Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/VRgNo7KvXnaCdVp37cPHSswFFLQ.roa
File: VRgNo7KvXnaCdVp37cPHSswFFLQ.roa (raw, json)
Hash identifier: wvIDWbR6G865k0dyXdWj/n8S/a7up1BMXpLTgZzUW28=
Subject key identifier: 55:18:0D:A3:B2:AF:5E:76:82:75:5A:77:ED:C3:C7:4A:CC:05:14:B4
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018BEDB459F8ED2CA0C1B07719A3319EFF0D
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/VRgNo7KvXnaCdVp37cPHSswFFLQ.roa
Signing time: Mon 20 Nov 2023 17:08:21 +0000
ROA not before: Mon 20 Nov 2023 17:08:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215969
IP address blocks: 2a0c:b641:b20::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ed:b4:59:f8:ed:2c:a0:c1:b0:77:19:a3:31:9e:ff:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Nov 20 17:08:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55180da3b2af5e7682755a77edc3c74acc0514b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5f:c3:d9:b5:56:59:39:ee:73:f5:b7:1c:d4:
0b:d5:c0:33:cb:21:92:38:58:cf:14:54:73:77:20:
6c:b5:ea:eb:a4:47:54:6c:1b:0f:46:52:c2:0f:bc:
2d:93:77:ae:e9:1f:90:af:59:2a:c3:54:9f:f6:34:
a7:9c:fa:7a:01:4f:a9:12:96:bd:2e:b6:5e:47:56:
99:85:13:dd:ff:7d:ff:27:89:0f:f7:c0:44:68:73:
d8:e3:ff:36:2f:36:f8:b0:7b:55:5a:5e:d7:3c:40:
3f:e5:74:59:ee:19:47:bf:ed:08:f7:4b:37:84:e7:
8a:3e:d9:5a:f0:0f:32:a7:44:f7:a3:91:11:b3:65:
e1:13:f7:f6:65:09:74:ad:20:94:f6:f1:0b:77:ce:
99:f0:2d:6d:c0:e1:e4:ac:66:9a:1e:9b:cf:7c:93:
8c:f4:8c:a9:1a:93:75:fa:45:7c:2a:36:9b:0c:39:
1f:39:25:3a:38:e0:21:a6:00:c8:46:ff:1c:07:7d:
8b:1d:45:f6:1d:08:69:c9:b4:45:ed:37:b7:c1:70:
88:33:d8:c5:2d:c4:42:6d:58:77:54:84:94:5d:16:
34:9e:a8:9f:68:c4:9c:84:21:9f:44:ff:ed:74:61:
a0:9d:38:9a:ea:a2:b0:80:5e:bb:e5:a6:4f:36:b0:
76:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:18:0D:A3:B2:AF:5E:76:82:75:5A:77:ED:C3:C7:4A:CC:05:14:B4
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/VRgNo7KvXnaCdVp37cPHSswFFLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:b20::/44
Signature Algorithm: sha256WithRSAEncryption
9a:52:99:6b:2d:e9:59:c9:da:e8:fb:e9:f3:6c:7e:b7:bb:f5:
e1:51:ab:c4:33:69:7b:52:52:8d:ee:10:1f:21:88:6b:dc:20:
cd:45:67:9e:e2:ff:74:20:07:f0:56:f8:6f:34:22:d4:22:9a:
d0:cb:85:72:e0:8d:ca:a1:16:a7:ce:fd:e5:4b:ba:26:52:26:
0d:3f:f4:d5:cf:8b:e7:59:0e:f9:3e:f9:9a:ac:58:82:54:66:
e3:a3:dc:65:ce:98:e1:64:80:28:d3:8e:b1:1b:3c:7b:2b:f1:
f0:a7:3a:2a:84:df:25:81:79:6a:53:09:bb:06:57:84:ea:8e:
14:41:33:41:7a:57:5e:90:56:d6:78:5c:d7:70:24:b9:48:02:
ae:1c:8b:cc:e5:62:77:13:ed:21:f5:d2:6c:92:df:26:35:8f:
28:13:67:1e:22:cb:09:34:49:c6:2d:1a:36:ba:1a:63:4d:a1:
6f:b4:a5:91:dd:ef:23:4a:61:4f:ab:89:b6:9e:d0:11:35:c5:
06:e8:3e:41:4a:2b:f9:37:67:b2:a0:62:3a:c9:eb:85:22:e1:
84:7c:12:f7:b2:c5:25:f7:99:40:21:3b:a2:db:3a:d8:f1:66:
ae:fa:2c:ea:79:d3:6f:24:e2:66:91:48:d5:cc:5d:36:30:e9:
56:cc:80:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:38 2024 by rpki-client on console-ams.rpki-client.org