Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/VNWTmq2SqdsBaNaSzwmtczTL_RM.roa
File: VNWTmq2SqdsBaNaSzwmtczTL_RM.roa (raw, json)
Hash identifier: eAJAyRDZcYeVI+tvmeLOsv3VIMCT0H+x1eygK1zZxN8=
Subject key identifier: 54:D5:93:9A:AD:92:A9:DB:01:68:D6:92:CF:09:AD:73:34:CB:FD:13
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 018A5EF589D758599132D2BE8C9CE3098586
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/VNWTmq2SqdsBaNaSzwmtczTL_RM.roa
Signing time: Mon 04 Sep 2023 06:51:04 +0000
ROA not before: Mon 04 Sep 2023 06:51:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 212.24.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5e:f5:89:d7:58:59:91:32:d2:be:8c:9c:e3:09:85:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Sep 4 06:51:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54d5939aad92a9db0168d692cf09ad7334cbfd13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:73:89:20:f2:3a:db:b6:06:17:b6:59:89:39:
30:98:fc:cc:6e:2b:40:d0:aa:9d:95:7e:69:61:94:
a8:3b:89:93:5e:68:96:93:f4:e8:f3:1c:34:02:63:
1d:3f:87:7e:b6:7d:75:12:f3:7a:44:aa:ac:1d:1a:
e5:8d:13:9c:88:b8:7d:09:d3:36:ca:1e:9b:c1:b6:
5c:36:1c:47:27:4a:15:59:9c:3a:38:e5:43:f0:d9:
ba:00:28:e7:99:f8:ed:f7:17:05:22:83:46:bc:1a:
75:fb:54:1b:87:97:06:28:c3:52:5e:33:23:09:24:
3d:29:ec:47:55:27:f3:ea:e5:44:ed:69:bb:46:37:
db:e0:2c:10:6b:ec:ac:3b:a6:27:62:4a:52:32:1e:
2e:98:0a:a7:c3:6b:ec:1d:23:74:29:e7:64:11:91:
cc:44:cd:16:db:d0:77:51:99:62:17:70:e1:ca:07:
01:db:38:61:85:99:4c:98:3b:a9:d6:68:f2:d8:61:
6d:9a:14:46:e5:b8:bc:8e:16:80:44:42:d3:0a:4d:
1e:ac:5b:54:80:64:3c:6a:34:a1:f8:cb:0e:16:68:
29:43:0e:a6:84:dd:74:f8:e7:23:b8:6c:b3:a4:8a:
10:70:69:25:78:d6:a1:5d:bd:fe:7e:83:4a:8a:12:
6b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D5:93:9A:AD:92:A9:DB:01:68:D6:92:CF:09:AD:73:34:CB:FD:13
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/VNWTmq2SqdsBaNaSzwmtczTL_RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.113.0/24
Signature Algorithm: sha256WithRSAEncryption
75:dd:dc:78:3b:b0:fd:e6:86:8d:97:7f:42:11:3b:31:40:3a:
25:81:9f:5a:75:ac:23:6e:3e:48:dd:b7:21:a9:88:d0:2f:fd:
54:24:c5:a8:c2:34:fd:71:af:65:9f:94:03:4b:06:62:a8:d9:
ec:3d:c5:e2:81:fe:a1:b6:1f:73:c2:c2:83:95:12:85:1c:42:
2f:12:b2:a4:c8:b1:98:a0:98:62:18:31:12:78:0c:b4:95:b4:
2f:95:30:dc:b1:92:5f:d5:ab:d9:22:53:5b:55:db:2d:75:21:
30:02:e6:0e:f7:57:ff:4e:7b:9f:3d:9a:c8:f7:85:11:59:f0:
48:07:e6:80:81:e8:78:5d:b9:78:d7:10:5c:ee:76:fd:98:5d:
9f:fc:b8:bf:3b:78:66:07:b2:5b:cf:18:d3:80:6e:fd:7e:6a:
fc:fe:96:64:c7:36:7e:58:ab:aa:c1:ad:55:d7:fa:1f:f2:1e:
0f:6f:a0:91:a3:4e:ae:37:dc:e5:a8:33:a3:c4:67:ae:9c:3f:
b6:4e:6b:57:6e:f4:f7:b3:98:7b:bc:4a:f4:61:d2:3d:a6:57:
64:d5:17:10:51:50:f1:c5:51:79:7d:72:3c:9f:54:82:bf:d6:
8a:51:d3:85:1a:5c:c5:fd:94:ce:12:59:34:15:82:3a:cf:b4:
43:5f:40:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 10:12:23 2023 by rpki-client on console-ams.rpki-client.org