Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/VNuxPK-5vl6qkmJJ1KElkjnESr4.roa
File: VNuxPK-5vl6qkmJJ1KElkjnESr4.roa (raw, json)
Hash identifier: PIGkpcou7sj/8CiKuKOlnOhTqh4SLalZ1xLHTdavUBM=
Subject key identifier: 54:DB:B1:3C:AF:B9:BE:5E:AA:92:62:49:D4:A1:25:92:39:C4:4A:BE
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018CFDA642D97CEC7ABD64DF64268D05BF06
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/VNuxPK-5vl6qkmJJ1KElkjnESr4.roa
Signing time: Fri 12 Jan 2024 12:29:40 +0000
ROA not before: Fri 12 Jan 2024 12:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215761
IP address blocks: 91.228.12.0/24 maxlen: 24
94.154.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Apr 2024 07:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fd:a6:42:d9:7c:ec:7a:bd:64:df:64:26:8d:05:bf:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 12 12:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54dbb13cafb9be5eaa926249d4a1259239c44abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:af:c4:f1:b3:d6:b5:7f:17:cf:07:d4:8b:88:
a9:c4:32:67:d2:64:6a:23:7d:f0:5c:8c:0c:fb:42:
51:08:79:21:0b:66:e4:2b:8b:ba:b5:09:0a:24:2d:
8d:71:4c:3c:29:4c:a5:a0:b3:68:a9:75:f1:e7:f8:
f3:d6:17:51:60:3e:11:70:e7:dd:e2:f5:9a:4a:75:
94:9f:ac:ce:67:f8:bc:16:99:e4:3a:82:70:be:33:
4a:08:9b:4b:f1:d1:4d:f1:2e:b7:fa:ad:69:cc:2c:
cd:86:c1:98:6e:53:a7:84:fd:fc:db:59:78:9a:af:
36:d5:cb:7f:4a:cd:f7:a2:57:f6:b4:d7:3e:2d:f8:
ae:0e:f9:35:52:08:f2:ae:26:ce:22:93:8e:70:f2:
af:24:8d:1c:ef:93:30:45:65:e3:21:20:00:3d:c0:
06:59:2d:af:7c:dc:f7:26:fa:30:f1:3c:2a:a1:da:
d5:e8:8d:0b:1a:83:d0:63:45:56:ea:e8:73:bb:0c:
bf:f7:9a:2c:99:f9:ea:a6:ae:5b:18:cb:c8:68:eb:
c7:c7:f0:a8:fc:76:83:5b:7d:fa:42:1d:10:64:84:
62:f2:4b:10:d9:0e:7d:d2:23:5a:2e:90:07:86:83:
63:cb:b6:d7:e6:da:a6:fc:19:dd:47:42:d0:38:7c:
f6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DB:B1:3C:AF:B9:BE:5E:AA:92:62:49:D4:A1:25:92:39:C4:4A:BE
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/VNuxPK-5vl6qkmJJ1KElkjnESr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/24
94.154.33.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ed:dc:89:d2:ad:2e:a7:8f:98:50:3f:f0:35:25:1c:73:71:
74:ad:e1:42:f5:4d:1c:3e:24:2f:47:3d:82:d6:46:dd:89:7c:
4a:ef:9f:7b:26:d1:e4:37:33:6f:d8:cf:e3:b3:4a:a7:34:e6:
1d:01:69:71:8c:4a:96:cf:71:4d:7e:1d:68:0e:13:db:32:23:
11:18:a3:91:33:c1:c2:35:11:08:c2:ae:55:ea:a3:0e:4b:a8:
c2:c6:12:ff:8a:c5:2d:12:4a:25:d2:bf:f2:01:d7:e4:65:79:
b8:9a:de:2c:90:13:af:b8:3e:8a:a8:b1:52:8b:33:0d:12:4d:
a6:ac:d2:1e:94:bd:f1:df:e5:0d:42:71:fc:d2:96:8b:74:e9:
7e:0c:6b:1a:fc:e2:a5:0c:64:36:38:31:20:93:20:46:90:6b:
87:e7:e1:27:4b:79:d7:eb:96:c4:55:42:3f:e5:a2:ab:a0:ba:
62:a8:1b:3b:00:75:af:a6:9d:6c:27:a5:b2:2c:ca:80:a0:dd:
71:34:7d:e1:61:49:1f:28:a3:55:3c:eb:ca:ee:35:76:38:4f:
17:e4:aa:3b:88:fb:5e:1b:dd:49:8e:1e:bf:8b:d0:5b:4a:76:
c7:92:99:bf:05:c1:28:92:72:b5:1c:ff:37:c6:07:de:3c:e5:
12:e0:76:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:25 2024 by rpki-client on console-fra.rpki-client.org