Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/vtpyDD7rsOZcJF0hK_--9bts6yM.roa
File: vtpyDD7rsOZcJF0hK_--9bts6yM.roa (raw, json)
Hash identifier: 7AVPi2vdm4UpqXNyqqVkRB2IYgYULVUdAW/OCDNpDuI=
Subject key identifier: BE:DA:72:0C:3E:EB:B0:E6:5C:24:5D:21:2B:FF:BE:F5:BB:6C:EB:23
Certificate issuer: /CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Certificate serial: 01856C0A63064E6063E4F4596A5AECACCAFA
Authority key identifier: 8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/vtpyDD7rsOZcJF0hK_--9bts6yM.roa
Signing time: Sun 01 Jan 2023 06:34:58 +0000
ROA not before: Sun 01 Jan 2023 06:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57231
IP address blocks: 109.105.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:63:06:4e:60:63:e4:f4:59:6a:5a:ec:ac:ca:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Validity
Not Before: Jan 1 06:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=beda720c3eebb0e65c245d212bffbef5bb6ceb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:95:9e:47:7f:33:14:b2:6f:50:e1:25:be:
0d:a2:5f:a4:5e:d2:a7:0c:72:35:49:fb:43:36:e1:
2f:4c:97:82:54:6e:fa:d3:de:8c:f2:ff:80:33:cc:
21:ca:3f:1e:b3:9d:e1:60:6d:69:15:52:0e:27:fc:
aa:5a:cb:0a:2e:d0:50:8d:61:e7:f2:aa:86:23:b8:
1f:a9:25:16:35:47:00:54:13:0d:29:95:26:ee:70:
47:d9:0a:10:a7:67:8a:fe:b1:70:1e:61:69:ac:fd:
97:95:ac:05:96:44:da:ed:23:ea:fe:1f:4f:36:56:
f6:71:85:d2:94:94:62:ce:26:a7:6d:9b:67:79:6a:
31:14:33:f2:3a:71:fb:82:24:4c:5f:30:e4:3a:96:
83:d4:63:98:41:2d:91:cb:78:ae:c5:9b:e4:01:a1:
bb:c8:78:06:94:3f:2f:06:cb:41:0c:12:27:d6:9d:
f8:68:0b:30:0e:12:28:eb:7d:86:50:a4:fa:aa:14:
e5:b0:ce:56:97:2a:31:03:1e:f0:fd:86:7e:54:9e:
fe:86:4d:ec:08:b5:db:06:8f:55:70:37:79:74:a3:
40:57:71:ea:69:73:52:95:7a:b2:66:36:e5:f2:dc:
cc:27:80:09:47:70:70:81:4b:21:89:a7:d0:a1:4e:
04:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DA:72:0C:3E:EB:B0:E6:5C:24:5D:21:2B:FF:BE:F5:BB:6C:EB:23
X509v3 Authority Key Identifier:
keyid:8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/vtpyDD7rsOZcJF0hK_--9bts6yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.159.0/24
Signature Algorithm: sha256WithRSAEncryption
76:84:17:c6:ac:ee:be:c2:34:77:89:58:d0:df:59:87:fb:3c:
d5:21:21:c6:8e:c0:cd:51:5a:31:94:bd:e3:ab:44:72:50:e5:
2a:37:19:76:fb:bb:ff:67:1f:93:7b:46:2e:37:9e:f8:69:aa:
a7:af:d6:44:3b:01:db:57:bb:e1:6f:de:42:d3:60:67:0b:17:
f4:2d:04:8f:68:cb:e7:a9:8c:1d:2a:95:0c:29:ec:c0:d3:ad:
fd:08:38:4c:33:81:1f:81:e3:20:28:67:76:df:bd:a7:ab:c4:
15:26:c9:49:53:43:9f:b2:cc:64:8e:f4:82:34:b1:40:d8:70:
12:39:38:ad:4e:fc:f0:20:ce:d9:d9:d9:3b:e9:53:fb:69:32:
45:62:30:bb:4c:66:2f:65:91:44:20:5d:15:6d:64:13:86:88:
22:8d:63:9c:4f:d9:35:34:cd:d4:55:04:67:89:0a:51:36:82:
f4:2d:d5:8b:45:db:17:4c:f5:52:53:c4:18:f6:0d:bd:47:aa:
ce:dc:7f:6e:11:03:cb:08:18:71:a7:f8:a2:67:bd:6b:6c:88:
06:2a:69:9f:2b:ee:1a:dd:9e:c1:65:83:7f:70:33:06:8d:f2:
e0:c9:cb:be:fc:d5:9d:23:59:68:13:6b:07:c1:a4:ff:b9:73:
1b:b0:81:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:14 2024 by rpki-client on console-fra.rpki-client.org