Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/VseoU1W-yBjMS_fngrp7ztpXqbk.roa
File: VseoU1W-yBjMS_fngrp7ztpXqbk.roa (raw, json)
Hash identifier: JXH06f5+hlBtD6iSs8SFus9aUAPAR0CoruUIdP+3oYM=
Subject key identifier: 56:C7:A8:53:55:BE:C8:18:CC:4B:F7:E7:82:BA:7B:CE:DA:57:A9:B9
Certificate issuer: /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Certificate serial: 018573439876259ECAFBAC32B74FC4704DEC
Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/VseoU1W-yBjMS_fngrp7ztpXqbk.roa
Signing time: Mon 02 Jan 2023 16:14:47 +0000
ROA not before: Mon 02 Jan 2023 16:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2103
IP address blocks: 134.246.0.0/16 maxlen: 16
134.246.240.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:43:98:76:25:9e:ca:fb:ac:32:b7:4f:c4:70:4d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Validity
Not Before: Jan 2 16:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56c7a85355bec818cc4bf7e782ba7bceda57a9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:59:f3:4c:17:81:8f:19:8f:42:0b:05:ef:a4:
e2:5f:e6:69:08:31:b0:6f:d9:f4:e1:36:d9:ac:41:
22:e7:28:cf:f5:36:b3:79:7f:34:ae:b2:a0:6e:fa:
35:fa:6f:cf:b7:a8:1c:52:e2:ee:b0:fa:c6:d0:e1:
d5:0c:c5:d1:25:90:aa:4b:0c:1c:ea:59:a9:05:23:
95:a5:cc:7c:7a:c2:be:3e:dd:a4:45:bc:69:fe:76:
2c:98:0d:c6:af:1d:c0:cd:50:c1:76:de:8f:ce:c3:
6c:e0:84:49:9a:76:46:86:c3:59:5b:70:8b:bd:a4:
b7:8c:72:e9:e7:55:a5:2a:3a:26:07:94:0b:cf:68:
c3:45:ee:1b:66:6f:e1:07:77:58:7b:1e:cb:67:0d:
df:85:15:0c:6b:3b:80:b3:74:5f:9c:28:4f:ba:cd:
62:7b:a5:a2:aa:c2:d7:78:6e:0f:d7:20:79:8d:b6:
f3:7b:a4:c2:cf:02:d1:ec:7f:e0:7a:01:d6:b7:38:
5f:28:72:46:eb:40:db:35:c6:bb:3f:c2:95:14:93:
46:01:a6:49:f5:16:15:f1:54:2e:6f:3e:36:3a:49:
a2:51:02:69:41:d7:87:69:b3:63:50:68:14:f7:ec:
7e:0b:a0:94:6c:a2:6d:79:cb:24:fa:33:06:c9:ce:
a8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C7:A8:53:55:BE:C8:18:CC:4B:F7:E7:82:BA:7B:CE:DA:57:A9:B9
X509v3 Authority Key Identifier:
keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/VseoU1W-yBjMS_fngrp7ztpXqbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.246.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0d:7e:b9:1b:f9:9e:bb:81:02:85:98:06:3d:a5:3d:7f:0e:d4:
c4:a7:1e:69:29:cc:4c:fd:f5:b7:8d:7f:db:26:bd:e0:06:13:
60:64:79:d8:f7:83:c8:3c:1b:6f:ff:5c:44:f6:8b:af:06:0a:
1a:2a:fd:79:e7:8b:a4:3e:bd:e7:41:f3:d3:0e:6d:32:7b:90:
f3:4f:fb:64:9e:b6:73:fa:46:aa:d0:f5:1c:96:e6:f3:d7:21:
69:52:a4:0a:b2:76:56:8d:72:da:1d:d6:bd:03:5c:bd:6d:4d:
ac:09:79:6b:1b:8d:15:9c:8b:f8:5d:8c:1f:fc:65:cc:fa:7c:
22:eb:4e:57:4f:0a:7e:ea:f3:e8:77:68:69:41:60:0d:c1:9f:
7b:6b:2a:fd:96:1b:39:cf:d7:c6:da:4b:5e:c7:1c:2d:db:ed:
1e:b6:d7:4b:b5:8d:f7:99:23:cf:cc:62:e4:16:18:32:7a:d2:
f7:2f:6f:bb:7a:d3:fb:0d:7a:f9:6c:2a:9b:3b:bc:c4:59:7c:
6e:ec:7d:0c:29:96:c0:7b:df:f3:ff:a2:22:38:0b:ea:3c:e0:
05:85:0e:58:58:d5:cf:de:75:9d:7c:3a:cf:af:64:c2:f8:8a:
19:07:37:dd:ea:9f:8b:48:78:ea:87:cb:ba:7f:f3:d0:c8:a3:
c9:e9:27:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:44 2024 by rpki-client on console-ams.rpki-client.org