Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/VCwAqJn79bsnt1CCRZSf_wDDWKM.roa
File: VCwAqJn79bsnt1CCRZSf_wDDWKM.roa (raw, json)
Hash identifier: JPBOI1hjqThNn/Oz25c80vqPNq3deRObUAQCPVSV8y8=
Subject key identifier: 54:2C:00:A8:99:FB:F5:BB:27:B7:50:82:45:94:9F:FF:00:C3:58:A3
Certificate issuer: /CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Certificate serial: 018571FA2B22A6859C304A2C29FB75289326
Authority key identifier: DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/VCwAqJn79bsnt1CCRZSf_wDDWKM.roa
Signing time: Mon 02 Jan 2023 10:14:58 +0000
ROA not before: Mon 02 Jan 2023 10:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24879
IP address blocks: 193.111.166.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:2b:22:a6:85:9c:30:4a:2c:29:fb:75:28:93:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da52c38f0c7febae135d5dddd948cf26becef3bc
Validity
Not Before: Jan 2 10:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=542c00a899fbf5bb27b7508245949fff00c358a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dc:85:ed:7a:c4:9b:2b:19:e8:4f:bc:4a:c0:
0c:91:f5:24:15:70:4c:11:ea:83:92:0b:c8:23:7a:
de:3c:01:cf:23:05:11:14:31:3a:cc:48:cd:d1:53:
78:37:eb:4e:2a:c0:8b:9a:fa:08:5b:ca:8b:8e:17:
c8:31:ab:e2:d3:2e:ee:ca:a2:2e:34:84:51:db:12:
e6:72:b8:60:a9:79:4f:4e:0c:82:de:df:9a:b6:59:
0c:68:31:b9:19:fe:78:c0:07:09:f6:d7:5a:b9:da:
87:5a:50:73:e8:97:31:b0:69:1a:b2:f7:69:5a:ec:
be:b0:41:85:9f:ee:53:b3:3b:42:4c:b3:f3:49:28:
1b:dc:0d:48:11:f1:6d:03:36:44:3d:da:26:ee:98:
88:ba:b2:ff:c1:d3:08:b5:78:77:3a:ed:d9:84:66:
08:7d:67:5b:73:2f:ed:20:da:12:2c:cf:03:72:95:
99:c0:08:ae:d2:17:35:4a:55:41:ff:0d:02:52:0e:
4b:78:4c:11:da:fc:b7:6b:97:5b:d3:b9:01:59:47:
d1:02:18:c4:8f:27:b6:b8:f7:27:64:f8:38:cf:ae:
1c:14:62:b9:6c:e4:3b:c1:30:52:60:f3:b5:5b:82:
fe:f0:e1:9a:60:c5:94:29:8f:a7:71:fd:2f:46:eb:
42:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2C:00:A8:99:FB:F5:BB:27:B7:50:82:45:94:9F:FF:00:C3:58:A3
X509v3 Authority Key Identifier:
keyid:DA:52:C3:8F:0C:7F:EB:AE:13:5D:5D:DD:D9:48:CF:26:BE:CE:F3:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lLDjwx_664TXV3d2UjPJr7O87w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/VCwAqJn79bsnt1CCRZSf_wDDWKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f31be0-10e0-40ed-a6d7-41ecdc7a36f4/1/2lLDjwx_664TXV3d2UjPJr7O87w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.166.0/24
Signature Algorithm: sha256WithRSAEncryption
05:49:15:e0:54:94:07:80:19:b7:1c:f2:95:98:6c:95:ed:32:
88:d9:06:68:63:54:18:3e:9b:c6:3a:0a:02:80:ac:c9:7a:33:
e9:31:03:90:bc:de:1d:fa:99:9d:74:c0:94:a5:60:c1:71:b8:
ef:11:d2:51:31:82:5e:82:68:c4:1c:af:20:ae:29:5d:0a:90:
b6:c9:b7:9b:93:38:02:3e:f3:2e:76:08:56:1b:72:ce:ef:85:
8b:ab:0b:7c:a4:15:38:03:6b:7c:09:a1:bf:97:2b:99:53:0e:
f7:73:d0:a8:24:85:5a:6c:30:db:8d:11:5c:af:0f:b9:c6:5b:
be:aa:c3:13:e0:aa:c7:67:c9:e4:e7:2a:42:c3:e1:8c:85:f8:
0a:d4:6b:ea:d5:4c:32:45:93:75:a6:df:ef:fa:a4:82:37:f5:
5a:d2:7b:a5:9a:05:38:c5:35:5e:da:be:7b:96:90:6f:31:dd:
a5:09:4e:5c:b6:2e:67:d7:32:95:0e:2b:93:e7:0a:c3:e9:b7:
f4:43:4a:f2:62:11:ca:05:6b:a7:95:7f:e3:fa:33:94:c8:23:
81:8f:fe:2f:e5:12:ec:52:0a:fa:a8:19:70:01:ab:85:a8:00:
38:ff:55:b5:14:49:8b:96:e5:d3:a3:0c:55:7c:9f:94:72:8d:
5a:0c:4b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:27 2024 by rpki-client on console-ams.rpki-client.org