Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/VV0Yyr9bULiGwA-vJ-7CVm_F5_g.roa
File: VV0Yyr9bULiGwA-vJ-7CVm_F5_g.roa (raw, json)
Hash identifier: Ak/GAHgOt1zq0zRDs8s+Tly3+ypCgNuWhQWGY5I0Ii8=
Subject key identifier: 55:5D:18:CA:BF:5B:50:B8:86:C0:0F:AF:27:EE:C2:56:6F:C5:E7:F8
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0185BA1255DB985349774ABD70407A86246B
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/VV0Yyr9bULiGwA-vJ-7CVm_F5_g.roa
Signing time: Mon 16 Jan 2023 10:14:01 +0000
ROA not before: Mon 16 Jan 2023 10:14:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 193.93.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Jan 2023 06:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ba:12:55:db:98:53:49:77:4a:bd:70:40:7a:86:24:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 16 10:14:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=555d18cabf5b50b886c00faf27eec2566fc5e7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4a:02:6b:d8:f2:68:31:bc:8f:a1:d5:fa:c5:
55:b0:77:27:35:be:03:32:80:6b:26:9d:24:8b:fe:
27:16:4d:e6:09:36:94:25:47:68:fe:61:c0:de:38:
c5:2d:a8:a9:61:b2:11:43:e0:00:11:59:46:b4:e6:
1c:43:bf:3d:4f:4e:4c:77:8e:57:5b:7b:3a:5f:1d:
ba:ed:8b:86:d4:f8:24:e7:81:3a:e7:78:a6:8c:da:
71:1c:22:a4:1a:de:2b:ef:e2:cb:81:b5:9f:a6:0d:
98:98:51:08:aa:12:76:8e:e5:41:ce:54:56:f0:26:
79:e7:7c:3a:6d:ee:9d:c4:32:03:50:9c:89:8e:53:
a6:a0:f6:58:e6:4e:b4:0d:71:2f:b9:6d:d9:0f:62:
36:ba:8e:f0:dc:f9:b4:b4:6f:5c:fc:ac:07:86:a2:
be:43:e7:cb:03:48:b7:ef:10:13:d9:3f:49:25:0d:
18:f9:81:71:f0:cb:a7:cd:e4:06:df:f6:23:4d:f9:
84:58:c0:5f:05:6d:0a:63:f0:fe:ef:ca:fb:76:63:
e3:cd:c0:01:37:86:89:99:70:8a:34:36:18:24:a8:
13:9b:85:b4:82:b7:96:56:79:ca:d4:d5:14:c6:35:
24:fe:a1:0a:25:22:9d:71:61:3b:20:8f:15:bf:74:
4e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5D:18:CA:BF:5B:50:B8:86:C0:0F:AF:27:EE:C2:56:6F:C5:E7:F8
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/VV0Yyr9bULiGwA-vJ-7CVm_F5_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.54.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:2c:30:64:0e:a9:d3:c3:22:5f:20:88:e6:3c:4c:4d:9b:ff:
cc:d2:99:db:48:de:0d:ee:7b:dc:a4:fc:53:22:01:00:a8:84:
06:27:c0:af:57:da:a5:0b:61:14:be:56:d9:aa:d5:d0:8b:d6:
8c:52:98:71:d5:87:ea:b0:d2:2f:ad:f9:2f:81:a8:aa:cc:91:
61:74:f7:bd:38:5b:22:b7:4c:c8:1c:81:1e:16:73:8c:6e:61:
2f:47:77:d3:20:df:34:e2:05:b3:d2:6a:1e:b8:69:ca:b7:2e:
90:8d:cd:ec:9d:04:94:9f:2c:9d:a4:9e:ee:f2:df:51:c9:ac:
ce:d5:43:12:e0:98:8c:7d:7c:a6:41:aa:b6:7a:4c:c0:da:d8:
dc:6b:be:5d:52:42:b8:9b:04:93:8d:05:d4:b8:f6:4c:62:52:
7e:68:a4:87:b7:d8:f4:d0:6e:31:ae:fc:25:e6:a5:bb:a1:43:
df:4f:75:b6:b2:37:76:38:59:35:74:18:9a:57:28:96:f5:54:
1a:99:02:51:7e:ee:51:36:12:59:97:68:f0:1f:97:a0:6e:0b:
d0:b9:9d:dd:02:d2:3e:23:d3:eb:28:6f:bc:5c:0e:cc:dc:38:
62:e3:08:77:8c:8e:a4:07:1b:bc:d6:04:ec:44:82:03:9a:dc:
ec:85:25:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org