Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/V9hz5f4asGdUAL2J2GrUolDvQQ8.roa
File: V9hz5f4asGdUAL2J2GrUolDvQQ8.roa (raw, json)
Hash identifier: tuVNEGUaUVQJ57+iX2JqsIYeYylw8NOE7RFXwynXoag=
Subject key identifier: 57:D8:73:E5:FE:1A:B0:67:54:00:BD:89:D8:6A:D4:A2:50:EF:41:0F
Certificate issuer: /CN=59ec8a5afa3ed8ebb856d4d821f696d157f8a757
Certificate serial: 01857094F015C65CAA094F38799184E11A02
Authority key identifier: 59:EC:8A:5A:FA:3E:D8:EB:B8:56:D4:D8:21:F6:96:D1:57:F8:A7:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/V9hz5f4asGdUAL2J2GrUolDvQQ8.roa
Signing time: Mon 02 Jan 2023 03:44:47 +0000
ROA not before: Mon 02 Jan 2023 03:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 680
IP address blocks: 129.247.0.0/16 maxlen: 16
192.108.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:f0:15:c6:5c:aa:09:4f:38:79:91:84:e1:1a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59ec8a5afa3ed8ebb856d4d821f696d157f8a757
Validity
Not Before: Jan 2 03:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57d873e5fe1ab0675400bd89d86ad4a250ef410f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9c:41:5d:f0:73:b0:f5:b4:e1:3a:d3:cf:de:
cb:8f:1c:aa:df:04:81:7c:d4:b4:0b:81:48:f2:a4:
1f:58:56:d0:92:6c:0c:90:66:53:d2:27:82:c4:db:
6f:16:a1:6b:4a:15:8f:8c:d1:ab:17:1e:a7:8f:08:
98:8a:73:2a:2e:f6:60:a5:94:1e:06:e6:f7:2a:57:
8d:4d:99:62:86:a6:87:42:fc:cf:50:e9:16:f4:5b:
18:a1:f1:2d:cb:50:26:7a:ed:d1:8d:2d:d6:0c:28:
44:7c:fa:54:42:39:c7:7f:ab:90:6d:bb:b3:03:33:
9c:3f:d9:c3:4c:7d:f6:e4:57:4b:c0:4a:2f:1c:5a:
3f:a9:00:97:20:99:2b:76:85:3e:18:a1:74:7a:fa:
33:3a:7f:21:86:ea:80:7e:ca:31:b4:0b:65:b5:3f:
b7:3b:72:ac:ce:f3:b4:cf:22:a3:19:3a:aa:bf:6e:
41:ce:c3:74:ab:68:15:ac:67:a6:a2:3d:eb:e9:9d:
5f:5e:68:fe:51:e7:90:5c:4a:6d:24:a2:fa:a5:2b:
1c:a6:d3:5c:b9:68:06:38:f0:92:53:97:24:a2:32:
81:db:06:0c:c3:cf:31:51:ec:44:c0:00:2b:7e:4d:
64:1f:9d:30:43:f6:57:d3:04:66:9d:6c:d2:4b:f8:
d1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D8:73:E5:FE:1A:B0:67:54:00:BD:89:D8:6A:D4:A2:50:EF:41:0F
X509v3 Authority Key Identifier:
keyid:59:EC:8A:5A:FA:3E:D8:EB:B8:56:D4:D8:21:F6:96:D1:57:F8:A7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/V9hz5f4asGdUAL2J2GrUolDvQQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.247.0.0/16
192.108.54.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:dc:fd:f0:24:43:4c:94:1a:3b:b5:ec:7d:24:24:b1:f9:50:
f3:45:e2:7f:97:00:7e:53:36:45:d3:de:ad:e7:e9:7a:6f:42:
99:33:be:01:c0:be:df:5d:e6:3b:e4:f9:2d:fe:c0:01:50:97:
91:35:ab:af:0c:34:63:a8:ee:5a:90:0e:92:56:6e:4a:9a:c8:
8e:a6:6f:b6:1e:4c:d8:57:b2:07:ef:dd:32:f0:9d:15:28:72:
23:ee:91:46:28:3d:c7:89:fe:4f:50:8d:c1:f8:40:41:75:86:
37:94:a7:5d:78:a6:16:32:1c:df:51:50:e1:2f:e4:32:6c:fa:
4d:95:b4:b5:ee:45:28:25:d2:c7:a4:6f:fb:08:44:bc:78:09:
d8:e8:87:b2:c9:eb:dd:7b:4c:e2:c2:2b:34:ae:11:53:7f:dd:
b5:6d:58:e2:fc:60:b4:ae:ea:60:e0:37:0a:fb:b5:24:8b:bf:
e6:83:a7:21:7e:87:b5:e2:c3:3b:c2:a6:ba:5e:af:31:37:45:
f7:b4:53:b5:08:c8:16:67:04:40:c1:6e:a1:5b:d3:f5:f8:f7:
ce:74:00:59:46:4b:1b:16:00:3f:49:c6:af:4b:ba:31:9c:b6:
ed:18:c1:ae:ff:f2:fc:0e:66:fd:02:3b:28:d5:28:80:ce:be:
d7:27:12:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:18 2024 by rpki-client on console-ams.rpki-client.org