Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/VNop5kNMMXlp71u00fvtqSvsUNI.roa
File: VNop5kNMMXlp71u00fvtqSvsUNI.roa (raw, json)
Hash identifier: yg1haHOeTTsuGYOHnjn8pJZrGo8dalGv9NBzb3mFVmk=
Subject key identifier: 54:DA:29:E6:43:4C:31:79:69:EF:5B:B4:D1:FB:ED:A9:2B:EC:50:D2
Certificate issuer: /CN=5cbd6cd91ad6a7286b21f6509fdd9f50fee75d87
Certificate serial: 01856CEF10ACA0AF750ECC9B74B55EEAEBA5
Authority key identifier: 5C:BD:6C:D9:1A:D6:A7:28:6B:21:F6:50:9F:DD:9F:50:FE:E7:5D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XL1s2RrWpyhrIfZQn92fUP7nXYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/VNop5kNMMXlp71u00fvtqSvsUNI.roa
Signing time: Sun 01 Jan 2023 10:44:44 +0000
ROA not before: Sun 01 Jan 2023 10:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48943
IP address blocks: 195.10.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:10:ac:a0:af:75:0e:cc:9b:74:b5:5e:ea:eb:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbd6cd91ad6a7286b21f6509fdd9f50fee75d87
Validity
Not Before: Jan 1 10:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54da29e6434c317969ef5bb4d1fbeda92bec50d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0f:cc:87:53:3c:05:99:48:65:35:0c:93:e7:
f1:1c:7f:10:ca:23:db:47:e8:b0:28:93:ea:88:e2:
00:6f:4b:4e:0d:c0:0b:05:dd:68:a4:c5:a6:ca:d0:
74:39:93:89:fb:d7:3f:29:09:98:c7:ea:31:8f:ee:
11:47:6d:ef:b3:9e:f6:fa:33:a4:8f:1a:c2:10:b8:
95:49:6c:89:e2:da:d7:16:10:9f:f5:7c:2a:5d:07:
d4:6c:36:6e:74:bb:d2:31:42:e8:bd:72:6e:df:b1:
ad:b7:e4:be:c0:53:94:fa:16:ae:21:fd:fd:f5:d1:
44:ea:53:49:22:79:75:ad:ec:98:40:9e:ff:b0:f2:
25:13:4a:7e:29:fd:68:62:4f:ac:bc:b4:62:e5:c2:
ec:ae:0c:c3:90:5d:77:09:df:ef:16:4c:c5:f9:99:
d2:6c:dc:cb:53:28:9c:69:51:1e:77:de:ae:69:b9:
8f:49:11:d3:80:08:e7:6c:4e:90:a0:cf:64:db:85:
3e:c1:80:85:ec:5d:e1:a1:d3:e9:ac:b3:9e:92:a2:
29:de:87:cb:d0:a5:93:a5:d5:26:1e:c3:8d:77:28:
25:64:b0:4b:c8:09:97:7b:87:dd:92:e9:0f:55:47:
58:ca:b7:b6:72:d4:8e:e7:f6:34:20:39:31:8b:8d:
c3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DA:29:E6:43:4C:31:79:69:EF:5B:B4:D1:FB:ED:A9:2B:EC:50:D2
X509v3 Authority Key Identifier:
keyid:5C:BD:6C:D9:1A:D6:A7:28:6B:21:F6:50:9F:DD:9F:50:FE:E7:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL1s2RrWpyhrIfZQn92fUP7nXYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/VNop5kNMMXlp71u00fvtqSvsUNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.206.0/24
Signature Algorithm: sha256WithRSAEncryption
01:16:33:8c:d4:0e:e1:af:f2:22:d2:b4:62:bc:de:c4:42:eb:
eb:fa:7b:00:f8:ad:5e:53:51:78:b3:fc:2e:3b:fd:b1:e6:9f:
7f:6d:c7:e1:57:86:9a:bc:f7:da:e3:70:f2:04:af:04:16:03:
27:86:e0:6b:45:23:ad:2d:a8:f7:e5:51:fa:fa:ec:c5:02:ad:
96:58:61:23:57:86:5d:09:97:25:4a:ac:e8:f8:6d:7a:2a:00:
3a:b4:37:3f:48:05:6f:19:53:21:e6:1d:d3:2e:ec:0f:e8:1c:
fe:09:e1:e5:fe:27:3b:09:ae:41:3e:f3:d0:13:64:94:f5:38:
62:77:58:21:b6:57:3e:0f:a3:21:4d:03:c6:14:27:f3:ea:a8:
1c:4d:41:e7:d5:27:ca:8b:ee:12:f8:9c:e1:71:50:5d:23:d5:
e5:91:5f:76:4c:a9:ac:48:34:c1:fe:68:66:19:43:a3:d3:98:
b3:9d:f4:27:c5:c9:e9:5a:c0:49:c9:56:9e:d1:3a:7b:5b:6f:
be:fd:aa:77:47:8c:f9:84:fc:76:7c:04:06:5a:0c:20:dd:f4:
7b:15:60:82:fa:d6:58:07:79:e4:6a:ac:00:14:f8:a3:c7:0f:
0a:4a:7e:cf:ac:0e:e2:ee:47:9d:19:86:39:7a:98:9d:57:a4:
a8:22:4f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:23 2024 by rpki-client on console-fra.rpki-client.org