Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/VFKXQDDxVW5Wi7DI7RxnFEMKnm4.roa
File: VFKXQDDxVW5Wi7DI7RxnFEMKnm4.roa (raw, json)
Hash identifier: ciMjoe0GrZCG/PlkaD/BA4QXT7Fjeqee35QvkLt9Gos=
Subject key identifier: 54:52:97:40:30:F1:55:6E:56:8B:B0:C8:ED:1C:67:14:43:0A:9E:6E
Certificate issuer: /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Certificate serial: 0185735609992BB1FCD1654F66C8B9D0200E
Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/VFKXQDDxVW5Wi7DI7RxnFEMKnm4.roa
Signing time: Mon 02 Jan 2023 16:34:56 +0000
ROA not before: Mon 02 Jan 2023 16:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 93.93.224.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:56:09:99:2b:b1:fc:d1:65:4f:66:c8:b9:d0:20:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Validity
Not Before: Jan 2 16:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5452974030f1556e568bb0c8ed1c6714430a9e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b6:d1:f8:60:08:d1:38:61:1b:b9:94:24:c5:
35:09:c3:ac:e9:8d:8d:b0:48:01:50:37:fe:10:ed:
27:ac:9e:0f:bb:f3:42:5d:37:bd:ba:d1:5b:6e:d6:
04:f4:99:e0:34:b6:00:52:64:55:d9:88:e2:b8:d8:
24:90:cd:ca:85:d9:d1:e4:4b:9f:e4:41:02:6d:ec:
4b:41:14:d9:41:3c:aa:64:5b:18:6b:4f:f7:a3:3a:
cf:33:94:4a:3a:3a:8f:78:6a:ed:4e:4b:d2:d0:1b:
cf:94:5b:2e:0b:be:25:25:b3:e7:9d:ae:f9:82:21:
fb:ac:b5:0e:e2:2f:cb:fe:51:99:cc:4a:94:42:bc:
00:3b:4f:29:fe:2a:52:0d:3a:e1:96:51:05:e9:27:
26:8b:18:71:6a:e1:0f:97:1e:52:ee:db:f8:3c:b1:
06:a6:91:47:ea:c2:2a:1c:1c:36:a2:fd:e4:a5:6d:
ea:3b:42:94:f4:88:84:53:77:1f:6f:05:a7:eb:63:
20:05:61:77:ff:e3:8e:24:8d:8f:0b:04:97:ed:53:
03:2f:48:50:02:28:3a:81:9f:e0:be:a8:0b:55:62:
50:db:de:a8:45:76:13:4e:e8:a7:0a:48:ee:ea:6f:
6e:2b:91:38:13:2e:7e:53:b4:c7:cc:b9:1c:4b:f1:
c1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:52:97:40:30:F1:55:6E:56:8B:B0:C8:ED:1C:67:14:43:0A:9E:6E
X509v3 Authority Key Identifier:
keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/VFKXQDDxVW5Wi7DI7RxnFEMKnm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.224.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:a4:fb:99:80:6e:03:bd:fc:56:39:17:1b:ab:60:a1:ee:e3:
7d:b8:28:37:7f:0a:ab:bb:7b:93:a2:00:46:68:81:f0:61:1b:
63:00:d9:d6:94:bf:e6:85:dc:4c:d4:50:52:6f:c3:0d:92:45:
a4:a6:cd:47:03:95:5e:b5:d2:54:4d:1c:1e:cc:b4:1e:76:07:
55:8e:e4:b4:0b:a0:91:f6:3a:91:4f:11:18:42:f8:bb:fd:11:
46:84:88:69:e2:0a:4d:68:2a:75:ab:dc:e6:08:ce:28:4a:72:
ed:a2:8f:28:64:bf:8b:7e:ac:cd:31:d1:9b:5a:9e:22:0f:88:
1a:eb:ac:c2:97:43:91:a7:66:45:c2:8b:cd:e9:5c:96:23:43:
15:1e:d5:49:71:02:b1:c1:c0:a5:27:d0:d5:78:04:2c:ac:05:
0e:ff:a6:a2:7e:10:be:8f:66:78:c7:09:db:ec:c4:a3:2d:ef:
b4:5f:d0:02:6d:df:6b:2c:5b:65:7d:f0:e0:8b:79:2e:44:b5:
4c:a3:c3:00:d6:f4:7f:4e:0b:bc:d9:a0:fb:fd:08:1a:f9:10:
6a:91:77:62:96:14:37:4c:96:98:46:60:2e:5b:fd:fc:75:89:
a2:10:6e:94:ce:48:80:5c:64:20:e5:8c:90:c6:6c:14:d7:97:
3c:27:d5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:44 2024 by rpki-client on console-ams.rpki-client.org