Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/VexHQMCtm5p8mBvYrXz4jkjiL50.roa
File: VexHQMCtm5p8mBvYrXz4jkjiL50.roa (raw, json)
Hash identifier: OokH9hIGZh/X1hSiYuNGAkzw/lcIkZZfDuenrhAlF0E=
Subject key identifier: 55:EC:47:40:C0:AD:9B:9A:7C:98:1B:D8:AD:7C:F8:8E:48:E2:2F:9D
Certificate issuer: /CN=6bc1ad1676a2a32a45a0cf392f7f9c5ea68e2dea
Certificate serial: 01856D8AE7CD0A6926D196D5AD6DCC18AA63
Authority key identifier: 6B:C1:AD:16:76:A2:A3:2A:45:A0:CF:39:2F:7F:9C:5E:A6:8E:2D:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/VexHQMCtm5p8mBvYrXz4jkjiL50.roa
Signing time: Sun 01 Jan 2023 13:34:57 +0000
ROA not before: Sun 01 Jan 2023 13:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33867
IP address blocks: 195.248.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:e7:cd:0a:69:26:d1:96:d5:ad:6d:cc:18:aa:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc1ad1676a2a32a45a0cf392f7f9c5ea68e2dea
Validity
Not Before: Jan 1 13:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55ec4740c0ad9b9a7c981bd8ad7cf88e48e22f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:42:ac:bd:43:fb:91:b7:d2:56:7d:b5:dc:70:
2d:21:08:7b:08:57:90:a7:38:82:86:6b:ed:48:b2:
02:df:41:88:97:94:f9:e4:0f:ee:6b:b1:b0:81:52:
0b:fa:c4:60:f7:e0:b8:57:f7:45:c4:04:16:31:fd:
2b:db:8a:a0:b9:9d:5c:55:c0:62:3b:1a:0e:48:22:
5a:34:19:9d:2a:ea:e2:fa:7e:88:02:6c:40:e3:ab:
01:93:78:2f:c9:e7:a4:e6:28:9b:e3:fd:39:36:34:
b3:e4:38:82:ad:b3:f6:c6:89:ba:fd:6d:30:2a:0c:
37:c5:e8:a8:2f:e7:32:4c:06:c5:12:74:65:76:47:
0a:bd:5b:eb:7e:60:d1:80:ba:fd:e5:12:47:03:c4:
06:4c:68:e2:43:45:a4:a1:7f:97:01:0c:7e:ed:f3:
89:67:e7:5a:34:5b:f7:0d:bf:62:dc:d9:12:a2:ca:
af:d2:28:b2:83:82:94:60:9a:cd:a2:f4:f7:a2:eb:
98:17:8f:4d:50:69:da:fe:8b:4e:68:72:7f:a1:b0:
f0:14:55:1f:c3:93:49:5a:1b:8d:35:c7:80:e4:d6:
73:6e:86:fa:1f:42:32:cb:51:33:d7:7d:ae:b3:50:
ea:df:75:b2:11:e5:a5:8d:63:af:3b:59:e4:bc:66:
cb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EC:47:40:C0:AD:9B:9A:7C:98:1B:D8:AD:7C:F8:8E:48:E2:2F:9D
X509v3 Authority Key Identifier:
keyid:6B:C1:AD:16:76:A2:A3:2A:45:A0:CF:39:2F:7F:9C:5E:A6:8E:2D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/VexHQMCtm5p8mBvYrXz4jkjiL50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.64.0/24
Signature Algorithm: sha256WithRSAEncryption
32:d1:8f:3b:0c:0f:e4:cf:69:22:91:cb:9f:24:96:32:43:98:
81:57:2d:f3:f6:22:e6:92:c8:da:11:b1:19:08:9e:be:30:e6:
e2:2e:89:92:89:47:3c:be:6b:7b:d4:e8:ac:0c:94:fd:69:61:
f5:73:81:ff:66:81:70:49:5e:56:d8:d4:fc:3b:36:ea:69:bf:
ad:7a:0f:64:c5:c6:81:59:a8:90:23:d7:56:c3:24:a3:fa:a5:
44:7d:af:79:5a:76:d1:c9:f5:02:f8:56:58:25:aa:e0:da:c4:
10:ea:c3:c8:bc:b3:90:06:e1:2e:37:4f:d9:e9:92:21:30:07:
74:f9:73:c0:1f:17:97:9a:f5:4f:09:88:d3:17:e1:cc:8d:67:
24:2e:73:c3:46:f5:eb:3c:10:d8:eb:0f:7a:44:97:fc:a0:8f:
09:3e:38:ee:b3:dc:11:76:65:44:cb:7e:71:b0:ae:ca:93:96:
ac:34:25:47:a0:92:d0:56:82:7e:0b:94:ea:aa:63:14:f1:39:
1b:8e:41:13:99:f3:b3:c1:5d:5d:61:4d:11:5c:74:de:eb:56:
52:2f:89:f7:5c:a9:80:6c:e9:23:ec:b5:6a:3c:22:4a:10:7e:
52:67:1d:88:67:fa:a7:6b:6f:2a:3a:7f:f4:6e:99:a0:a9:bb:
5d:ae:b0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:38 2024 by rpki-client on console-fra.rpki-client.org