Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/VRKsG8LbMLhbJhp4MT_oGl0rNSE.roa
File: VRKsG8LbMLhbJhp4MT_oGl0rNSE.roa (raw, json)
Hash identifier: oJsY2NQJyN4ZJ5JjCUwFUMDJnV/thJRMepQEMhArsuU=
Subject key identifier: 55:12:AC:1B:C2:DB:30:B8:5B:26:1A:78:31:3F:E8:1A:5D:2B:35:21
Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial: 01856C4A4D60BD4B9CEFF3DFF370661687E2
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/VRKsG8LbMLhbJhp4MT_oGl0rNSE.roa
Signing time: Sun 01 Jan 2023 07:44:46 +0000
ROA not before: Sun 01 Jan 2023 07:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200884
IP address blocks: 94.126.50.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:4d:60:bd:4b:9c:ef:f3:df:f3:70:66:16:87:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Validity
Not Before: Jan 1 07:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5512ac1bc2db30b85b261a78313fe81a5d2b3521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8c:42:99:f1:c1:53:71:53:ca:b4:d3:3a:fb:
12:3a:ec:3e:06:e7:5b:2d:af:e9:63:fa:e5:ee:3a:
06:96:5f:37:ba:67:b7:72:fb:e3:8b:ea:19:cd:1c:
d4:aa:ca:ce:33:24:67:6a:2b:99:cc:f6:b1:4f:d6:
c6:75:94:fc:cf:b5:ee:d0:6b:dd:a2:91:98:ad:99:
53:18:d4:79:61:38:08:a3:1b:05:78:b4:87:f2:d1:
a2:2a:e8:0a:33:cb:20:de:36:74:cf:7b:28:3f:18:
22:2a:44:b8:d8:22:ff:a8:e8:13:8e:e8:b7:93:75:
3e:4a:e5:bb:26:4f:d7:63:c4:75:32:5b:42:0f:d3:
7f:11:86:9c:c7:e0:e4:d7:17:f3:80:eb:11:c3:aa:
6e:22:51:05:9a:d8:ed:24:ee:42:6d:8f:75:64:15:
a0:9b:a4:68:02:f2:a0:e5:24:93:bc:ab:68:5f:24:
18:c1:e7:8b:cd:0c:b7:f2:a2:88:68:0a:23:b1:5f:
50:0c:b9:23:a4:66:e8:df:c8:4e:70:13:57:1a:fe:
07:da:f8:81:cc:82:92:9d:d7:b8:18:b6:55:21:32:
2a:cc:98:b2:e0:df:35:5f:69:2c:81:55:6a:94:a6:
f4:38:e0:e8:85:e4:4c:91:e7:e3:70:d5:14:0c:eb:
ec:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:12:AC:1B:C2:DB:30:B8:5B:26:1A:78:31:3F:E8:1A:5D:2B:35:21
X509v3 Authority Key Identifier:
keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/VRKsG8LbMLhbJhp4MT_oGl0rNSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.50.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:77:e0:50:39:e6:cc:6a:bb:71:0c:51:8c:d6:29:38:cc:43:
07:70:b8:67:93:24:a8:7f:72:fb:9d:f7:a7:90:5d:b2:bc:55:
7c:54:ad:6d:59:a2:7c:4e:6b:3b:4a:77:0b:f9:84:af:42:e9:
15:ca:5f:3a:45:8f:a1:af:ec:50:ca:6b:1c:74:ed:c7:bd:fd:
7a:bf:9d:e6:83:84:53:da:b7:d6:bd:1e:56:45:66:a4:67:97:
58:2d:89:8f:19:c6:76:2c:ac:df:d1:e2:96:16:46:ad:ea:c7:
f8:80:ba:eb:8f:cb:1e:75:9f:36:8f:24:62:fc:58:a1:f6:e4:
89:e5:3d:d6:05:13:a2:d4:10:b1:58:4a:c2:48:34:75:75:fe:
66:9a:b1:c0:6d:6e:a2:42:ac:61:c4:9c:94:06:86:9e:52:31:
e8:53:d0:35:d4:9c:8f:56:a2:70:ea:1a:2b:d1:1c:4d:cf:68:
bb:a8:8a:bc:f7:15:f1:5b:bc:77:38:22:92:ed:6b:56:52:f6:
32:78:91:6c:7e:4a:61:de:30:ef:eb:7d:f1:86:19:93:fe:8e:
61:e3:69:6c:17:05:40:d8:a4:d2:e7:a8:e6:95:6b:12:9c:6a:
e0:cb:f3:b8:af:c8:8d:ca:82:65:5a:b9:8a:86:54:b2:c0:15:
ed:12:fc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:22 2024 by rpki-client on console-fra.rpki-client.org