Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/VeOs1t7bqlWGNU_yPBFgeNcXRX8.roa
File: VeOs1t7bqlWGNU_yPBFgeNcXRX8.roa (raw, json)
Hash identifier: w/cwGUQ0puxXAGzoxZAhYfD7KGL8I4fM7mI9Ty7LqQ4=
Subject key identifier: 55:E3:AC:D6:DE:DB:AA:55:86:35:4F:F2:3C:11:60:78:D7:17:45:7F
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018572470ACEFF2586AA6EB0D5571B2C679A
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/VeOs1t7bqlWGNU_yPBFgeNcXRX8.roa
Signing time: Mon 02 Jan 2023 11:38:56 +0000
ROA not before: Mon 02 Jan 2023 11:38:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50113
IP address blocks: 5.101.88.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:47:0a:ce:ff:25:86:aa:6e:b0:d5:57:1b:2c:67:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:38:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55e3acd6dedbaa5586354ff23c116078d717457f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:23:70:65:a3:0b:7e:5d:2f:0c:e0:06:8f:4f:
ba:c8:8a:31:5f:b6:be:90:1a:91:0b:02:b6:de:04:
c5:8b:60:5c:b8:03:cf:89:fa:22:b4:41:a6:31:47:
30:3e:82:a1:1b:2c:b0:3c:12:3b:18:dd:d3:3c:d2:
cb:45:fe:81:0b:b8:a8:e0:2e:57:13:3f:d6:4d:37:
e0:bb:9f:ec:ae:fa:0e:b2:13:41:7f:96:6d:90:6f:
64:d7:53:5b:43:7e:fd:ad:a7:b2:29:22:ca:9f:a1:
b7:9c:04:b6:09:99:ca:ea:40:1e:f9:0d:1d:74:c9:
27:59:0e:35:02:96:55:06:29:d0:b2:2f:ad:3b:4f:
5b:53:2d:41:86:c7:25:7b:b3:f6:ff:e2:cf:57:e8:
fc:04:9e:41:9a:c8:86:b8:b0:c6:3c:34:54:8f:0b:
b2:18:13:7f:57:e9:5a:16:0d:85:7e:db:09:b5:5c:
b8:98:82:64:00:15:8f:4d:18:97:57:c2:6a:84:9f:
e3:f1:14:b7:d7:14:21:18:e7:87:ec:3a:74:5d:6f:
e5:28:ec:9e:66:34:a3:00:c6:a7:a7:b6:80:73:b9:
e5:f5:c9:00:62:76:0b:07:52:8e:4f:b1:c6:81:97:
3a:86:02:43:85:0a:0f:36:62:87:f0:e0:de:ba:2a:
ee:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E3:AC:D6:DE:DB:AA:55:86:35:4F:F2:3C:11:60:78:D7:17:45:7F
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/VeOs1t7bqlWGNU_yPBFgeNcXRX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.88.0/24
Signature Algorithm: sha256WithRSAEncryption
07:d6:0a:7c:4b:c8:68:68:5c:f3:4b:ab:4b:02:a0:36:53:c2:
bc:8b:66:e1:b4:d3:ac:72:bb:c7:5e:28:e1:80:42:20:b3:ec:
16:76:d7:b3:0b:ed:db:68:2b:24:50:d8:90:34:13:c0:36:5f:
e3:a4:81:fa:e7:96:2d:52:bd:c7:f7:18:29:72:3f:60:cb:f5:
ae:09:84:54:88:ee:35:75:b1:6c:b3:60:9f:36:fa:a6:17:70:
87:d6:f2:2a:4e:ae:89:54:20:ec:e3:7a:73:ea:80:af:4c:f0:
05:d1:ec:ba:1f:eb:f6:10:ca:02:e6:17:3f:e0:30:e1:00:d0:
8d:0b:36:8e:ba:72:fd:12:ea:b0:39:12:08:cd:3b:0b:1e:ea:
40:ff:d7:18:c1:29:47:e4:7d:2c:51:5b:54:d6:cc:5e:3c:cc:
96:bd:f6:eb:9c:16:c0:1f:a9:f5:32:52:61:21:34:65:82:ed:
be:81:b8:4c:c5:08:46:5b:e6:1e:86:bd:4a:6d:e4:b0:4c:68:
2b:77:ab:83:a2:61:92:75:65:5a:57:71:48:7b:f5:98:0a:22:
37:2a:67:c2:52:e5:4a:12:c5:03:9f:de:3f:ca:f2:ec:3e:e5:
a0:f0:28:92:d6:3c:b7:ea:ff:f0:c4:5d:51:d3:e4:0a:fa:38:
94:78:5e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:47 2024 by rpki-client on console-ams.rpki-client.org