Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/VfaGR2ceOlQJeAta-sndBivlkFg.roa
File: VfaGR2ceOlQJeAta-sndBivlkFg.roa (raw, json)
Hash identifier: 4HQN40ereYhBM7l36JUXMrIXK5i6XtdGom1KUWVXAWU=
Subject key identifier: 55:F6:86:47:67:1E:3A:54:09:78:0B:5A:FA:C9:DD:06:2B:E5:90:58
Certificate issuer: /CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Certificate serial: 01857039A59132435C36ADADF2E5906C640C
Authority key identifier: 03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/VfaGR2ceOlQJeAta-sndBivlkFg.roa
Signing time: Mon 02 Jan 2023 02:05:04 +0000
ROA not before: Mon 02 Jan 2023 02:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209947
IP address blocks: 212.119.36.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:a5:91:32:43:5c:36:ad:ad:f2:e5:90:6c:64:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Validity
Not Before: Jan 2 02:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55f68647671e3a5409780b5afac9dd062be59058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e1:36:8d:78:8f:c7:54:0e:2d:ec:eb:ee:a7:
fb:84:ba:2f:a9:3d:ed:40:c1:4c:eb:27:f7:ff:24:
b0:e0:66:bf:2c:39:10:8a:12:f0:1b:3b:3c:cc:59:
68:6c:36:b9:eb:18:8f:b3:3a:5e:5c:fb:15:a6:89:
df:91:05:95:f5:ea:3e:a9:35:20:5c:d4:dd:f5:89:
f5:72:64:59:00:9d:29:50:3f:83:59:24:8a:2e:b7:
8a:65:1d:3b:40:9f:97:22:eb:6f:05:4c:1e:64:c7:
ef:03:68:ef:86:cd:b4:eb:69:db:0f:a1:65:01:2b:
36:16:fb:09:1f:f6:a4:90:78:11:10:ce:eb:4c:e5:
21:fc:e1:69:d5:56:74:c3:8d:90:c6:69:99:e1:d5:
83:da:49:74:71:97:09:0e:ff:d7:f7:9b:57:0b:36:
28:7e:ad:70:1d:60:29:73:5c:22:fc:0f:bf:72:8b:
17:c0:a2:04:2c:a7:60:cd:25:f1:02:b4:3d:66:f6:
7c:81:68:93:5d:62:31:5e:ed:2a:c5:2b:f5:10:f6:
04:f0:14:b8:5d:ed:25:c4:80:a4:34:ed:e0:a2:20:
68:a0:6c:25:d0:7e:8a:c9:5d:9d:df:20:a7:af:66:
f1:6b:72:9c:e7:80:ff:e2:11:ac:8d:3b:25:75:fe:
93:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F6:86:47:67:1E:3A:54:09:78:0B:5A:FA:C9:DD:06:2B:E5:90:58
X509v3 Authority Key Identifier:
keyid:03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/VfaGR2ceOlQJeAta-sndBivlkFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.119.36.0/22
Signature Algorithm: sha256WithRSAEncryption
28:64:1c:19:72:99:06:69:eb:88:2e:a3:dc:d7:f7:c8:e2:ad:
18:cd:c8:f8:6f:6c:6a:1d:88:01:89:3d:4e:79:4c:26:6e:39:
5c:9e:a5:a3:73:f3:58:8a:31:18:65:29:0f:50:fa:b6:5f:2a:
53:d7:c1:94:8b:fe:6b:d2:42:8f:67:04:fb:d4:24:03:67:28:
cb:29:b6:ea:9f:4c:56:6f:90:af:49:d7:f3:d1:22:23:97:8d:
7a:57:c7:e4:72:63:27:f6:d5:42:79:76:b2:40:5b:d0:2c:ed:
f4:73:b4:08:0f:5c:a9:53:a6:da:b7:f3:52:aa:a3:37:21:a2:
05:ee:57:a7:a5:7c:f2:1a:f2:24:98:e1:14:24:1d:ca:ee:16:
ef:1d:75:6b:2a:08:47:1e:e0:1a:b0:89:e6:70:7a:b2:30:cb:
28:86:f7:04:25:42:b8:10:e6:90:e0:1b:fc:87:bd:e4:d4:12:
07:54:5f:49:9b:86:9f:5e:1e:38:e4:a9:f2:f4:7d:9c:8e:d1:
21:81:f6:65:49:43:7a:4a:ff:62:0f:fe:0f:d9:b0:e1:13:d5:
e4:a5:4c:0d:45:44:22:43:99:70:d9:63:26:48:f2:3a:43:91:
d0:77:14:59:5d:23:ba:15:4b:9f:76:c4:46:9f:3c:f6:b4:1a:
64:80:6d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:16 2024 by rpki-client on console-fra.rpki-client.org