Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VL_TRJW2qga02ayeDs4fKMSuSSE.roa
File: VL_TRJW2qga02ayeDs4fKMSuSSE.roa (raw, json)
Hash identifier: D7ZwnKzLeAfpTSQbyKbRr+oGuA+T89nVg/0Jaxgujn4=
Subject key identifier: 54:BF:D3:44:95:B6:AA:06:B4:D9:AC:9E:0E:CE:1F:28:C4:AE:49:21
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E80ED264AF1D7F2C9486D1630A136C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VL_TRJW2qga02ayeDs4fKMSuSSE.roa
Signing time: Mon 02 Jan 2023 05:15:34 +0000
ROA not before: Mon 02 Jan 2023 05:15:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211868
IP address blocks: 2a0e:97c0:1a0::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e8:0e:d2:64:af:1d:7f:2c:94:86:d1:63:0a:13:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54bfd34495b6aa06b4d9ac9e0ece1f28c4ae4921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:44:31:8b:54:9f:ad:6f:6b:8d:b6:ea:f8:46:
6d:15:76:40:d4:41:f6:c2:ce:f4:2c:ac:56:46:f7:
13:ff:8e:66:36:e5:3c:09:c4:09:00:d1:6b:49:78:
dc:67:b4:04:07:e5:20:b9:05:8d:d3:5a:31:73:f5:
e0:83:5c:f2:34:2a:99:25:92:71:8d:ab:55:46:e6:
32:4c:d8:98:63:9d:78:a0:da:94:66:96:11:a7:42:
4a:34:44:d3:e7:62:bd:95:82:37:d2:34:36:b7:b5:
cf:5f:07:07:f7:2c:74:57:66:b9:ce:24:c4:85:fe:
43:95:34:5b:7c:e0:51:8b:9f:c8:71:43:a0:e6:d0:
03:49:31:1c:ff:bb:c4:10:8c:2b:c9:c9:6b:ff:32:
76:bd:4e:a8:69:45:1a:67:be:b4:c6:44:14:26:16:
0a:7f:8b:5d:ac:8f:4f:8d:21:1a:60:8c:5b:62:78:
62:c4:62:99:18:7e:72:6b:00:3d:9f:d5:af:e7:e7:
2c:da:b1:99:d3:51:13:b9:68:93:8c:1a:7e:a8:ba:
16:5a:4d:2e:72:c1:8b:76:b7:6a:f8:0c:88:fd:7d:
d9:f6:95:ee:3d:bb:60:c6:59:92:8f:ac:b6:0a:ae:
cb:a7:6b:01:b8:f3:e9:6d:2f:31:04:fc:43:cc:25:
3f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BF:D3:44:95:B6:AA:06:B4:D9:AC:9E:0E:CE:1F:28:C4:AE:49:21
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VL_TRJW2qga02ayeDs4fKMSuSSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:1a0::/44
Signature Algorithm: sha256WithRSAEncryption
2a:ea:ec:69:3c:d8:54:82:fc:83:e8:34:ca:58:ab:1d:e0:99:
83:c1:85:bf:0e:2f:df:bb:f0:3c:10:e5:43:a9:b2:af:7f:52:
41:75:a7:4e:7f:c3:24:41:58:5b:2c:b5:1e:30:69:c1:4b:e1:
6c:cb:a5:36:21:47:37:bf:1e:9e:fc:95:ff:54:1f:75:10:58:
33:88:5f:b8:9a:aa:c4:bd:93:b6:2b:5a:82:ea:4c:14:5a:a4:
e9:dc:de:a4:61:18:76:88:05:0d:01:a4:b0:a7:6b:81:61:b4:
17:dd:64:7c:cc:d2:fa:eb:ec:75:1b:55:21:00:3c:35:68:76:
88:16:b2:58:50:4c:a4:01:ea:54:5f:15:ce:be:07:50:83:20:
36:e6:e6:13:9d:80:9c:63:19:19:92:c6:a5:b4:84:24:9f:42:
35:0e:43:e1:47:91:00:10:32:dc:2a:52:93:a9:5e:04:eb:13:
30:f4:67:a4:06:18:9f:8a:ee:db:66:12:87:de:19:c3:4f:a7:
55:24:b4:5f:d0:5f:1e:d8:5f:fc:6a:7e:2b:a4:6d:34:47:9e:
13:ee:af:73:23:09:10:11:85:a5:50:a0:72:fa:81:98:0f:40:
a7:e1:35:ec:c0:38:d7:08:c3:48:6c:b6:44:fa:f7:a5:66:85:
6a:e9:3e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:31 2024 by rpki-client on console-fra.rpki-client.org