Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/VWEfCxlHTp8zEwgLazuVQpVEJWk.roa
File: VWEfCxlHTp8zEwgLazuVQpVEJWk.roa (raw, json)
Hash identifier: GweXRo8zc+cefndueu8xruRnLWtJDFGT75kEOyU1ehU=
Subject key identifier: 55:61:1F:0B:19:47:4E:9F:33:13:08:0B:6B:3B:95:42:95:44:25:69
Certificate issuer: /CN=07a19f46a17b9d4869df66493cfb05d7d82894a6
Certificate serial: 01856CEF31F6D777BFDB700B3F8A6366C8A6
Authority key identifier: 07:A1:9F:46:A1:7B:9D:48:69:DF:66:49:3C:FB:05:D7:D8:28:94:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/VWEfCxlHTp8zEwgLazuVQpVEJWk.roa
Signing time: Sun 01 Jan 2023 10:44:53 +0000
ROA not before: Sun 01 Jan 2023 10:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44065
IP address blocks: 217.29.0.0/20 maxlen: 20
79.98.152.0/21 maxlen: 21
2a02:3c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:31:f6:d7:77:bf:db:70:0b:3f:8a:63:66:c8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a19f46a17b9d4869df66493cfb05d7d82894a6
Validity
Not Before: Jan 1 10:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55611f0b19474e9f3313080b6b3b954295442569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:aa:2f:a1:b8:4c:5c:24:68:03:05:b3:51:
65:d1:6b:6e:df:0e:67:13:62:07:dd:ba:95:43:23:
a3:57:b4:84:1c:db:e9:27:da:30:50:1f:7f:53:45:
b0:ca:50:8f:0e:e1:7f:c8:36:be:c3:b9:17:a4:3e:
3e:b2:a3:0a:e5:42:09:9e:b6:6c:19:cc:d9:60:9e:
e2:fc:21:d3:cb:fb:42:5f:89:4e:44:00:97:ea:80:
5c:30:c3:d4:48:57:d2:97:16:20:51:b4:cd:01:ae:
8a:f0:cb:ed:6a:95:04:72:02:62:2c:5f:4c:df:e8:
fa:2f:c4:43:af:dd:aa:a6:e7:a4:dd:a4:fa:75:16:
bf:a1:bc:f9:63:51:ac:5c:00:68:91:ad:34:06:73:
cc:35:6c:f7:3d:fd:f4:98:39:ba:74:8a:9b:42:b0:
30:08:ef:db:89:a1:d8:f2:aa:75:a1:87:63:df:e0:
26:d9:71:68:a2:4c:55:0c:27:40:50:09:9e:2d:9f:
0b:a8:12:2a:7c:f8:6f:c5:8b:b8:55:d2:57:e3:a1:
12:78:0e:3a:58:63:b8:39:ab:18:19:a1:b4:e8:80:
69:05:b6:8a:d5:45:c6:b4:6b:e6:6b:b3:e1:44:2f:
bf:8a:f4:8b:03:bc:c8:aa:18:2c:32:1d:ad:fc:8f:
90:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:61:1F:0B:19:47:4E:9F:33:13:08:0B:6B:3B:95:42:95:44:25:69
X509v3 Authority Key Identifier:
keyid:07:A1:9F:46:A1:7B:9D:48:69:DF:66:49:3C:FB:05:D7:D8:28:94:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/VWEfCxlHTp8zEwgLazuVQpVEJWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.152.0/21
217.29.0.0/20
IPv6:
2a02:3c0::/29
Signature Algorithm: sha256WithRSAEncryption
69:72:1d:18:01:a3:51:99:5e:e0:de:d5:03:37:7d:07:d8:92:
c8:d5:88:4f:46:6f:04:b3:37:33:6c:a8:89:bc:99:6a:20:5d:
bf:2b:a9:75:b6:d1:63:e8:5a:f2:1e:b2:58:4e:b8:a6:8e:35:
64:59:f8:d2:bd:bc:38:5f:58:bb:81:cc:81:6e:4f:fb:85:c1:
49:7a:9d:62:22:31:cd:3d:f4:dc:9f:20:42:d2:44:15:78:db:
14:f2:17:3d:a9:5e:95:35:ec:d9:00:b5:e5:c0:e9:d0:c9:c2:
61:3a:81:73:dc:1c:13:93:f4:db:10:e7:7c:36:18:d7:35:ca:
de:42:9c:46:9c:96:a4:92:46:58:21:bb:a1:2d:1e:7a:fa:93:
94:6a:e6:6e:77:d4:c5:ff:04:8a:5e:f7:d0:44:1f:00:ae:c5:
2c:cf:7d:1e:1a:e9:63:69:fb:e5:a2:d1:21:f4:40:15:18:ff:
fb:39:6e:59:e5:cf:5e:ce:69:32:a6:e1:af:99:a8:7e:2b:4d:
82:f5:f1:e2:67:22:23:69:32:61:1f:e0:67:43:b8:0c:35:89:
45:5b:16:70:c0:d1:39:17:ac:8c:3e:af:fe:c5:45:3e:79:58:
5b:66:99:d2:fc:43:84:8d:a9:d8:6d:e4:ae:88:bc:4e:0c:db:
f8:bb:c1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:16 2024 by rpki-client on console-fra.rpki-client.org