Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VH5WZXZCjxc15E9zfbzxeQcIbPI.roa
File: VH5WZXZCjxc15E9zfbzxeQcIbPI.roa (raw, json)
Hash identifier: xFLUsYuvdNNdEG7hwGyWyaegRyTduYoSq33G9ocjKmA=
Subject key identifier: 54:7E:56:65:76:42:8F:17:35:E4:4F:73:7D:BC:F1:79:07:08:6C:F2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AF15ADAF88AE2D325BD00F3A86CBA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VH5WZXZCjxc15E9zfbzxeQcIbPI.roa
Signing time: Tue 24 Jan 2023 16:09:49 +0000
ROA not before: Tue 24 Jan 2023 16:09:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211042
IP address blocks: 2a0e:b107:14c0::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:f1:5a:da:f8:8a:e2:d3:25:bd:00:f3:a8:6c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=547e566576428f1735e44f737dbcf17907086cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:d6:6f:a5:e1:a1:4d:5a:91:b4:52:8e:6b:
c8:92:09:d1:fc:82:bb:16:28:de:75:e9:0e:1f:31:
c2:01:17:05:d6:c4:ea:5c:ef:bf:b0:81:de:36:19:
ed:11:e8:2c:74:1d:a2:eb:2e:7c:f8:54:9f:e9:47:
be:d1:cd:ad:32:12:30:37:b0:38:0d:28:eb:91:8a:
f6:95:df:5d:f5:ea:d1:e9:89:2e:c2:c2:8d:72:7c:
3e:85:ca:24:8e:72:b3:c5:3f:27:ac:04:47:3e:e9:
d9:d8:eb:eb:fe:46:a9:21:4b:8a:9a:0c:1e:d3:03:
52:f7:6d:56:85:fb:0d:57:92:7c:65:89:d3:a9:4d:
f2:db:39:a4:ea:35:e0:2a:4c:e3:6c:61:09:26:e7:
7f:5d:3a:8f:51:4c:18:43:52:cb:c2:57:30:55:5c:
0c:ea:e9:47:07:4b:19:6e:de:ea:5e:f8:cc:93:6e:
eb:c7:a8:24:34:5c:10:54:42:8b:8e:62:ab:10:c5:
0e:39:41:12:86:66:52:ef:6e:e9:0e:6e:0b:65:5e:
95:ac:72:02:39:47:5f:34:e1:7c:04:c0:61:23:3e:
b6:00:b8:03:7c:e2:1b:f3:07:a8:d3:7d:f6:5e:d9:
d3:c5:de:a4:36:88:90:25:0c:1d:e6:b8:f4:6a:2a:
80:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7E:56:65:76:42:8F:17:35:E4:4F:73:7D:BC:F1:79:07:08:6C:F2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VH5WZXZCjxc15E9zfbzxeQcIbPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:14c0::/44
Signature Algorithm: sha256WithRSAEncryption
09:e5:65:18:0a:67:e5:5c:43:b3:af:fe:7a:b3:69:2a:d4:b4:
86:37:ee:b9:8a:6f:e7:da:08:c4:2e:4e:de:2c:b7:49:68:5b:
b6:60:47:35:5b:4b:02:bb:ae:72:bb:d3:e3:27:2a:51:bb:1f:
ae:57:10:3f:7d:d3:3c:bd:a5:98:b2:da:60:d8:ae:d9:48:aa:
f4:5a:8d:31:91:e5:3b:50:42:6c:78:6e:e4:89:84:cb:6d:8e:
66:f8:04:2d:e0:e1:0b:b5:d8:69:fd:5f:1f:45:49:54:84:e1:
75:a3:28:5f:cd:15:3e:84:46:fc:93:f3:4d:71:8a:b4:51:a9:
22:a9:66:77:b0:79:b3:eb:43:11:f2:99:1e:b2:4f:c8:73:62:
c4:d5:9f:16:b2:23:b1:26:12:c4:74:ff:87:51:34:26:d8:90:
75:72:86:05:e5:6c:8c:53:f2:68:2c:09:91:b7:6d:17:03:b6:
6f:b0:38:87:4f:ea:5f:75:9c:79:77:5b:e7:46:74:ab:3c:50:
7c:a4:17:ac:d7:25:2a:8c:e1:dc:03:6b:cb:65:d6:67:c9:0c:
aa:3c:00:42:a6:ce:5c:ec:6c:be:ae:4b:a7:cd:08:d1:c3:b4:
b0:31:30:8e:a4:e8:c2:eb:7b:80:ce:3a:df:d0:aa:d3:01:88:
92:41:4b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:04 2024 by rpki-client on console-ams.rpki-client.org