Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/vmMTP9lquTOIy-d5UTpO5Hnw7d4.roa
File: vmMTP9lquTOIy-d5UTpO5Hnw7d4.roa (raw, json)
Hash identifier: ZCHQaj2S0Qou55KFV+PBy8bM6msUgUj4YptCcUkfOyI=
Subject key identifier: BE:63:13:3F:D9:6A:B9:33:88:CB:E7:79:51:3A:4E:E4:79:F0:ED:DE
Certificate issuer: /CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Certificate serial: 01856F66D876904D8A337F8D22FFB7E1DF30
Authority key identifier: C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/vmMTP9lquTOIy-d5UTpO5Hnw7d4.roa
Signing time: Sun 01 Jan 2023 22:14:49 +0000
ROA not before: Sun 01 Jan 2023 22:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13130
IP address blocks: 194.114.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:d8:76:90:4d:8a:33:7f:8d:22:ff:b7:e1:df:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Validity
Not Before: Jan 1 22:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be63133fd96ab93388cbe779513a4ee479f0edde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:07:ad:43:29:d3:e1:ea:94:1a:79:34:20:d0:
ef:97:92:da:48:30:03:3e:79:b8:03:89:b0:3f:90:
47:17:9a:e8:15:81:46:2b:c2:75:96:5b:49:b2:58:
1a:35:f7:2a:29:01:32:56:3c:3a:1b:3c:b4:56:20:
0a:41:42:ad:38:4d:11:48:6b:e3:3c:a1:66:0f:3d:
b0:54:8d:72:56:96:bf:91:f0:8f:72:06:00:ff:da:
54:c3:9d:45:d5:6a:60:57:61:72:9c:f0:ff:d7:1b:
47:8d:77:16:e3:da:e0:b6:db:3b:c2:90:82:e0:22:
2f:9e:9c:32:46:8b:b1:06:a2:36:68:ea:a0:1c:b5:
d0:ea:c9:75:f0:53:5a:4e:65:a6:8a:0a:09:d9:b9:
ce:f2:c2:50:43:47:fe:c9:fb:b7:ee:31:54:17:3b:
20:b6:eb:7d:01:2d:22:c8:32:fa:aa:f2:f6:57:88:
49:72:40:1f:2e:da:27:1b:aa:ba:3f:1c:c8:4c:bf:
e0:62:aa:ba:30:f3:2c:23:ad:71:1a:4e:b9:53:21:
8f:f1:81:ed:1a:1c:5d:e3:e7:96:1b:c8:7a:50:ec:
41:be:67:a6:e1:3f:4c:68:e2:28:27:a3:90:9c:11:
ce:1c:11:4c:57:74:a8:48:0c:26:49:e4:79:3e:70:
e7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:63:13:3F:D9:6A:B9:33:88:CB:E7:79:51:3A:4E:E4:79:F0:ED:DE
X509v3 Authority Key Identifier:
keyid:C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/vmMTP9lquTOIy-d5UTpO5Hnw7d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.114.76.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:cf:9e:82:39:a7:9f:3c:f6:be:93:5a:3f:ab:0d:16:37:ff:
e3:b5:36:e3:8e:68:3a:55:a8:1d:8f:48:3d:0c:d9:2c:de:dc:
17:30:75:54:16:85:57:d1:3e:aa:9f:bf:da:3c:8f:7a:05:02:
8a:f0:8e:a9:34:50:07:89:f6:b4:04:98:09:a4:1d:22:18:72:
89:ed:d1:a9:a1:8b:0c:eb:a7:09:f4:43:d5:eb:a2:8d:1a:c4:
ca:bb:7f:54:69:59:8e:c7:92:ba:3b:f1:78:db:1d:91:fd:8d:
fd:39:4f:27:6b:8f:a7:08:06:aa:56:95:cb:f5:15:c0:85:c1:
09:6b:44:37:3d:fa:de:d9:ec:80:cc:40:7e:95:f6:db:cd:18:
b3:e8:f4:de:95:f9:36:6f:2b:22:5a:de:76:f9:e4:33:63:42:
cb:0c:f8:32:ad:54:84:56:42:a4:53:f2:e5:d3:4c:3d:b9:59:
7e:92:c6:62:1d:9a:a2:54:b7:e6:8e:51:5b:d9:a6:d8:ad:52:
55:dd:08:03:cd:aa:de:4e:26:c0:4a:d9:98:72:dc:3e:19:47:
97:8e:c8:2d:d9:e3:14:df:e5:65:a3:35:b0:6f:18:7a:0c:6a:
97:c1:d2:a1:d4:a1:57:7f:0e:9f:9c:d5:a4:c0:2c:43:b7:09:
e3:1b:d3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:05 2024 by rpki-client on console-ams.rpki-client.org