Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/Vt96lpuwSYC3SlM_3lYNjynGnWs.roa
File: Vt96lpuwSYC3SlM_3lYNjynGnWs.roa (raw, json)
Hash identifier: Fugr6X8Rk60wsO4NksISNdA+ggDMqzG5yNrJmgBJpAE=
Subject key identifier: 56:DF:7A:96:9B:B0:49:80:B7:4A:53:3F:DE:56:0D:8F:29:C6:9D:6B
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 01856F5DE4FB0EA6A27DB9CA9D4940F93666
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/Vt96lpuwSYC3SlM_3lYNjynGnWs.roa
Signing time: Sun 01 Jan 2023 22:05:02 +0000
ROA not before: Sun 01 Jan 2023 22:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209251
IP address blocks: 195.168.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:e4:fb:0e:a6:a2:7d:b9:ca:9d:49:40:f9:36:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 22:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56df7a969bb04980b74a533fde560d8f29c69d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9f:78:eb:bd:f9:7e:ac:5c:b3:d3:29:e5:60:
21:98:f8:aa:22:b0:2c:1d:b6:1d:62:26:4a:a0:f5:
c0:0e:b6:27:31:bd:e8:f0:e1:97:32:01:37:bc:e5:
31:53:6e:15:62:20:c1:e7:ba:c3:5b:8e:fd:b8:d8:
05:00:9c:38:ec:99:d0:48:1b:a6:9e:06:47:6f:17:
3c:8b:9c:51:49:a4:40:63:40:29:31:eb:f8:40:f4:
ce:3b:52:4c:c2:c6:53:2f:83:23:6f:c7:f6:46:14:
f5:70:1b:fb:3a:84:87:4e:f3:be:8b:5e:9d:15:19:
f2:37:78:40:93:a2:de:89:f6:a0:b4:b5:d4:83:aa:
ae:0e:64:01:30:97:c2:27:59:97:7f:f3:34:12:bb:
62:bb:16:9c:6d:4d:ba:55:3a:ef:85:bd:95:8a:51:
f1:08:0e:0e:b0:12:b4:24:97:20:84:53:85:3f:0f:
3f:a8:94:62:a4:82:e4:eb:15:6e:b9:0b:82:39:3d:
41:f5:ad:26:37:85:8d:11:8d:ac:4c:c1:0b:6d:16:
a9:ae:06:3e:a3:cb:8a:af:b7:0c:1b:21:db:9c:07:
71:83:b1:51:bd:3d:3e:0f:93:14:3b:be:db:1b:ce:
0f:0f:6d:19:45:ca:e1:2c:24:7e:f4:0a:97:8d:88:
3d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DF:7A:96:9B:B0:49:80:B7:4A:53:3F:DE:56:0D:8F:29:C6:9D:6B
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/Vt96lpuwSYC3SlM_3lYNjynGnWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.168.218.0/24
Signature Algorithm: sha256WithRSAEncryption
04:bf:83:6b:8c:8e:2c:79:9b:90:96:70:10:d4:bd:f0:11:86:
fa:4c:10:6e:87:9c:79:d0:0e:2d:ee:50:eb:0b:ef:f1:2d:80:
2e:5d:bc:6c:3b:e2:b8:c9:e4:2d:9f:99:79:7b:8d:19:8e:92:
4a:c1:6e:60:f1:b6:54:37:01:43:08:df:56:d9:da:b2:d8:37:
13:a2:ff:a6:ac:e3:53:b4:f6:3a:e6:37:df:5e:d3:a6:04:9f:
1e:e0:0b:a0:d9:05:50:32:14:9a:7e:ae:1f:45:0d:d2:ff:7a:
36:5a:93:46:76:9b:7f:f9:aa:1f:e5:c5:67:42:ba:20:7d:99:
04:fa:db:46:05:61:32:5f:87:70:db:bd:e3:a1:c4:e1:55:f5:
4d:fd:78:0c:b8:c1:11:33:77:0c:5a:a5:b4:e5:af:e8:b9:96:
5b:c8:b5:42:e5:c2:f7:59:b8:70:34:c5:aa:84:4b:be:c5:d1:
89:f0:f8:54:55:36:48:e8:a2:a8:70:b6:64:2e:a5:44:40:cf:
3e:d8:d2:a1:b0:e0:67:f8:4f:1c:a1:8a:89:af:60:7d:6a:47:
65:e1:e9:c9:a0:b7:70:79:6e:5a:b9:4a:c2:b9:56:b9:4d:de:
dd:79:76:92:48:54:83:d4:cc:7c:13:6b:5c:e8:8a:d4:1b:8d:
d5:1c:3d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:18 2024 by rpki-client on console-ams.rpki-client.org