Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VJICawi-cOPcoLd1O0rGQsUqIZo.roa
File: VJICawi-cOPcoLd1O0rGQsUqIZo.roa (raw, json)
Hash identifier: 0KoO87NambHFBrb3csdUrazNFIZhqLWklCgEN3fonTQ=
Subject key identifier: 54:92:02:6B:08:BE:70:E3:DC:A0:B7:75:3B:4A:C6:42:C5:2A:21:9A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018C25DB0BA40405FE05F0CE5EF085CDC9D6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VJICawi-cOPcoLd1O0rGQsUqIZo.roa
Signing time: Fri 01 Dec 2023 14:49:21 +0000
ROA not before: Fri 01 Dec 2023 14:49:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210107
IP address blocks: 93.90.75.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:25:db:0b:a4:04:05:fe:05:f0:ce:5e:f0:85:cd:c9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 1 14:49:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5492026b08be70e3dca0b7753b4ac642c52a219a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:4f:91:09:63:e6:c2:57:ed:6d:c4:09:7c:
80:0b:c9:0b:dc:4b:93:d9:61:c7:4b:a0:39:d2:47:
5d:72:a5:ca:31:75:30:3f:1a:27:76:4e:7e:b9:fd:
69:2f:ea:83:e2:ea:5c:be:e9:78:25:19:c7:c4:d3:
72:f7:7c:15:fa:00:7d:34:98:77:0f:7b:34:65:41:
21:0c:74:91:6c:06:65:8a:a1:2e:de:71:8a:4b:4a:
68:2c:d4:03:2a:06:bc:f9:61:91:0f:88:ba:3c:c6:
bd:b4:e9:e6:c0:4a:8e:c9:f2:10:18:56:30:1c:ef:
10:85:2a:19:ab:27:99:8d:6d:9b:fb:40:dd:e9:9c:
91:b0:7c:ca:12:f4:96:c4:c4:1e:d1:8e:f3:62:21:
c4:1c:38:e0:43:80:9e:61:c2:4c:dd:b1:be:ad:79:
01:db:b5:35:eb:ee:ae:18:f4:02:61:62:e1:21:20:
7f:50:2f:4b:cd:6d:b2:70:da:b7:7d:6f:82:ce:41:
31:6a:ad:ff:ec:98:a3:d2:75:57:b9:9d:be:07:73:
e8:c5:6e:71:6f:b0:82:04:dc:68:19:a8:19:4a:ee:
25:a1:cb:e1:6b:36:d5:98:d2:6e:4f:be:54:61:ec:
d5:c7:14:fb:4b:bc:13:24:42:2a:1a:ea:a1:91:bd:
7d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:92:02:6B:08:BE:70:E3:DC:A0:B7:75:3B:4A:C6:42:C5:2A:21:9A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VJICawi-cOPcoLd1O0rGQsUqIZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.90.75.0/24
93.114.183.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:95:29:62:08:ad:24:6c:6c:e5:4c:e7:1f:38:b4:79:62:6a:
83:d4:af:49:02:97:bb:23:55:a5:0a:1f:f1:91:1c:5c:00:83:
c1:ad:6d:a4:e3:d5:95:67:11:8d:cf:75:9f:dd:ec:34:17:d6:
fa:e4:6a:62:ec:e1:ca:cd:fb:06:43:12:65:40:e3:31:09:f0:
80:8c:b7:74:cb:b0:78:17:1d:1d:67:19:74:ae:2b:3d:c5:df:
35:da:01:9e:c9:b8:a9:12:5e:45:1e:00:4e:63:97:72:4f:2a:
f5:18:ca:43:a8:66:6d:99:3c:8e:7e:c7:ca:0c:ba:4a:bd:a7:
d7:db:78:7f:64:a6:04:23:d8:92:19:7e:c8:d9:d3:38:8a:cd:
c2:b8:c3:28:1e:b6:dd:ee:9f:c3:4b:c7:8b:4c:2b:91:47:55:
6f:29:64:b5:a2:68:df:34:c3:b3:00:b5:c7:3e:44:82:14:21:
41:83:5a:38:02:44:b3:5b:38:b1:06:1f:1b:40:db:c1:77:61:
ac:96:00:31:8a:44:c0:1b:1e:0d:41:65:04:2c:a4:6f:84:0c:
17:cc:2d:12:37:3f:be:d8:53:76:8e:29:7e:49:95:6f:6a:ce:
22:f7:f0:20:77:17:50:ad:40:44:a2:77:89:19:32:b9:e8:17:
07:c1:50:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org