Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/VGQ57sDpupesWbjEs9zhlZygKog.roa
File: VGQ57sDpupesWbjEs9zhlZygKog.roa (raw, json)
Hash identifier: H1ddGXpl64WkOlZTQ7/8zPrIPrG81nIRr3+JKpluMaw=
Subject key identifier: 54:64:39:EE:C0:E9:BA:97:AC:59:B8:C4:B3:DC:E1:95:9C:A0:2A:88
Certificate issuer: /CN=cb20606de730456edd7335cc882cbdf4396f3460
Certificate serial: 01856D93E66857D46592C8ECAD783DFFADB9
Authority key identifier: CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/VGQ57sDpupesWbjEs9zhlZygKog.roa
Signing time: Sun 01 Jan 2023 13:44:47 +0000
ROA not before: Sun 01 Jan 2023 13:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209269
IP address blocks: 188.125.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:e6:68:57:d4:65:92:c8:ec:ad:78:3d:ff:ad:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb20606de730456edd7335cc882cbdf4396f3460
Validity
Not Before: Jan 1 13:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=546439eec0e9ba97ac59b8c4b3dce1959ca02a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fa:62:c1:c2:31:bc:b2:10:d8:f6:bd:d9:35:
a0:c1:3f:2e:1e:b5:e9:fc:a7:bf:eb:b2:9b:58:fb:
2f:25:cd:2d:a1:d3:ac:03:81:06:67:ef:ce:2d:f5:
81:0f:0a:d8:bc:65:36:20:9d:bd:d4:b0:35:8f:0b:
e7:08:d3:d3:c8:af:c7:df:dc:67:2b:1b:07:a7:90:
72:56:27:23:b2:cf:41:15:8d:f6:a8:be:fb:a2:ff:
60:c4:91:6f:17:9a:27:72:e8:22:2c:9f:a7:31:f4:
7e:4d:4b:65:85:c9:40:0f:6e:2d:6d:3f:64:f0:a3:
d0:22:e9:2b:80:54:3b:b7:6b:1a:ff:b9:bb:54:75:
f7:00:cb:2b:06:3f:8e:c4:76:dd:47:f2:92:c5:56:
4c:83:4b:c0:20:2c:93:d0:63:be:0c:50:f7:a0:a8:
3c:61:b8:89:6d:7d:6a:ff:a6:81:f8:54:91:c8:c7:
cc:7e:3a:d0:6e:d2:ba:4f:e4:fd:37:e4:bc:7f:82:
8d:74:e5:11:0d:f8:f3:66:65:37:24:16:90:13:c8:
e9:05:0f:57:90:d7:9f:c0:cb:86:f9:97:ce:ca:c9:
7d:83:61:78:22:0e:02:0c:b8:fc:75:88:d7:bc:74:
b4:86:de:93:6c:9c:7a:16:1c:af:34:61:8f:fe:31:
21:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:64:39:EE:C0:E9:BA:97:AC:59:B8:C4:B3:DC:E1:95:9C:A0:2A:88
X509v3 Authority Key Identifier:
keyid:CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/VGQ57sDpupesWbjEs9zhlZygKog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.158.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f4:b9:11:c4:1b:22:f1:86:60:ea:ce:ac:ae:ca:62:da:5d:
93:a3:32:76:ca:b4:62:fc:eb:aa:e9:37:02:54:3a:e4:d6:59:
fd:d5:14:35:77:4b:a6:5f:1b:f0:d5:e7:d5:88:ee:e4:2c:13:
f3:8c:78:41:09:2f:1d:3c:63:52:01:20:b0:e5:cb:09:b2:83:
e1:06:dd:12:63:f2:d6:e7:d2:a0:20:86:74:ab:34:af:6c:e8:
1e:37:bd:e5:89:f7:3b:1e:7c:01:74:3d:76:d9:02:19:4a:05:
4e:91:54:97:30:68:ac:fb:2a:0c:d9:25:72:71:20:d1:9c:43:
b6:06:2d:a2:58:6b:5b:2f:bb:85:4f:18:fb:d7:9c:7c:28:bd:
9d:5c:1d:0e:89:e8:30:ab:24:23:ef:80:79:d0:e8:7b:b7:86:
aa:8c:62:09:75:f6:ed:6c:a3:e9:b2:68:80:ad:2a:a2:67:ee:
9f:4c:7c:a3:06:fc:be:f9:34:dc:57:56:e0:46:36:88:58:da:
4d:1a:84:e2:41:21:01:0f:fa:4a:6b:21:bc:2c:4d:b2:e2:d9:
69:46:3d:d6:62:87:00:9d:2a:95:cf:0e:1d:ac:a7:c7:41:08:
de:0b:35:bd:48:fb:75:33:a7:2d:51:27:2b:1b:ad:70:7f:79:
ee:e9:35:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:58 2024 by rpki-client on console-ams.rpki-client.org