Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/vfh5-zXxN_HKEpo71JNgsa3zyBs.roa
File: vfh5-zXxN_HKEpo71JNgsa3zyBs.roa (raw, json)
Hash identifier: s7kVxVi9+JfRLvw7EO9f23K3ujrAJDfB1vzxh+K2/Rg=
Subject key identifier: BD:F8:79:FB:35:F1:37:F1:CA:12:9A:3B:D4:93:60:B1:AD:F3:C8:1B
Certificate issuer: /CN=6c086192cb3f28f58b2144dde2d91a2312056fc8
Certificate serial: 018C6CB90A3D1DD85650E895F18ABF1A2B61
Authority key identifier: 6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/vfh5-zXxN_HKEpo71JNgsa3zyBs.roa
Signing time: Fri 15 Dec 2023 09:05:15 +0000
ROA not before: Fri 15 Dec 2023 09:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58004
IP address blocks: 91.237.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:b9:0a:3d:1d:d8:56:50:e8:95:f1:8a:bf:1a:2b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c086192cb3f28f58b2144dde2d91a2312056fc8
Validity
Not Before: Dec 15 09:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdf879fb35f137f1ca129a3bd49360b1adf3c81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:96:83:8f:7c:85:e8:78:8d:70:8a:0c:68:07:
ed:0a:83:a7:b2:33:84:d7:1d:be:46:17:32:09:75:
e5:e1:79:98:97:f1:6e:a9:db:5b:6e:88:e0:e0:1d:
e3:2c:e5:34:0c:96:2c:a8:1a:51:a1:a4:89:21:40:
64:67:b0:8b:d8:e1:08:c8:ff:3c:85:5e:c7:e5:92:
0f:33:1a:bc:d6:20:c9:71:7e:37:86:07:33:00:5d:
06:e0:0c:6f:7b:c9:d6:50:19:7d:a0:b3:aa:87:17:
14:f0:9c:d0:f4:b2:f0:4b:df:67:65:ba:78:b8:f8:
78:7b:8c:1f:95:9b:75:3d:64:03:e6:72:7c:42:de:
1f:10:54:f1:a8:64:b8:1e:76:92:8f:d7:dd:2c:cc:
9d:9c:c7:27:72:f5:81:e7:5b:8a:32:af:2d:e1:87:
c8:d7:25:36:db:60:ab:a5:2c:32:e0:9c:dd:6d:f2:
64:2c:d2:77:70:eb:63:2d:86:7a:81:88:92:a5:8b:
44:06:7e:bd:99:d5:03:34:df:aa:62:59:ad:ea:f8:
85:56:e2:10:73:8c:fa:b9:fb:8f:ff:6b:c7:81:47:
ea:5f:1b:d3:56:0f:02:88:20:70:a7:89:ef:57:32:
d9:04:16:d9:16:71:4e:3f:6c:fb:4d:81:28:ab:d4:
f2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F8:79:FB:35:F1:37:F1:CA:12:9A:3B:D4:93:60:B1:AD:F3:C8:1B
X509v3 Authority Key Identifier:
keyid:6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/vfh5-zXxN_HKEpo71JNgsa3zyBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.184.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:16:99:30:bb:bf:57:12:41:66:72:54:0d:0d:6e:b8:f1:a5:
73:d7:7c:13:1a:0e:cc:5f:40:ce:61:ac:32:de:42:cf:fa:4c:
d0:4e:19:83:53:16:9d:8e:d4:2e:7b:11:77:9e:b2:ba:19:f2:
d8:1e:97:7e:3b:44:44:e8:60:67:9c:3e:da:31:6a:b4:70:ff:
58:f3:fa:ab:57:2f:4f:0e:a9:d7:48:22:0d:e2:04:3e:ef:69:
59:3a:19:24:ae:9e:5b:93:c6:d6:52:5d:28:d7:95:44:de:a8:
0b:ce:e7:d8:67:41:2c:99:13:9a:7c:97:6e:78:6c:a5:bf:de:
53:bc:40:30:a1:75:7b:75:0a:6a:5c:ce:3b:84:d7:2e:ee:0d:
bc:95:ea:ab:94:b7:10:4f:5b:62:a4:88:5a:07:c0:0c:b2:20:
ac:a6:56:aa:0c:6e:ce:62:0c:fb:5a:62:80:00:32:38:53:60:
8c:fe:04:60:d7:6c:8b:9e:a0:69:0b:1a:a7:f0:46:11:2f:46:
31:84:56:97:01:56:73:72:4b:68:a0:a5:65:82:21:92:7a:42:
cd:64:e1:ad:ab:0a:65:41:f8:ca:2e:ce:88:15:ae:7f:71:0a:
4c:fe:fe:6d:60:c5:3b:9f:96:82:57:df:08:5b:7e:61:ca:6b:
8f:0b:05:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:37 2024 by rpki-client on console-fra.rpki-client.org