Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/vcM7mB9_YHeaFfbo-tSoB1feQNA.roa
File: vcM7mB9_YHeaFfbo-tSoB1feQNA.roa (raw, json)
Hash identifier: egzyUB9QlJpwR2aKiXPUnrTvHte/8WA+Mq//D/eI+fk=
Subject key identifier: BD:C3:3B:98:1F:7F:60:77:9A:15:F6:E8:FA:D4:A8:07:57:DE:40:D0
Certificate issuer: /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial: 01856C0A3F011496898DA4CAAFADFC6D6403
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/vcM7mB9_YHeaFfbo-tSoB1feQNA.roa
Signing time: Sun 01 Jan 2023 06:34:48 +0000
ROA not before: Sun 01 Jan 2023 06:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59437
IP address blocks: 91.226.226.0/24 maxlen: 24
2a0c:3c80::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:3f:01:14:96:89:8d:a4:ca:af:ad:fc:6d:64:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
Validity
Not Before: Jan 1 06:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdc33b981f7f60779a15f6e8fad4a80757de40d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:f4:50:bb:c8:56:3b:2d:1e:90:e9:7c:6e:
1e:e5:c2:4d:26:48:06:4c:f8:b7:79:4a:a0:47:77:
e0:e6:a6:b5:66:99:68:14:4a:5d:76:8b:5d:4f:e1:
0e:84:af:eb:22:5a:2f:46:94:e0:95:ab:a2:a3:9c:
58:83:8b:06:88:03:68:c5:35:96:95:7f:49:95:00:
09:9c:4e:f2:2f:ac:d5:7b:af:48:e1:9c:b6:75:d4:
ff:35:a0:da:f9:31:e7:fc:4c:cf:c9:5e:2e:ff:ed:
c9:3c:b3:98:c8:32:b7:31:db:46:f5:2a:e5:02:6d:
84:39:db:a1:15:89:84:4c:85:10:75:f0:80:63:40:
b7:85:dc:72:3f:d9:8f:c9:86:20:83:2c:67:e2:de:
e1:c9:b7:92:b6:4e:9d:b7:03:2c:87:17:41:a7:ac:
a3:fd:4e:04:40:6d:b7:7a:6a:b7:15:91:56:4b:3e:
7b:a1:3c:4f:87:31:0c:14:82:cf:75:2f:dd:29:8a:
88:78:ed:bd:52:96:5e:bc:23:8e:e9:3c:5a:c9:51:
bf:93:06:a2:92:59:89:1e:87:c0:59:9a:a4:f9:a3:
6d:f7:d9:fa:42:46:15:82:09:e4:97:2c:2c:7c:23:
8a:3f:27:1a:af:2f:1e:e9:4c:3b:85:d2:a3:24:ab:
0f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C3:3B:98:1F:7F:60:77:9A:15:F6:E8:FA:D4:A8:07:57:DE:40:D0
X509v3 Authority Key Identifier:
keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/vcM7mB9_YHeaFfbo-tSoB1feQNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.226.0/24
IPv6:
2a0c:3c80::/29
Signature Algorithm: sha256WithRSAEncryption
92:6a:88:54:46:9f:36:5f:f3:fa:8a:7b:66:cf:12:97:cb:fe:
6b:fc:be:ad:77:df:7b:0e:61:2f:8c:bd:32:b1:88:db:44:66:
28:79:3a:63:ba:14:6f:cd:74:7c:88:ef:98:41:9c:a0:88:31:
2a:4c:d7:0a:e9:66:ff:b5:05:f2:01:d7:98:c1:89:57:b9:82:
18:56:d2:60:6a:fe:06:31:48:7e:04:2d:a6:06:06:2e:c8:5f:
b5:9f:99:54:f3:a7:1e:51:33:3f:07:95:44:e6:a9:a3:a7:b0:
47:98:6e:c2:71:35:4c:d4:d4:77:07:d8:b0:94:45:75:1e:d7:
c2:da:73:f4:c7:dd:2e:22:11:02:02:01:45:10:84:9e:32:72:
d6:d4:8a:44:40:68:6b:4a:6f:22:d7:1b:ef:bd:2f:48:85:67:
21:3c:86:e8:a6:36:ea:2f:7d:f8:16:08:8e:14:44:9c:55:9a:
24:0e:1a:a5:77:34:40:88:64:6b:eb:5a:22:c5:d4:d4:80:16:
b7:1f:59:d7:55:af:9b:bc:ea:32:c3:cb:80:e5:f8:b1:10:42:
09:77:9c:af:a3:e3:17:05:ca:bf:35:cf:49:a4:0c:19:39:e9:
3c:27:95:bd:aa:3d:ec:d4:7f:f9:a7:93:08:e5:bf:fe:66:71:
58:60:1e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:23 2024 by rpki-client on console-ams.rpki-client.org