Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/Vwl4InEbu2xFySN8hxiiKtZWIIU.roa
File: Vwl4InEbu2xFySN8hxiiKtZWIIU.roa (raw, json)
Hash identifier: jnvJaYU+/3e/j52l3abGG7wyixdN8iHe0OnrWUA9ROs=
Subject key identifier: 57:09:78:22:71:1B:BB:6C:45:C9:23:7C:87:18:A2:2A:D6:56:20:85
Certificate issuer: /CN=54913026f079cda241aef4514fd353c28330e461
Certificate serial: 018736CF181451C51DE3C14DA3FDD711D5A1
Authority key identifier: 54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/Vwl4InEbu2xFySN8hxiiKtZWIIU.roa
Signing time: Fri 31 Mar 2023 08:35:54 +0000
ROA not before: Fri 31 Mar 2023 08:35:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199245
IP address blocks: 195.85.44.0/24 maxlen: 24
2a12:b940::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:36:cf:18:14:51:c5:1d:e3:c1:4d:a3:fd:d7:11:d5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54913026f079cda241aef4514fd353c28330e461
Validity
Not Before: Mar 31 08:35:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57097822711bbb6c45c9237c8718a22ad6562085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8b:35:56:9e:da:81:5a:27:4c:6d:aa:95:27:
88:f0:4d:41:d3:bb:a4:c9:30:87:31:52:59:09:62:
22:e9:1f:0c:b3:4f:bf:e8:b4:ad:99:26:8a:93:73:
d7:0a:a1:1b:94:b2:a3:63:70:b2:6c:b6:30:7e:cb:
e2:c5:2e:3f:cd:a6:24:47:53:d5:98:dd:ef:61:67:
db:ac:4d:db:e7:a0:9c:01:e8:d3:86:0f:0d:21:84:
38:ea:80:72:05:63:ab:31:12:53:7b:ea:98:45:00:
d7:10:40:62:c4:1a:b4:0f:4d:5e:f0:44:42:79:33:
5c:79:f7:2c:92:32:b3:6e:6c:1a:ad:e8:7f:60:a3:
2f:64:c0:86:ba:a1:f7:07:c1:5e:a1:1c:00:8b:51:
bc:f6:f9:d5:a6:17:03:60:60:34:5a:29:6b:50:cb:
93:8f:65:07:14:79:13:94:54:fa:ba:27:a0:f6:1e:
e1:05:71:a4:b6:6a:0a:2c:16:a2:5b:07:5c:be:93:
31:bf:89:ae:b9:36:9a:c4:a3:11:be:5d:22:41:b5:
10:ed:dc:a3:50:e5:43:8b:f6:a4:35:2c:3a:13:e5:
24:1b:bf:8d:1d:1e:55:d7:bb:f0:07:34:20:e3:2c:
44:50:8b:1c:26:65:e2:a2:78:8b:aa:22:d5:16:7b:
86:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:09:78:22:71:1B:BB:6C:45:C9:23:7C:87:18:A2:2A:D6:56:20:85
X509v3 Authority Key Identifier:
keyid:54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/Vwl4InEbu2xFySN8hxiiKtZWIIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.44.0/24
IPv6:
2a12:b940::/29
Signature Algorithm: sha256WithRSAEncryption
57:98:29:2f:21:0e:79:d6:f0:4c:c8:c4:a6:7c:bd:bc:41:ec:
55:49:5a:75:ff:c2:a9:65:3b:93:de:4d:19:61:dd:82:f8:04:
31:44:09:80:e7:02:a8:35:39:ae:eb:ba:ed:2c:fb:f8:0b:f2:
4b:76:69:f5:ba:d3:29:3b:c0:4f:fe:b6:b0:1b:21:48:a6:3f:
2f:94:74:b8:ff:a9:24:fc:0f:1d:07:68:4c:30:26:01:c4:73:
a6:d6:40:59:49:c9:ea:fa:44:3e:a6:8c:df:72:28:26:b9:31:
46:91:6e:c1:10:9c:e3:c7:1c:55:2c:d8:4e:c5:73:2b:9e:d0:
46:54:ff:1e:c1:a7:d1:f9:00:f2:40:45:ad:2d:91:54:80:41:
3e:37:14:17:19:1d:83:2f:e1:b0:d5:e7:7b:b6:b5:e2:5a:c0:
1b:bb:19:62:1a:c2:a9:24:10:1e:84:ff:18:b4:65:e6:28:a2:
1f:83:65:d8:8f:32:be:52:17:bb:8b:77:49:9a:7b:c9:de:35:
65:f2:14:ed:72:03:c1:25:dc:aa:2b:ca:e2:ef:db:e9:8e:30:
1c:46:a4:6e:0b:e7:17:c5:d7:79:b9:11:d0:f2:f8:2a:11:68:
5c:e2:5c:80:2f:a2:75:e5:0e:25:c2:3b:e9:10:34:89:ac:46:
bc:d1:ff:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:27 2024 by rpki-client on console-ams.rpki-client.org