Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/VpH3-x0H3jr444gZ2U_eXxCZYww.roa
File: VpH3-x0H3jr444gZ2U_eXxCZYww.roa (raw, json)
Hash identifier: 4XUFDGykDRXynqoerPno+gY5Cq6WGJAA4OQWFSqylHE=
Subject key identifier: 56:91:F7:FB:1D:07:DE:3A:F8:E3:88:19:D9:4F:DE:5F:10:99:63:0C
Certificate issuer: /CN=0babfb67a0975384efb8b7b7ca807f714f75f84a
Certificate serial: 018996A29FF0DFA4750F915FE3C99165E7BC
Authority key identifier: 0B:AB:FB:67:A0:97:53:84:EF:B8:B7:B7:CA:80:7F:71:4F:75:F8:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/VpH3-x0H3jr444gZ2U_eXxCZYww.roa
Signing time: Thu 27 Jul 2023 09:16:27 +0000
ROA not before: Thu 27 Jul 2023 09:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57575
IP address blocks: 185.153.54.0/24 maxlen: 24
2a13:9a40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 27 Jul 2023 11:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:96:a2:9f:f0:df:a4:75:0f:91:5f:e3:c9:91:65:e7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0babfb67a0975384efb8b7b7ca807f714f75f84a
Validity
Not Before: Jul 27 09:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5691f7fb1d07de3af8e38819d94fde5f1099630c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:40:be:c3:11:e7:a0:06:5e:f1:f7:45:9a:7e:
9c:3e:24:3f:4a:ad:9e:46:c2:8c:28:8a:02:f9:be:
d6:c5:e8:52:5d:af:da:b1:0b:31:a2:84:b8:d9:5e:
84:2c:01:c2:15:25:16:f4:b4:65:11:ca:80:7b:98:
0b:1f:59:b6:11:1c:1d:8a:37:9b:6f:82:2a:25:66:
92:ad:25:2d:cc:ea:03:9d:d5:03:a7:20:5d:b6:96:
0d:70:b7:22:75:4a:cd:fc:3b:70:35:77:6a:28:fd:
14:fc:ba:32:fd:9f:da:b8:4b:24:85:09:88:ed:35:
cc:06:95:f0:e4:24:74:95:d8:63:5d:f4:a6:4b:89:
1b:06:e2:98:1c:34:be:f5:0f:58:57:b8:08:bb:5c:
92:d8:c8:d5:e7:da:34:a3:06:64:c4:88:99:0e:0e:
9a:09:fc:34:aa:2d:76:04:22:77:41:01:fd:73:78:
08:96:da:8a:cc:99:bd:d9:f8:bf:f7:86:99:07:77:
4a:28:c0:3d:9d:6d:2a:8b:56:d9:b2:87:38:69:a5:
11:1a:ea:86:41:04:7d:08:9b:9b:8c:1e:01:0a:c9:
dc:dc:3a:e1:8c:9f:c9:61:a7:72:22:e3:3a:bf:0f:
84:60:3d:42:b7:07:d8:68:86:83:43:ca:b7:6b:89:
b0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:91:F7:FB:1D:07:DE:3A:F8:E3:88:19:D9:4F:DE:5F:10:99:63:0C
X509v3 Authority Key Identifier:
keyid:0B:AB:FB:67:A0:97:53:84:EF:B8:B7:B7:CA:80:7F:71:4F:75:F8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/VpH3-x0H3jr444gZ2U_eXxCZYww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.54.0/24
IPv6:
2a13:9a40::/29
Signature Algorithm: sha256WithRSAEncryption
47:d8:c9:b7:f2:7a:f4:54:aa:7b:69:99:b6:7b:dc:3c:dc:06:
ed:a8:58:9a:43:26:e6:c6:80:f0:b3:86:c1:36:ac:ad:d9:70:
09:8a:de:44:ea:df:72:85:8f:b9:93:a0:fd:e1:43:a6:da:5a:
59:21:44:aa:d0:c3:36:de:a7:9e:06:e4:a4:14:81:a7:ff:5d:
e8:6a:63:5f:f9:b8:a2:a7:48:69:8d:23:1f:16:e5:aa:11:21:
57:ec:06:b6:07:bf:62:b7:02:f8:c8:fc:7f:10:4c:65:6c:a3:
4d:ee:e8:63:f4:8c:20:f3:2d:bd:93:5b:2e:6c:39:24:b8:0a:
a6:57:83:8f:49:e2:61:06:7e:cd:16:a8:78:e7:4d:ba:0d:e9:
54:89:09:d1:cb:ad:13:95:c4:29:c3:7d:ee:7b:24:99:6e:1d:
4a:d5:90:04:21:9a:91:4c:bd:2c:ed:c2:e4:c9:d2:11:c3:96:
86:6d:82:7e:fd:0f:48:31:c3:1c:82:7d:ba:5e:9c:9e:78:48:
5b:6b:74:86:11:aa:60:e2:ae:47:50:16:22:ef:01:8e:f9:28:
ec:ea:9e:4b:32:08:38:68:f1:4c:1d:33:e0:45:d2:38:a9:c8:
c6:eb:22:82:be:77:d3:bd:8e:48:71:65:e7:94:b8:35:5e:a4:
b2:28:1d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:28 2024 by rpki-client on console-ams.rpki-client.org