Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/VjcOqIlLpIjM961DQvfNSNfdwic.roa
File: VjcOqIlLpIjM961DQvfNSNfdwic.roa (raw, json)
Hash identifier: xVp8vWrJL5P4ENvQpxj0+lVlF2uA0FE1l3tmOiyZ1Hc=
Subject key identifier: 56:37:0E:A8:89:4B:A4:88:CC:F7:AD:43:42:F7:CD:48:D7:DD:C2:27
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01856F2FE030CB855AF68BC60AB1F723B48E
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/VjcOqIlLpIjM961DQvfNSNfdwic.roa
Signing time: Sun 01 Jan 2023 21:14:46 +0000
ROA not before: Sun 01 Jan 2023 21:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60021
IP address blocks: 45.9.8.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:e0:30:cb:85:5a:f6:8b:c6:0a:b1:f7:23:b4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 21:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56370ea8894ba488ccf7ad4342f7cd48d7ddc227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a7:53:be:b6:6d:0c:05:b9:84:04:ae:dd:d2:
27:89:82:0f:f8:02:b4:17:95:28:19:cd:d0:89:f4:
66:8a:c4:15:c1:a2:50:51:1b:70:a6:00:a0:9b:62:
de:a5:0b:39:07:41:99:59:35:31:7c:a2:d2:0d:d8:
8d:bf:65:b8:d2:c0:7e:1c:8f:fa:0f:f2:c7:9f:31:
33:61:f6:a4:43:22:66:36:57:f1:02:19:e4:82:0d:
8b:13:a8:e9:39:11:a6:a9:4e:f7:23:e2:d1:e2:66:
1c:7e:d5:dc:40:a4:fe:c3:c6:9d:eb:d3:8b:3d:ac:
96:41:94:fa:ce:ee:ca:fd:e5:34:67:30:4f:68:1b:
00:ab:c3:1b:a4:ab:7d:95:6a:ed:73:4e:a2:86:00:
07:74:fb:db:4d:9f:03:e9:a8:26:73:ea:14:4a:88:
e8:ad:ac:4d:85:20:21:30:c4:81:17:99:93:39:2f:
26:65:89:2e:be:bd:96:4f:f3:19:aa:ce:82:ca:b8:
7a:68:83:aa:83:62:d4:58:bf:cd:7a:ab:65:81:72:
ad:e5:35:da:9a:d0:96:50:2c:a6:42:33:75:34:ca:
e1:7d:ae:59:62:cc:2a:17:03:d1:b1:07:40:d1:9d:
a7:04:e8:39:8a:6f:a2:41:30:de:e0:c8:f5:3e:38:
0d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:37:0E:A8:89:4B:A4:88:CC:F7:AD:43:42:F7:CD:48:D7:DD:C2:27
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/VjcOqIlLpIjM961DQvfNSNfdwic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.8.0/23
Signature Algorithm: sha256WithRSAEncryption
59:39:b3:a8:58:3c:db:2a:9e:e9:34:0b:71:1a:08:af:d3:1f:
df:48:4a:19:64:81:76:6a:fc:27:44:41:d4:e0:44:30:d3:de:
b8:f9:82:3d:8f:b2:a8:90:5f:2e:d7:05:86:1e:d4:c1:92:ae:
c9:7f:d4:0b:3c:bb:89:7f:97:6c:68:00:fc:4d:d3:60:62:dd:
e2:e6:5b:83:f6:5e:0e:fd:77:6d:85:bd:8c:45:0c:b1:78:0a:
f0:8a:f4:58:dd:ac:0c:49:08:6a:31:c7:3c:ff:8d:84:9b:cd:
31:dd:56:59:f8:27:9d:62:7d:4a:1a:37:e1:00:c6:5f:ab:d9:
56:b4:8a:f8:87:43:1d:ea:1a:34:d4:4c:53:76:f7:51:b5:47:
9b:27:6d:4f:8d:70:68:b9:6f:03:45:88:bc:bd:bc:60:02:09:
a0:51:63:20:eb:8f:6f:8c:4b:4b:a8:52:44:92:1e:d7:7e:25:
c1:4e:d1:92:3b:ba:80:2c:f0:a2:b3:21:37:dd:12:63:01:14:
65:2a:70:ae:05:79:ad:1d:9c:45:93:07:d0:32:e1:0b:31:7d:
8e:a4:d7:69:9b:6b:21:7b:19:8d:4d:2d:31:54:cc:fb:3a:a4:
f7:52:3d:16:69:66:14:f3:6f:66:23:0c:50:d3:a5:66:55:c4:
61:54:c7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org