Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/VVtbYCnzLmDXQP5IDrCN2moy2Ro.roa
File: VVtbYCnzLmDXQP5IDrCN2moy2Ro.roa (raw, json)
Hash identifier: d2UZCDyDtxHDiNLxXB9KS2un+4gMKgkaW1tF3I3Taf4=
Subject key identifier: 55:5B:5B:60:29:F3:2E:60:D7:40:FE:48:0E:B0:8D:DA:6A:32:D9:1A
Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial: 01856F824185364BF1F677548599B1F1AA4F
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/VVtbYCnzLmDXQP5IDrCN2moy2Ro.roa
Signing time: Sun 01 Jan 2023 22:44:45 +0000
ROA not before: Sun 01 Jan 2023 22:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400040
IP address blocks: 45.12.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:41:85:36:4b:f1:f6:77:54:85:99:b1:f1:aa:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Validity
Not Before: Jan 1 22:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=555b5b6029f32e60d740fe480eb08dda6a32d91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bf:8b:eb:9f:aa:b7:02:fd:c8:24:3d:f7:d7:
e8:32:44:69:ae:88:f9:3b:fc:52:4a:a9:13:48:aa:
19:e4:48:f7:a5:eb:50:83:81:5a:22:bd:b5:cc:c2:
00:31:58:bf:1d:73:4b:fb:46:23:4a:44:81:b3:65:
27:2f:f5:8e:b6:96:aa:ea:92:98:db:31:57:c2:b8:
db:a4:2b:df:6f:87:12:50:4f:2d:d3:0f:80:cd:d3:
61:b4:fe:eb:c7:5d:88:33:a1:d7:22:61:b4:a6:69:
e7:ad:b2:2c:de:d1:b1:eb:63:aa:22:ba:95:5e:c9:
dc:55:01:82:bd:ed:ed:d8:35:9e:13:94:b5:18:8b:
41:4b:bb:fb:e7:02:19:36:8e:fb:e2:2e:96:f0:50:
79:18:b7:de:c3:3b:be:85:de:bf:af:02:a5:07:f1:
4f:ba:41:f1:47:a6:e1:35:5d:46:96:b9:3c:ae:7c:
ec:2a:cb:98:9d:37:1b:73:a8:9c:aa:d2:6f:e7:20:
e4:7b:4b:f6:e9:8e:b3:06:2c:9b:a4:5c:69:40:b2:
c9:fd:7f:a8:39:a9:3a:76:34:df:e6:e9:39:42:ab:
b9:7b:a3:4f:dc:4a:7c:3d:bf:98:ae:b3:06:f8:ca:
97:bc:86:e2:6f:89:0e:25:0d:95:75:2d:a4:43:d5:
ed:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5B:5B:60:29:F3:2E:60:D7:40:FE:48:0E:B0:8D:DA:6A:32:D9:1A
X509v3 Authority Key Identifier:
keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/VVtbYCnzLmDXQP5IDrCN2moy2Ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.187.0/24
Signature Algorithm: sha256WithRSAEncryption
43:11:54:9a:3c:26:c7:55:b6:da:d4:db:04:eb:c2:a4:4d:5e:
64:7c:b4:1d:4d:eb:e1:32:90:f0:04:0e:03:e0:ff:e7:26:8f:
b5:7f:f8:57:82:48:5a:89:a1:a5:18:c8:83:55:ea:02:a7:2a:
aa:0b:4b:72:2c:9c:ae:32:cd:55:30:a8:da:51:ed:7c:be:35:
c4:ec:68:0e:fa:55:31:23:b6:fc:ad:ee:87:d8:b0:59:9b:b3:
53:ae:a8:bd:62:c1:e9:a9:1f:27:b4:b3:4c:1e:f5:52:30:ed:
49:35:9e:57:50:75:8f:bd:c6:58:2e:6d:c9:29:1f:69:30:f0:
23:85:22:07:5b:26:f8:57:81:bd:e4:50:0d:60:8e:63:1f:d1:
41:c9:5c:ad:d8:f4:e7:82:ac:9b:fa:8c:3b:95:12:23:e1:c9:
1e:eb:ad:57:ab:ea:cc:39:ca:db:e6:74:f8:45:25:47:a8:1f:
e5:50:89:6f:17:92:28:bc:07:3b:18:5b:63:42:de:a5:0c:0f:
f5:54:96:e2:cd:06:ef:a2:d1:67:72:71:ca:c3:05:b6:b4:2e:
c7:e7:c8:a2:b7:ce:d7:ce:29:16:31:3e:0b:b7:b9:a0:7d:59:
56:28:4f:cd:93:3b:9d:18:5a:39:a9:26:2d:b0:af:9b:a1:0b:
63:ed:cc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:11 2024 by rpki-client on console-fra.rpki-client.org