Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0b709f-53ab-49c9-8b83-5ae957f2cdbb/1/vn_KB1iAXr022KoJF2Y93aX7Qqc.roa
File: vn_KB1iAXr022KoJF2Y93aX7Qqc.roa (raw, json)
Hash identifier: PxhW7CTMFRGPXxDjjvm+xrZb7WWTyPfAOmfCgCOpWfg=
Subject key identifier: BE:7F:CA:07:58:80:5E:BD:36:D8:AA:09:17:66:3D:DD:A5:FB:42:A7
Certificate issuer: /CN=cb6927b169e3d0f5cb94b343381992f48536c855
Certificate serial: 018BFC58848B8B4D7628477CB2483CAA7F27
Authority key identifier: CB:69:27:B1:69:E3:D0:F5:CB:94:B3:43:38:19:92:F4:85:36:C8:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2knsWnj0PXLlLNDOBmS9IU2yFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0b709f-53ab-49c9-8b83-5ae957f2cdbb/1/vn_KB1iAXr022KoJF2Y93aX7Qqc.roa
Signing time: Thu 23 Nov 2023 13:22:21 +0000
ROA not before: Thu 23 Nov 2023 13:22:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216334
IP address blocks: 91.193.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fc:58:84:8b:8b:4d:76:28:47:7c:b2:48:3c:aa:7f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6927b169e3d0f5cb94b343381992f48536c855
Validity
Not Before: Nov 23 13:22:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be7fca0758805ebd36d8aa0917663ddda5fb42a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:9a:50:24:ab:19:9b:19:5f:de:27:22:71:
c2:3d:3b:56:4d:43:0e:a9:c8:e7:2f:a6:9c:fc:86:
b9:93:37:a1:d7:61:72:80:50:e1:79:65:15:80:24:
f4:e6:98:7e:02:06:f9:67:5e:9b:7a:d7:be:6a:52:
7f:67:6a:86:6d:67:6b:f0:7e:7f:5d:fe:01:95:76:
3e:25:8e:a9:c4:e3:cb:09:83:54:b7:1e:2d:8e:f0:
d2:69:e6:02:39:bf:f0:85:c0:1a:65:82:78:e6:95:
de:bb:32:79:70:66:4e:9d:3b:77:45:d1:4e:36:38:
35:ef:55:bd:22:b7:a0:da:da:fd:56:eb:30:72:f2:
09:b8:60:a5:d0:11:83:f3:50:e9:f2:65:52:eb:8d:
06:d3:34:76:ca:01:71:22:58:ba:af:06:53:81:48:
7f:e0:ee:82:b3:36:b6:85:90:3b:dc:3e:28:3c:c7:
a6:91:e4:77:da:15:bc:67:04:3a:aa:43:87:64:4a:
13:ea:04:30:7e:8f:84:27:7b:b5:40:00:16:2d:30:
43:cf:88:92:80:75:80:14:3e:da:e0:85:0e:e9:f9:
4d:11:eb:29:23:1f:f3:ca:08:3b:fe:fb:a9:c5:49:
b5:81:52:f8:8f:e2:24:b8:f2:01:46:a9:51:79:78:
99:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7F:CA:07:58:80:5E:BD:36:D8:AA:09:17:66:3D:DD:A5:FB:42:A7
X509v3 Authority Key Identifier:
keyid:CB:69:27:B1:69:E3:D0:F5:CB:94:B3:43:38:19:92:F4:85:36:C8:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2knsWnj0PXLlLNDOBmS9IU2yFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0b709f-53ab-49c9-8b83-5ae957f2cdbb/1/vn_KB1iAXr022KoJF2Y93aX7Qqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0b709f-53ab-49c9-8b83-5ae957f2cdbb/1/y2knsWnj0PXLlLNDOBmS9IU2yFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.43.0/24
Signature Algorithm: sha256WithRSAEncryption
40:92:6a:cc:15:6b:40:d0:60:ab:d5:77:66:d5:c8:4d:60:1d:
35:a8:72:02:a5:3d:d1:91:e1:93:7a:5c:dd:ee:68:e0:b0:45:
2c:19:37:26:0a:e6:fb:d2:05:aa:38:d6:a8:36:bf:64:45:b0:
73:e1:e2:34:bb:f5:76:97:80:0b:0e:d0:1c:6e:6f:be:fe:41:
14:ca:70:8e:25:bc:b8:07:bf:f1:2b:a1:c0:84:0e:0d:18:98:
f9:45:e6:0e:7e:d3:34:a8:34:6c:dd:b7:5d:2b:91:c2:af:08:
f5:7c:71:02:d0:c6:a5:7a:3f:66:f9:23:5d:8f:0c:a9:9e:3d:
4f:9b:fb:f4:7e:eb:04:56:d8:b5:49:b0:f6:b2:9d:a6:7a:d6:
32:0b:51:c7:5e:cd:f8:55:ca:09:cd:52:33:2d:92:6e:e1:7a:
f8:d5:84:06:74:b0:b2:2a:10:ae:73:ac:73:89:0c:8d:64:b6:
05:fe:8e:cb:c6:ab:c9:6f:53:b8:66:ca:28:fa:1e:11:d3:e5:
ec:0d:4c:64:5e:34:d2:79:3e:66:8d:42:8b:c5:c2:68:64:87:
88:65:50:46:52:3f:c5:65:a0:c1:c4:c9:fc:b1:d0:7c:9a:e3:
2b:bf:77:6f:72:07:c1:f0:b8:84:cb:a2:1b:7c:93:f0:0f:09:
9e:a3:43:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:27 2024 by rpki-client on console-fra.rpki-client.org