Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a507cd-a377-4821-b9d2-24a3004aca54/1/VoEVsV8ThKrXdb3oScCgQlpz5pw.roa
File: VoEVsV8ThKrXdb3oScCgQlpz5pw.roa (raw, json)
Hash identifier: OfkASsRKQmp45NhF3KLd9BHojc27/AVIjndA6G0XwJg=
Subject key identifier: 56:81:15:B1:5F:13:84:AA:D7:75:BD:E8:49:C0:A0:42:5A:73:E6:9C
Certificate issuer: /CN=0b0d3768a8efc3b7068801cbbee9eb56fe6d001c
Certificate serial: 0185704B9D21B615A893D647F446E22FE463
Authority key identifier: 0B:0D:37:68:A8:EF:C3:B7:06:88:01:CB:BE:E9:EB:56:FE:6D:00:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cw03aKjvw7cGiAHLvunrVv5tABw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a507cd-a377-4821-b9d2-24a3004aca54/1/VoEVsV8ThKrXdb3oScCgQlpz5pw.roa
Signing time: Mon 02 Jan 2023 02:24:41 +0000
ROA not before: Mon 02 Jan 2023 02:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28788
IP address blocks: 91.206.246.0/23 maxlen: 23
194.88.236.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:9d:21:b6:15:a8:93:d6:47:f4:46:e2:2f:e4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b0d3768a8efc3b7068801cbbee9eb56fe6d001c
Validity
Not Before: Jan 2 02:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=568115b15f1384aad775bde849c0a0425a73e69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:fd:4f:60:93:ff:03:97:c7:69:4f:43:ba:
ae:c3:ca:3c:75:27:56:7d:7c:ba:61:e0:91:f7:57:
f2:c3:98:04:aa:3a:61:a9:63:ea:a6:17:8a:40:4f:
e8:c8:e6:99:c5:b1:4c:88:8f:1e:5b:11:fe:27:3d:
98:d5:6b:51:90:c1:cd:ec:55:0c:1a:10:0f:a9:f6:
fc:c0:83:54:94:c6:38:da:e8:04:10:24:67:b5:68:
4a:53:15:a1:70:57:09:5a:f9:02:11:34:1e:91:4b:
b6:46:2b:8d:ea:64:fe:a0:30:6f:c7:f1:38:db:6b:
ab:5f:91:85:a2:1f:4f:cb:d7:db:a2:08:aa:4d:72:
3d:10:56:08:99:b4:88:67:df:7d:c3:db:7a:93:bd:
5a:e8:88:1e:18:9c:b4:12:61:84:32:e3:c4:93:4d:
92:da:9e:2c:4c:7c:c5:b7:be:8b:c8:a6:11:0e:13:
b2:74:50:6b:89:65:64:cd:ab:68:9e:f5:4b:89:3f:
ca:3e:f7:61:8e:02:c3:e5:a9:ed:95:16:54:aa:69:
82:48:3a:c9:0c:d8:52:06:04:a2:fc:dc:71:d4:d0:
d0:d8:e1:c8:fb:6e:da:fa:53:e4:0c:63:2a:da:8c:
43:dc:a9:af:0a:fa:08:c9:fe:59:6d:e1:dd:30:bc:
f6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:81:15:B1:5F:13:84:AA:D7:75:BD:E8:49:C0:A0:42:5A:73:E6:9C
X509v3 Authority Key Identifier:
keyid:0B:0D:37:68:A8:EF:C3:B7:06:88:01:CB:BE:E9:EB:56:FE:6D:00:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cw03aKjvw7cGiAHLvunrVv5tABw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a507cd-a377-4821-b9d2-24a3004aca54/1/VoEVsV8ThKrXdb3oScCgQlpz5pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a507cd-a377-4821-b9d2-24a3004aca54/1/Cw03aKjvw7cGiAHLvunrVv5tABw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.246.0/23
194.88.236.0/23
Signature Algorithm: sha256WithRSAEncryption
42:6b:25:58:e8:54:d6:63:7b:a0:eb:2a:ee:e8:8d:f0:7b:f1:
fa:cc:b0:93:40:c7:2e:e5:3a:92:ce:78:6f:23:55:6a:e9:9e:
1f:06:d7:a2:6e:6c:95:75:4c:92:36:f7:12:50:cb:67:4f:e4:
c9:a8:b3:ba:18:da:65:2d:b3:66:d5:f8:35:66:25:fb:d5:f9:
4e:da:a0:22:3a:ed:99:ad:c3:2e:3e:b8:6d:8e:bd:a7:11:80:
b7:30:ac:a4:c7:9d:15:ee:a0:8c:9a:2c:e9:cc:50:69:14:89:
7b:0b:c3:0a:43:69:9f:8a:ac:f0:f1:44:a2:1c:22:7c:fd:21:
e5:df:48:40:40:ec:d3:79:ab:71:7d:f9:7d:90:68:cc:b7:ab:
e6:b5:ed:8e:10:0f:de:b6:3a:3b:c1:1d:87:c9:0e:e9:be:1f:
98:79:5a:86:35:8b:87:c4:b4:7d:b3:3c:4c:a8:a6:2c:38:27:
b3:f8:77:b1:2d:f8:6d:9d:f6:13:26:76:b9:da:55:09:77:d2:
19:ce:54:5a:1b:1b:a0:14:13:dd:b1:1d:3f:af:50:8d:bf:27:
cd:80:6e:4e:64:51:80:13:38:05:f0:d5:94:da:86:14:1c:e2:
7b:01:22:e7:6f:24:72:2c:f4:f0:36:ed:3a:b9:1a:db:87:5c:
30:44:2f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:32 2024 by rpki-client on console-fra.rpki-client.org