Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/VBTn1GSIxNu_5FWKIsnsoaInOms.roa
File: VBTn1GSIxNu_5FWKIsnsoaInOms.roa (raw, json)
Hash identifier: mkpcZWTwBHnQTbm0njzLtvaYgQlHj86EY5pqS01H8Ek=
Subject key identifier: 54:14:E7:D4:64:88:C4:DB:BF:E4:55:8A:22:C9:EC:A1:A2:27:3A:6B
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 01856C4A6EEFA51285348D502E22ADF75C03
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/VBTn1GSIxNu_5FWKIsnsoaInOms.roa
Signing time: Sun 01 Jan 2023 07:44:55 +0000
ROA not before: Sun 01 Jan 2023 07:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210016
IP address blocks: 46.21.251.0/24 maxlen: 24
212.126.116.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:6e:ef:a5:12:85:34:8d:50:2e:22:ad:f7:5c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 1 07:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5414e7d46488c4dbbfe4558a22c9eca1a2273a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:9a:6e:3e:d7:57:5c:92:5a:c6:cc:b3:ad:
56:b5:af:49:81:e1:65:09:c7:e7:ee:00:c8:79:90:
a6:34:04:41:f2:ab:b7:f3:55:eb:9d:94:11:fb:43:
0d:7f:2b:c5:c9:c1:be:04:46:60:82:da:5b:d4:c9:
bd:72:2f:91:54:69:e1:7a:6f:d8:26:b0:dc:ae:89:
87:33:a8:08:91:71:44:0f:8a:78:41:3e:28:64:3f:
7f:92:d7:30:61:1e:b9:cc:a2:54:1a:9a:d2:8f:c2:
41:de:38:2d:17:83:6b:08:99:48:1a:ed:48:36:23:
67:f4:45:5f:b9:b1:d9:25:4f:0c:e0:37:43:a5:77:
cd:f4:d1:bc:b9:5d:dd:61:e1:fe:2d:61:b8:a5:6a:
1c:b3:fb:23:17:28:34:cd:2b:1f:64:06:13:c5:46:
8d:5f:e2:cb:3a:19:ae:1d:7c:77:70:db:5d:f9:6c:
f5:bd:96:f9:9b:6f:2d:39:a3:5b:6f:29:47:f8:2d:
13:43:64:f1:ae:84:d0:49:15:cb:6c:c6:c6:d7:c7:
99:72:2c:92:ac:d7:fd:01:1a:24:a9:a2:56:88:5f:
5e:a2:82:dd:90:53:5b:7c:3e:99:ae:f7:fb:4e:67:
ac:11:90:7c:ae:94:60:10:3d:5f:62:18:15:2e:e7:
5d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:14:E7:D4:64:88:C4:DB:BF:E4:55:8A:22:C9:EC:A1:A2:27:3A:6B
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/VBTn1GSIxNu_5FWKIsnsoaInOms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.251.0/24
212.126.116.0/24
Signature Algorithm: sha256WithRSAEncryption
98:96:55:2e:28:56:f2:0a:75:ac:0c:1a:8b:3e:87:3f:ee:af:
3f:72:d2:02:a1:77:0b:dc:09:8b:74:20:3e:b2:37:3e:9f:d5:
61:e4:44:9d:3a:a1:4e:6c:86:d7:a6:74:22:45:a2:aa:49:67:
46:3e:8b:50:22:19:a2:cd:d7:df:f2:fb:ac:b4:df:fb:c2:23:
77:f9:48:8e:8e:76:af:1b:b7:ff:7b:b4:fe:c9:c9:cb:67:05:
ff:db:c7:75:92:8f:da:19:77:b3:db:35:cb:26:3f:48:7f:4c:
f3:cc:1d:e8:ba:a7:81:6e:90:a1:f5:5b:e6:15:b3:d3:46:ad:
a2:74:07:81:8a:95:d5:53:10:c8:34:c3:76:3d:c9:35:bc:08:
64:8a:ec:77:58:7e:03:7d:7b:5e:01:5e:96:3b:a5:b6:21:14:
2e:a3:87:a4:80:60:fc:ca:8a:e3:d6:88:dd:12:9b:a7:ba:85:
af:fe:02:56:13:7a:18:4e:d5:ad:e2:65:11:16:87:89:2f:5b:
cb:07:37:8d:7c:74:ba:5f:d5:85:56:b8:d8:ad:ff:b7:de:5d:
d0:51:42:39:c0:41:af:7c:20:a5:e6:ac:c7:9b:a0:b0:38:b1:
56:89:78:42:7b:4b:33:a4:df:99:63:f1:b5:1a:2c:ee:cf:6f:
f0:1e:79:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:31 2024 by rpki-client on console-fra.rpki-client.org