Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/VY5W8NunuFsr5YcjEr4hNoNd5S0.roa
File: VY5W8NunuFsr5YcjEr4hNoNd5S0.roa (raw, json)
Hash identifier: qxsXs0GAfFoT6tvqqnyLElKLAWpKP6oPiR8ev6ShkIQ=
Subject key identifier: 55:8E:56:F0:DB:A7:B8:5B:2B:E5:87:23:12:BE:21:36:83:5D:E5:2D
Certificate issuer: /CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Certificate serial: 01856F14E4758524D28BD36534BE49725FBD
Authority key identifier: D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/VY5W8NunuFsr5YcjEr4hNoNd5S0.roa
Signing time: Sun 01 Jan 2023 20:45:18 +0000
ROA not before: Sun 01 Jan 2023 20:45:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48067
IP address blocks: 193.84.69.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:e4:75:85:24:d2:8b:d3:65:34:be:49:72:5f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Validity
Not Before: Jan 1 20:45:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=558e56f0dba7b85b2be5872312be2136835de52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:38:3d:21:55:9b:b3:46:d1:ef:60:34:01:9c:
8d:6e:e7:e9:57:18:39:9e:1a:72:11:7f:81:0f:30:
0c:b0:a6:19:ad:8e:60:be:dc:41:83:2b:80:9c:dc:
15:d8:7d:be:0b:3e:55:7e:6a:2c:b7:36:f5:63:bd:
b2:18:8d:1e:f4:a0:b8:b0:f0:74:66:b1:95:60:53:
5b:f5:7d:ab:41:66:fa:d7:b3:9e:3b:fa:11:06:e5:
95:9a:9a:e9:2d:eb:24:64:f2:67:88:2c:c9:91:c3:
db:86:7c:3e:9c:eb:a5:73:e2:44:de:db:82:b1:8f:
d8:64:31:f8:46:ef:5f:e0:e8:61:7b:8e:b2:47:6a:
01:1b:41:80:4d:fc:fa:24:be:e2:d2:3f:ce:47:cc:
76:48:24:d1:a4:e5:da:22:a9:56:a5:d4:4f:75:d3:
36:21:02:f5:c8:e9:aa:a9:9a:61:c5:d0:68:31:a9:
e2:2c:bb:fb:d8:8f:4c:8b:f5:b9:23:57:d0:be:1a:
be:67:77:23:64:e5:f6:30:40:ad:c3:39:ca:5c:e8:
d8:8c:4b:be:c6:7e:29:b9:5c:5d:4e:23:0b:1a:7f:
68:e7:a9:82:c4:fb:a3:75:4f:52:37:a0:1f:95:a9:
17:39:93:bb:87:00:f3:01:bf:d4:45:59:10:1b:1d:
d2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8E:56:F0:DB:A7:B8:5B:2B:E5:87:23:12:BE:21:36:83:5D:E5:2D
X509v3 Authority Key Identifier:
keyid:D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/VY5W8NunuFsr5YcjEr4hNoNd5S0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.69.0/24
Signature Algorithm: sha256WithRSAEncryption
16:e0:9f:30:d7:87:af:4c:bf:a9:53:6c:32:12:bb:36:da:7b:
9b:f9:b5:d5:26:61:cf:04:50:6e:cb:3f:c1:77:e3:c6:69:dc:
d8:35:e3:de:2c:57:e0:40:3c:d1:b8:f6:3b:4a:61:f6:58:4f:
55:b3:34:31:b8:2e:90:5e:15:3a:9e:ab:ab:8a:cf:d9:e9:9f:
0b:d1:8d:3a:4c:6d:0c:fc:65:77:eb:f5:59:89:e9:83:c2:80:
c8:e2:8c:85:e0:89:7e:bc:ab:1b:a8:78:4f:37:69:06:37:64:
f0:f8:fd:4a:2a:5c:75:66:34:af:55:18:f8:9a:46:16:8f:7b:
07:17:e0:ed:98:d7:7a:42:85:65:b0:b9:72:e1:63:a8:09:63:
ff:32:06:ab:64:d2:00:4c:cb:25:29:52:d9:ee:3c:9b:48:a5:
dc:89:b9:45:f8:f0:3d:6d:fd:41:7a:fb:20:e7:9c:98:3d:d1:
a5:c3:ae:47:83:2a:18:3f:d2:20:1b:de:82:ca:b4:71:46:63:
b1:55:68:56:6f:44:97:2d:17:5a:42:dc:a5:8d:a2:d3:2c:ff:
ac:d7:30:f1:2f:5e:e1:9c:46:43:46:e8:ba:48:84:7e:aa:80:
3c:8d:04:61:ac:5d:e6:d9:6c:a1:fa:a7:f0:24:ae:e1:d7:19:
11:b0:d5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:20 2024 by rpki-client on console-fra.rpki-client.org