Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/Vc1aZOfl2spetsue78HvRDcBqaQ.roa
File: Vc1aZOfl2spetsue78HvRDcBqaQ.roa (raw, json)
Hash identifier: 6A08fliaFCkZMtHUyTElx3WX0sEC3d66eiDITNQ3WVQ=
Subject key identifier: 55:CD:5A:64:E7:E5:DA:CA:5E:B6:CB:9E:EF:C1:EF:44:37:01:A9:A4
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 01857255B553940CE413CB0AD3359DCB94CD
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/Vc1aZOfl2spetsue78HvRDcBqaQ.roa
Signing time: Mon 02 Jan 2023 11:54:57 +0000
ROA not before: Mon 02 Jan 2023 11:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206717
IP address blocks: 213.7.209.0/24 maxlen: 24
93.109.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:b5:53:94:0c:e4:13:cb:0a:d3:35:9d:cb:94:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 2 11:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55cd5a64e7e5daca5eb6cb9eefc1ef443701a9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cb:36:d9:2c:82:e7:fa:4e:01:bf:f4:8b:eb:
1a:42:90:ed:c5:a8:cf:07:d3:a4:b8:06:63:99:10:
d8:71:bc:cb:a6:41:e2:27:a6:e8:52:68:15:c6:95:
8e:3b:26:90:55:bd:32:6c:17:ec:6b:ae:a6:95:68:
a3:b0:be:2c:c7:9b:9c:65:5d:8d:87:c6:c5:bf:d4:
29:40:da:db:33:fe:95:f1:00:7d:cf:f2:71:4f:b0:
7d:ed:1b:71:a6:8f:c3:c2:e5:b2:25:71:c9:df:7a:
67:ce:97:3f:eb:9d:a0:d2:2f:64:be:1b:fa:5a:bf:
37:ce:e6:2c:41:52:07:dc:f3:47:45:07:43:42:96:
b2:55:e5:60:a3:50:4f:a4:f2:01:64:8f:f4:1b:72:
c3:7b:e7:06:06:64:d0:b1:d2:7c:58:da:8a:00:78:
3b:6d:07:90:39:61:06:dc:ca:85:80:3c:76:21:ef:
cd:5f:27:7e:d4:96:2e:a3:a5:51:01:da:9d:9f:df:
05:46:12:31:90:69:cc:de:9c:99:6d:6e:7d:15:39:
11:30:d3:45:59:05:18:0a:84:2e:3f:fb:5d:5e:ba:
2f:31:86:80:b4:4c:28:40:4a:ae:12:dc:c4:10:cb:
78:5d:26:71:13:e1:03:ad:b7:90:22:04:79:c7:e7:
e8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CD:5A:64:E7:E5:DA:CA:5E:B6:CB:9E:EF:C1:EF:44:37:01:A9:A4
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/Vc1aZOfl2spetsue78HvRDcBqaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.109.217.0/24
213.7.209.0/24
Signature Algorithm: sha256WithRSAEncryption
91:01:ef:15:02:d4:fc:5c:53:44:e4:69:ff:c4:fb:e6:69:b9:
7c:b9:27:1b:3f:c7:0a:a6:a0:1e:06:6b:fe:14:84:6e:c4:9c:
5b:78:81:2b:96:90:dd:19:ad:4f:fc:fe:9f:2f:ad:b5:1a:f8:
57:58:26:94:ec:a0:2d:c6:2e:e1:a4:04:77:32:49:a4:4d:1b:
9a:ee:40:b7:7d:0a:2e:fe:f6:57:42:90:e2:b6:e7:64:39:db:
e4:d1:70:d6:d4:44:ee:a7:b7:c8:f8:74:9e:2a:fe:03:fd:7f:
bc:bf:7d:5d:b6:39:e1:5b:d2:79:76:53:9c:57:78:40:5d:ae:
ea:55:ba:96:ed:1e:c9:fa:e5:9f:d1:00:60:2f:21:b7:f2:96:
3b:0a:a2:ef:df:e9:b9:0e:fd:56:69:18:e5:a3:5e:a2:bc:6e:
bd:a6:1d:54:38:d6:8d:13:81:f5:44:59:8e:0f:19:40:72:a3:
af:14:5f:d8:44:30:7a:49:55:f6:b0:94:19:be:53:f8:e9:5d:
de:59:73:fc:58:a7:58:ab:9e:68:05:e2:6a:de:6f:6c:23:cb:
98:9e:fd:c1:de:06:ea:a3:81:e5:26:e1:d8:4f:2b:17:e7:26:
25:be:f8:ef:da:d1:af:91:f3:f3:d2:af:fb:ad:f1:fd:be:ee:
59:aa:f7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:03 2024 by rpki-client on console-ams.rpki-client.org