Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/VHAkWPyVt3OQidFj47HNx9TfI44.roa
File: VHAkWPyVt3OQidFj47HNx9TfI44.roa (raw, json)
Hash identifier: f/oNjnIEpRA7KvPADu1nXmNmc6qfwBgHBL9IdCgw4cM=
Subject key identifier: 54:70:24:58:FC:95:B7:73:90:89:D1:63:E3:B1:CD:C7:D4:DF:23:8E
Certificate issuer: /CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Certificate serial: 0186A70F9173FA1D8A969166EA1A7B10BE86
Authority key identifier: BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/VHAkWPyVt3OQidFj47HNx9TfI44.roa
Signing time: Fri 03 Mar 2023 10:41:00 +0000
ROA not before: Fri 03 Mar 2023 10:41:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2001:678:934::/48 maxlen: 48
2001:67c:bf0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a7:0f:91:73:fa:1d:8a:96:91:66:ea:1a:7b:10:be:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Validity
Not Before: Mar 3 10:41:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54702458fc95b7739089d163e3b1cdc7d4df238e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:39:60:67:4d:fb:1b:ba:61:26:e1:cd:74:8c:
9b:cd:31:1a:2c:42:62:ea:41:55:50:36:f2:ef:3f:
ea:7e:68:8f:9f:a9:c2:ea:86:6b:62:1e:5b:59:4a:
ef:6a:2e:e9:78:1f:fc:57:15:dc:80:6b:22:03:c3:
a3:56:46:55:66:7d:87:35:29:fb:dd:2d:95:00:36:
6c:9f:2b:ee:bd:53:f0:7e:77:c4:9d:f9:25:41:88:
9b:47:b9:90:6b:67:db:2c:46:fc:c1:46:b3:f9:79:
1c:76:69:3b:ca:04:d9:6e:d2:dd:56:4a:60:63:5f:
f2:50:3a:a1:83:49:e6:fb:84:c7:23:78:ea:4d:b7:
5c:d8:f6:bb:17:fd:f3:69:25:5f:43:5a:4e:36:ae:
af:04:b3:d9:45:33:39:ed:1e:bf:2d:33:1e:61:65:
4c:69:4f:38:7b:09:9f:46:c1:8e:d1:10:00:26:e0:
c4:c6:66:9c:f6:c9:a1:34:21:a4:6f:cf:b5:18:11:
6e:f3:3e:8a:fa:1e:32:4c:bf:15:ba:90:f4:2e:9e:
c4:eb:2b:e8:fe:82:cc:e4:6e:c0:05:ca:74:c0:38:
27:3a:49:5d:07:bf:d5:ec:24:a6:27:89:d8:27:f7:
04:46:37:7e:e7:db:b8:d1:b2:17:98:7b:c5:45:7b:
ef:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:70:24:58:FC:95:B7:73:90:89:D1:63:E3:B1:CD:C7:D4:DF:23:8E
X509v3 Authority Key Identifier:
keyid:BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/VHAkWPyVt3OQidFj47HNx9TfI44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:934::/48
2001:67c:bf0::/48
Signature Algorithm: sha256WithRSAEncryption
9a:d8:40:a5:80:32:80:db:6d:21:11:c9:ad:fe:10:43:fb:50:
c6:12:2a:ca:bd:6f:36:5a:3a:47:84:73:48:48:5a:47:c1:c6:
86:d4:48:2e:b2:31:b7:6e:bd:1c:39:c0:4e:45:d1:44:7b:f7:
a7:06:9c:76:eb:c6:39:f0:2f:f0:37:50:15:cc:33:0a:c4:9e:
2d:1c:1a:a1:1c:35:57:71:21:9a:fe:64:22:00:61:0f:f4:7a:
b2:ca:52:00:eb:cf:b7:7c:4a:49:e6:b5:0e:0c:bb:20:25:46:
f0:ed:90:ca:a8:97:c9:3f:57:90:33:68:b4:ed:b1:e7:34:7f:
2b:94:65:35:63:9c:90:29:e2:7e:18:98:31:9f:7b:88:b9:4d:
51:70:12:fa:91:c1:df:63:e5:45:0b:60:93:6a:c6:ff:e0:2d:
e2:05:93:79:87:95:f1:2e:1b:d9:99:65:b0:5c:3b:51:54:be:
02:f4:bf:28:40:3f:f9:e1:5a:d2:fa:10:cf:7c:b5:7e:70:23:
27:ff:14:76:83:3c:0f:23:f6:97:7b:ac:59:0f:ea:fa:ef:b4:
a6:ae:c1:57:b4:2b:75:51:a2:7d:8d:c0:67:4b:af:0b:32:4a:
71:f9:41:75:93:1c:cc:0d:62:08:49:19:2e:40:7e:be:4c:02:
24:77:af:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:59 2024 by rpki-client on console-fra.rpki-client.org