Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/597e97-ff07-4102-ad88-1f234a957061/1/VPSlMtvByDqQ2BtNQ2bhjPrGe-A.roa
File: VPSlMtvByDqQ2BtNQ2bhjPrGe-A.roa (raw, json)
Hash identifier: sVQOrPienkhRLkPq6nPEbmENY9cP2VjeQIoicnvc3yE=
Subject key identifier: 54:F4:A5:32:DB:C1:C8:3A:90:D8:1B:4D:43:66:E1:8C:FA:C6:7B:E0
Certificate issuer: /CN=d674af97eed44abfbfa4d022ff75f077ceaa40e1
Certificate serial: 018570F09706916FF90218A0988FFD6375FF
Authority key identifier: D6:74:AF:97:EE:D4:4A:BF:BF:A4:D0:22:FF:75:F0:77:CE:AA:40:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nSvl-7USr-_pNAi_3Xwd86qQOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/597e97-ff07-4102-ad88-1f234a957061/1/VPSlMtvByDqQ2BtNQ2bhjPrGe-A.roa
Signing time: Mon 02 Jan 2023 05:24:53 +0000
ROA not before: Mon 02 Jan 2023 05:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 62.68.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:97:06:91:6f:f9:02:18:a0:98:8f:fd:63:75:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d674af97eed44abfbfa4d022ff75f077ceaa40e1
Validity
Not Before: Jan 2 05:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54f4a532dbc1c83a90d81b4d4366e18cfac67be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f7:35:43:1f:24:cd:02:b1:68:0b:e6:95:2c:
f3:da:f9:25:93:7f:26:70:e9:01:20:11:29:ad:17:
63:f6:50:9b:d4:ea:bd:54:41:37:f6:cd:cf:5e:b8:
dc:0f:1d:5a:05:42:59:f3:a7:31:c5:51:65:f2:c8:
7c:34:8d:aa:74:d9:9f:b3:55:45:6d:18:79:e2:87:
dd:45:26:90:7d:c7:3e:3d:dc:d4:ce:aa:21:3f:8d:
0b:26:57:f6:a6:70:42:7b:aa:1a:3e:ce:3b:cf:c1:
64:13:73:24:a5:43:74:d2:63:0d:fb:93:63:30:47:
94:b5:11:47:08:3b:75:55:7d:47:0c:67:7c:7c:c2:
f0:af:a0:c1:f3:49:1e:21:43:71:84:f9:bb:cc:d5:
a5:3b:3f:9e:22:8c:7b:e0:77:86:b5:5d:58:bf:61:
1a:3d:29:b9:f8:e4:81:aa:03:82:bf:a0:cb:99:92:
73:35:d0:d6:8b:7f:17:d4:43:ee:5b:07:64:aa:e2:
38:f8:c8:bc:b1:35:82:3f:a3:2e:fe:f0:56:0a:6c:
8f:67:40:98:80:02:62:3d:ec:cf:e0:1d:7e:c4:eb:
09:87:18:20:1d:89:60:23:88:00:2e:0a:9c:41:c7:
03:8a:18:15:0c:de:b9:1c:aa:17:95:e5:f5:c1:f7:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F4:A5:32:DB:C1:C8:3A:90:D8:1B:4D:43:66:E1:8C:FA:C6:7B:E0
X509v3 Authority Key Identifier:
keyid:D6:74:AF:97:EE:D4:4A:BF:BF:A4:D0:22:FF:75:F0:77:CE:AA:40:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nSvl-7USr-_pNAi_3Xwd86qQOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/597e97-ff07-4102-ad88-1f234a957061/1/VPSlMtvByDqQ2BtNQ2bhjPrGe-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/597e97-ff07-4102-ad88-1f234a957061/1/1nSvl-7USr-_pNAi_3Xwd86qQOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.81.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a3:2c:b0:de:79:93:50:bd:70:9d:9d:ed:71:63:5a:b2:a6:
5d:6d:1c:d4:b7:49:13:38:fc:a9:64:2f:b7:71:a2:54:d3:e2:
9c:af:b5:0f:08:7e:32:1d:86:c4:77:fe:d2:c9:97:fa:9e:69:
4a:ef:6e:7e:a3:18:7d:fe:66:c7:20:3d:16:93:8f:df:e9:e1:
e3:ce:3b:ec:a4:5b:e7:1f:6d:e0:7b:86:43:e6:1d:04:0e:51:
56:50:c0:bf:61:7a:65:8b:ff:76:c2:76:7f:52:a3:45:43:73:
64:19:36:43:f8:4e:e1:72:54:71:d1:fc:f2:25:74:8f:98:ca:
2f:6a:ea:92:3a:23:d6:9b:75:97:dd:3b:d2:fa:5b:4e:c3:8a:
d0:9d:11:bb:f9:27:4b:c5:ce:b9:17:57:e0:b6:02:0f:7f:e2:
a2:30:0f:9b:ad:84:c1:b8:0d:4d:4e:cf:a5:47:45:22:72:16:
5e:de:f0:34:3a:3c:7a:9b:04:2e:b6:03:ea:f3:6c:d5:36:3b:
9f:19:c5:db:9d:55:3e:bf:55:12:1c:50:65:0c:fb:ca:85:bc:
ba:80:1b:9b:50:96:ce:ef:41:1e:60:36:43:f7:3e:48:98:92:
f8:2c:c6:e4:fa:0f:b2:83:b9:59:09:67:37:29:9e:1a:a1:1e:
32:bc:09:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:49 2024 by rpki-client on console-fra.rpki-client.org