Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/V-enEnAF7P8m-JLZlSVc0IxUVHE.roa
File: V-enEnAF7P8m-JLZlSVc0IxUVHE.roa (raw, json)
Hash identifier: b2TkAP0Rwx0+at/GMm5B2Aly82yNgv5UMzEX7m7kHSo=
Subject key identifier: 57:E7:A7:12:70:05:EC:FF:26:F8:92:D9:95:25:5C:D0:8C:54:54:71
Certificate issuer: /CN=5525775a706ac00c82fa29339e22e43108099e79
Certificate serial: 01856FC249CE78587F65CB48DA7C27FB2AAF
Authority key identifier: 55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/V-enEnAF7P8m-JLZlSVc0IxUVHE.roa
Signing time: Sun 01 Jan 2023 23:54:41 +0000
ROA not before: Sun 01 Jan 2023 23:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212694
IP address blocks: 109.233.40.0/21 maxlen: 21
178.17.212.0/22 maxlen: 22
2a04:c040::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:49:ce:78:58:7f:65:cb:48:da:7c:27:fb:2a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5525775a706ac00c82fa29339e22e43108099e79
Validity
Not Before: Jan 1 23:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57e7a7127005ecff26f892d995255cd08c545471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b8:fd:0a:0e:f3:a4:04:8e:a5:35:0a:70:a4:
7e:0d:c7:23:8e:fa:f5:84:91:62:5d:a0:36:01:ed:
2e:f3:9c:87:48:5d:f6:90:08:18:27:78:73:5e:bd:
da:83:f6:e4:01:f6:19:b1:7a:da:0c:90:bc:13:9d:
27:69:f2:91:02:4b:8b:14:d0:64:f8:b8:fa:7e:48:
79:5e:31:cb:dd:24:19:80:de:84:56:01:61:b2:d3:
45:bf:01:46:0e:99:11:1d:20:23:62:86:1b:e3:c9:
e4:5f:06:6d:d6:c5:47:eb:0c:82:b8:3a:0a:88:aa:
04:be:d3:a7:74:14:32:4c:ca:09:c4:4d:61:fb:71:
f4:7d:0f:99:27:5c:a1:0a:10:aa:4e:c7:2b:97:2d:
c2:eb:3d:b3:fb:99:1d:49:f5:7b:49:d3:12:9b:d3:
0f:72:1e:e2:d6:e8:0a:5e:54:37:ee:af:b8:99:c4:
59:44:ea:c9:40:9b:b1:15:41:d2:13:51:2c:da:b3:
bb:7b:96:4c:f4:23:78:a4:20:7d:58:15:e8:62:f2:
be:6c:4b:71:7e:76:bc:4d:90:78:9b:f5:b5:7e:55:
77:b3:bf:c0:ef:8f:cc:a4:57:17:ea:00:dc:e3:f8:
a7:e3:dd:44:2c:44:44:ef:8d:a4:60:bd:da:a2:e7:
97:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E7:A7:12:70:05:EC:FF:26:F8:92:D9:95:25:5C:D0:8C:54:54:71
X509v3 Authority Key Identifier:
keyid:55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/V-enEnAF7P8m-JLZlSVc0IxUVHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.233.40.0/21
178.17.212.0/22
IPv6:
2a04:c040::/29
Signature Algorithm: sha256WithRSAEncryption
41:36:d1:9c:89:d0:c7:f6:12:f2:98:1a:e4:af:70:14:20:c9:
6b:5d:d8:9b:8b:b0:cf:7e:fd:1b:7e:03:a7:09:65:48:44:b1:
b2:79:b9:50:ef:bb:f6:2a:e3:23:47:83:ca:0d:72:1d:63:b8:
b1:ce:70:08:52:1a:be:37:8a:55:e0:f3:7b:63:02:e5:49:4e:
7a:b8:09:b7:0a:f2:30:cb:e2:73:9f:d2:09:5a:31:0f:24:9b:
d8:0d:0a:a9:26:ac:4e:fa:73:79:e3:66:59:71:d6:d0:49:87:
48:a2:4f:c5:14:08:62:46:dd:0c:d5:8b:76:9a:05:cb:c7:af:
53:22:be:08:94:7b:fc:52:0f:0f:97:4f:b2:fc:9d:9d:28:b5:
45:a3:98:fd:a9:ce:98:53:51:0a:12:03:7b:f2:3f:21:9f:cf:
06:d5:2d:09:1b:07:bb:11:60:dd:07:2f:53:e7:4e:43:03:f5:
4d:d0:d4:34:d0:08:27:c9:d2:5d:e9:81:5c:f0:64:19:0e:dd:
39:01:a6:88:b2:cc:a4:97:22:51:91:8d:7c:9c:d2:cf:c2:83:
c4:b6:ac:49:d6:8c:42:59:94:9a:fb:55:38:3a:9b:91:81:45:
a3:b2:87:b6:28:8f:59:ef:3e:e0:d4:41:7e:98:80:88:8e:ad:
fe:2a:f7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:54 2024 by rpki-client on console-ams.rpki-client.org