4kpHkz3M.roa
Signing time: Sun 01 Jan 2023 17:44:59 +0000
ROA not before: Sun 01 Jan 2023 17:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211796
IP address blocks: 91.188.248.0/24 maxlen: 24
91.202.244.0/24 maxlen: 24
2a0c:6ec0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:cf:27:3c:f7:16:cd:49:7b:6b:b7:20:59:91:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Validity
Not Before: Jan 1 17:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54816269318053beb4e922f21ab9389291e4cf73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e9:bc:94:fd:7e:ce:37:5b:b6:36:0c:20:ab:
44:15:4a:26:67:f2:bd:52:c1:97:7f:45:a4:e6:25:
dd:9a:e5:12:41:95:66:96:c8:43:e1:fd:29:21:27:
9c:e3:d1:0c:28:67:3e:9f:71:d1:0a:40:44:4e:58:
84:95:0b:51:d5:eb:2a:b0:22:2c:61:db:89:21:1f:
16:3f:af:33:c6:83:00:10:34:97:d8:14:b6:2d:83:
bb:a2:34:af:82:86:0e:48:87:6a:17:8b:3e:4c:34:
22:dd:21:2e:f1:38:b3:2a:59:7f:6c:9e:9d:d7:a3:
80:3e:88:2f:6a:f3:d3:0b:75:fc:af:46:fd:7c:34:
0b:f8:72:52:53:ba:76:33:99:d4:52:3b:bd:df:5a:
56:d9:ee:62:38:fd:e2:6b:a1:f2:ae:4e:12:ec:d5:
07:ea:44:78:87:84:1a:8d:c0:1f:68:11:ff:60:33:
ee:60:6f:a4:8c:f1:3c:14:9a:37:a2:6d:77:ff:44:
96:b8:40:c7:f1:2e:27:a0:a2:74:5f:ef:8c:51:d5:
39:8a:5d:7b:97:ac:3c:96:a6:01:78:d2:38:be:02:
d2:b1:62:40:71:a4:47:ae:3e:df:a2:87:45:13:d5:
80:da:8f:06:a4:c3:20:34:88:24:81:6a:dc:34:3e:
b5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:81:62:69:31:80:53:BE:B4:E9:22:F2:1A:B9:38:92:91:E4:CF:73
X509v3 Authority Key Identifier:
keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/VIFiaTGAU7606SLyGrk4kpHkz3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.248.0/24
91.202.244.0/24
IPv6:
2a0c:6ec0:1::/48
Signature Algorithm: sha256WithRSAEncryption
8f:3b:95:7c:88:4d:c5:a9:9f:f0:30:94:d6:c7:62:1b:77:33:
bd:b9:af:c4:36:03:20:a0:85:cc:5b:fd:01:c2:0b:c2:ae:3d:
cf:c0:ae:5d:e2:24:53:fd:b1:1a:b1:8c:e8:5e:13:29:e8:ba:
03:23:73:d1:6d:59:cc:cf:41:4c:36:1c:a9:8a:a1:b7:b0:44:
c7:0e:19:dc:ec:c2:4f:34:79:72:ee:30:03:95:70:fc:65:1b:
81:dd:e1:f2:02:d8:3b:8e:da:c0:f6:ed:d0:a1:a3:90:91:23:
d1:bd:67:89:c0:a8:94:f0:16:91:e0:c6:3c:97:d6:9a:d3:d3:
c6:cf:13:ae:1a:49:db:29:a2:2a:4f:ac:ea:63:db:10:20:c8:
ef:c9:95:31:47:84:e0:5e:e7:27:be:d6:eb:da:7f:03:d2:9d:
76:cb:36:a2:1b:cc:3d:da:6e:3d:47:f9:23:a0:ee:f9:58:9c:
31:51:47:a8:d2:36:fc:64:dc:4d:b5:0c:9a:5a:d5:69:3c:7f:
92:b0:9e:47:e1:52:59:1a:f8:b9:6b:1e:db:56:79:80:eb:ac:
3f:1a:78:58:ea:9c:bd:dd:7f:d8:42:39:70:b8:29:32:2b:1f:
63:a2:cb:71:c2:7a:9d:84:a8:3a:e9:2e:b9:a9:5e:fa:4b:14:
bc:20:70:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:23 2024 by rpki-client on console-ams.rpki-client.org