Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/VgTEFQhenWphaQIo8kfV3YiW9CE.roa
File: VgTEFQhenWphaQIo8kfV3YiW9CE.roa (raw, json)
Hash identifier: 8/Z67e01DLU9ycA975Gj2aLHfqzvk20+LLgigaW/sGw=
Subject key identifier: 56:04:C4:15:08:5E:9D:6A:61:69:02:28:F2:47:D5:DD:88:96:F4:21
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 018CC801812BEB51A375555A5428C82EB05E
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/VgTEFQhenWphaQIo8kfV3YiW9CE.roa
Signing time: Tue 02 Jan 2024 02:29:50 +0000
ROA not before: Tue 02 Jan 2024 02:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210773
IP address blocks: 91.193.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Mar 2024 09:14:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:81:2b:eb:51:a3:75:55:5a:54:28:c8:2e:b0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jan 2 02:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5604c415085e9d6a61690228f247d5dd8896f421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:0e:03:d8:29:7a:a2:97:5e:7e:df:31:5f:
b7:9e:7c:bf:30:22:2a:27:47:19:4d:57:e5:ba:d1:
1d:97:d9:e9:64:a6:79:8a:c8:00:84:12:11:21:14:
75:68:0b:f9:bd:c8:20:76:b8:a0:9b:82:bc:c1:9f:
64:0b:a1:02:28:60:7c:7e:d2:ee:fc:09:a5:51:f6:
a6:be:0d:57:f3:b2:72:90:60:e6:41:53:55:97:44:
59:ec:ed:33:57:04:4a:d7:34:f6:b3:82:f1:cd:c9:
60:74:17:29:59:97:8f:4c:33:81:98:cd:79:86:c8:
5d:05:74:46:9f:c2:b9:8a:9b:ae:4e:07:a9:60:79:
cb:d4:06:c3:f2:59:db:b3:d8:51:d0:9e:09:7d:f0:
3e:e3:c4:98:c5:f2:95:e2:7b:4e:7a:a4:e8:57:75:
a1:89:53:e4:2a:db:71:27:2a:53:47:eb:f5:60:32:
24:5f:0a:30:b7:6d:9d:98:39:ac:a3:5f:f3:4b:70:
53:cc:1c:a3:8c:f8:f4:71:a1:06:30:61:a4:15:ab:
b0:3a:74:3f:15:ce:a2:bc:f1:ca:e3:43:a8:34:08:
b8:54:ef:58:74:65:fe:7b:34:f8:b5:72:ae:97:81:
ef:c9:2c:fa:89:96:4d:d5:48:3f:e4:11:62:5a:96:
44:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:04:C4:15:08:5E:9D:6A:61:69:02:28:F2:47:D5:DD:88:96:F4:21
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/VgTEFQhenWphaQIo8kfV3YiW9CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.252.0/24
Signature Algorithm: sha256WithRSAEncryption
48:4d:54:e6:5e:11:0c:07:58:7d:79:53:97:26:7a:82:25:76:
e3:40:9e:6e:63:18:ca:18:14:49:db:ad:84:9e:74:d1:97:33:
b6:e3:d2:68:68:ac:45:5c:51:7e:b4:2e:6c:ca:df:25:5f:9f:
a2:b1:c7:85:5f:0a:12:d6:d6:e0:4a:ba:ed:6a:23:34:ae:73:
a5:bf:77:fb:8e:dc:1f:f7:ae:55:5f:cf:5d:1d:2e:21:33:ad:
1f:72:d2:af:e9:d1:23:15:a8:6f:c8:b6:e6:87:38:d0:08:ad:
47:a7:d9:06:46:ac:5a:6a:e6:76:3c:2e:c8:7a:34:1b:c0:3b:
74:0d:d1:6e:b6:ab:e2:e6:92:95:ce:37:3c:91:a7:23:02:80:
6e:13:bb:6f:c6:ea:9c:7c:0f:dd:ab:79:f0:60:26:02:7e:8d:
e8:f0:af:5c:54:30:d4:b2:54:89:0c:3a:1d:8f:57:7d:30:ff:
17:3e:bb:99:27:50:84:d2:64:33:1f:b3:fb:cd:aa:56:a3:7a:
db:78:ff:c2:58:c6:5e:11:b1:ae:34:10:e5:1a:62:ac:9d:3f:
2f:91:fd:07:f9:b0:89:73:b2:93:bb:c7:b9:9a:45:1b:75:f8:
64:18:a0:be:85:51:bf:20:7c:76:ef:52:8e:03:db:d1:31:5f:
d5:05:93:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:25 2024 by rpki-client on console-ams.rpki-client.org