Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/VGaW2H3cM4XAp4BWvyrVUgGXlR8.roa
File: VGaW2H3cM4XAp4BWvyrVUgGXlR8.roa (raw, json)
Hash identifier: ALIeQjT22rs01o+zVl7NRysLk0MrLduVleFlBuivHq8=
Subject key identifier: 54:66:96:D8:7D:DC:33:85:C0:A7:80:56:BF:2A:D5:52:01:97:95:1F
Certificate issuer: /CN=36900183cf08a6e5bc807846294a46062e190e3b
Certificate serial: 018CC2DB43769CD3920BF0E94BAC4C27B2FA
Authority key identifier: 36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/VGaW2H3cM4XAp4BWvyrVUgGXlR8.roa
Signing time: Mon 01 Jan 2024 02:29:58 +0000
ROA not before: Mon 01 Jan 2024 02:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142111
IP address blocks: 80.91.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:43:76:9c:d3:92:0b:f0:e9:4b:ac:4c:27:b2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36900183cf08a6e5bc807846294a46062e190e3b
Validity
Not Before: Jan 1 02:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=546696d87ddc3385c0a78056bf2ad5520197951f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a8:47:4d:32:ba:72:f9:aa:97:98:d2:41:b8:
f2:69:f6:b6:88:47:e1:f8:ff:09:a8:03:e9:6f:a5:
a5:72:9d:66:1f:de:54:85:a1:41:4b:e3:f4:4b:1e:
82:8e:b8:67:31:24:3b:2a:ac:46:d0:91:9a:f7:66:
ad:1e:09:9a:9f:7c:13:3f:ea:c9:ce:26:53:40:ad:
21:f5:63:dd:17:be:90:8c:73:23:82:a9:16:db:3b:
01:44:a2:f6:16:d7:c1:16:fe:72:35:8a:25:97:76:
c8:e0:7d:7e:8e:08:e0:57:95:2f:80:70:b5:47:ca:
f7:bc:d8:f4:29:72:74:74:88:b0:5f:ff:63:11:5b:
1b:c5:d8:1a:a1:db:a5:bb:3e:23:ff:58:ba:27:63:
1c:65:10:64:ec:ef:87:4d:c4:9c:d9:82:df:4e:00:
3c:28:70:39:33:69:c6:4b:c4:f0:1e:21:05:b2:a6:
87:36:12:85:2c:64:a3:b4:4b:b5:69:92:6d:34:0c:
5a:30:36:93:8c:e1:5c:72:ed:7d:e4:09:59:24:bf:
dc:43:e1:67:88:f8:a4:34:9f:cf:2a:7b:63:eb:64:
19:a2:51:a5:56:70:82:d9:ae:3b:3b:29:bf:1f:97:
76:9d:5a:90:59:c8:ef:af:98:dc:18:43:33:11:e9:
d9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:66:96:D8:7D:DC:33:85:C0:A7:80:56:BF:2A:D5:52:01:97:95:1F
X509v3 Authority Key Identifier:
keyid:36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/VGaW2H3cM4XAp4BWvyrVUgGXlR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.218.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:84:05:0a:9a:2e:79:73:28:82:2b:80:4b:c7:bd:eb:76:cf:
c0:95:3f:e5:5b:a1:5a:74:64:2e:ed:14:7e:e8:4e:92:d3:be:
08:fe:50:85:7d:f3:ad:e8:28:72:e5:4d:2a:9a:6b:39:2c:13:
b2:2b:9b:97:f5:c3:16:08:31:5f:4d:33:c5:1a:cc:7e:c9:f6:
ca:9f:a8:f1:07:e5:6e:a8:4f:8d:0a:22:73:6e:24:f9:4e:c0:
b0:b4:fc:39:c0:ff:c8:05:be:e4:d5:b7:6c:2f:5e:8c:c0:04:
a0:66:cf:92:49:f5:ab:2e:e6:3b:7f:b6:68:5b:82:c8:e8:00:
ce:e1:07:ac:6b:f0:e7:35:87:be:ad:a5:4b:a7:b8:06:0a:ab:
8a:6e:e2:a7:ea:49:38:29:d7:7b:dd:62:3e:65:f6:9e:a3:4f:
7b:df:c3:a3:1e:0e:17:22:c8:7d:65:a5:56:69:66:bf:8c:b3:
36:44:3f:51:18:7d:8e:83:84:e0:ba:22:94:8d:12:01:4c:12:
33:d0:80:42:2e:7c:68:30:50:eb:3f:81:a6:1d:11:a1:c3:04:
6f:39:42:52:e3:15:99:03:62:ac:05:c4:be:c9:69:5b:da:97:
1a:37:30:1f:37:c9:ab:3d:6d:60:11:e4:7e:62:5b:5f:58:72:
bf:6b:9e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 4 06:56:18 2024 by rpki-client on console-fra.rpki-client.org