Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vBvQj513JD9ACP09IO1Omg42Vwc.roa
File: vBvQj513JD9ACP09IO1Omg42Vwc.roa (raw, json)
Hash identifier: 2Df2C1nb5VbZFKTW+mE09LgYi5d2+hoIj9nV6ciDEp8=
Subject key identifier: BC:1B:D0:8F:9D:77:24:3F:40:08:FD:3D:20:ED:4E:9A:0E:36:57:07
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018CAD5109BDEE2A6918C0E97EEC83514561
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vBvQj513JD9ACP09IO1Omg42Vwc.roa
Signing time: Wed 27 Dec 2023 22:06:58 +0000
ROA not before: Wed 27 Dec 2023 22:06:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202972
IP address blocks: 45.81.112.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ad:51:09:bd:ee:2a:69:18:c0:e9:7e:ec:83:51:45:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 27 22:06:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc1bd08f9d77243f4008fd3d20ed4e9a0e365707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a4:3c:15:55:f4:40:df:61:77:86:17:60:4b:
cf:c2:53:7c:7e:96:ed:1b:9f:17:12:bd:4d:25:3a:
4f:36:7d:2e:5b:f5:8e:2c:07:3f:64:4d:20:af:13:
64:d7:59:83:1b:c6:01:d8:a3:1e:f6:87:71:5a:49:
22:b2:5a:c3:3e:ef:60:53:db:42:99:8c:b1:71:33:
73:c3:0d:02:89:45:ac:02:44:68:38:0a:fb:fa:75:
2a:af:f1:3f:97:59:9f:42:31:fb:5f:f5:f9:45:67:
ec:54:c5:27:e8:f2:8c:b0:19:7a:19:ad:ce:40:55:
15:8a:6b:ea:6e:da:4f:40:06:d5:ab:8d:25:c4:70:
cf:90:fb:6f:92:55:d5:a7:9c:a4:e8:ee:fe:93:b1:
4d:14:63:2e:94:90:d5:e4:6f:90:9f:fb:8c:bc:a8:
7e:71:a6:3a:8b:9b:57:c0:7b:fc:c9:fc:71:89:5e:
d3:c8:b3:ce:31:0d:f5:79:2a:6a:75:26:66:bf:c9:
cf:e2:90:fe:2e:bf:ff:1f:b7:e2:9e:0b:61:cb:df:
58:bb:bd:d3:68:82:ee:dd:3c:8b:10:59:38:3a:41:
51:ec:9d:3f:bc:ff:45:1d:ef:b5:7f:76:93:c8:68:
73:96:39:e3:1a:68:ee:da:74:6d:c8:93:76:c9:1f:
73:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1B:D0:8F:9D:77:24:3F:40:08:FD:3D:20:ED:4E:9A:0E:36:57:07
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vBvQj513JD9ACP09IO1Omg42Vwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.112.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e5:d4:f4:ee:c6:60:ca:29:d7:ab:f6:81:18:e4:97:2a:dd:
d5:c0:fa:0f:cc:17:bb:34:0a:96:9e:e6:db:b3:69:20:26:60:
e4:23:cc:4f:11:b2:52:7f:eb:f0:ce:d9:fe:46:f5:d4:be:6c:
0f:b2:05:6f:a5:60:74:27:cd:87:76:12:11:cb:d9:82:63:0f:
3a:a0:99:5e:0e:eb:a6:18:70:47:8d:ca:02:f6:99:3f:8d:80:
d2:24:e8:2c:44:0c:fa:c8:bd:4d:ac:b2:bd:e1:fa:28:ae:c4:
ce:59:cc:e7:be:c8:61:9d:1a:f7:b7:21:75:6b:8d:39:65:b4:
ab:fc:bc:7c:f3:88:da:d6:d9:18:1c:5b:ee:49:47:23:a1:89:
e6:5e:a2:4d:e5:1e:45:b0:d6:e3:6a:7f:b7:7d:f1:04:d4:67:
2f:f6:6e:ef:d3:55:da:5e:87:af:5f:c2:77:11:13:bf:d6:8b:
68:f6:0f:05:a5:cf:3e:38:d6:60:2d:02:85:db:f8:1c:5d:ae:
89:87:ee:8a:c7:48:d9:cf:c8:ef:77:8e:20:4d:fa:31:ee:8c:
e1:b4:2e:a8:1a:8c:40:8e:0a:8d:4e:70:1c:23:41:17:e8:98:
2e:c8:58:56:62:60:16:d7:cd:a5:60:3c:57:2a:9e:02:f5:b6:
b9:e5:55:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 22:11:25 2023 by rpki-client on console-fra.rpki-client.org