Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5b0e4c-22b1-4dc8-8054-d788da1f91dd/1/VfaP9qyl3PBuCgQSBvO0WPyCKaA.roa
File: VfaP9qyl3PBuCgQSBvO0WPyCKaA.roa (raw, json)
Hash identifier: 1eTCqMPVNKTtyP2lHoRciZbSXdpMjujvcG14hHSgDZU=
Subject key identifier: 55:F6:8F:F6:AC:A5:DC:F0:6E:0A:04:12:06:F3:B4:58:FC:82:29:A0
Certificate issuer: /CN=f26239dca9de90b3ff9bd8c23efdfc129f6ded37
Certificate serial: 019113537F02481D1B75E373C3CB9A429A0F
Authority key identifier: F2:62:39:DC:A9:DE:90:B3:FF:9B:D8:C2:3E:FD:FC:12:9F:6D:ED:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mI53KnekLP_m9jCPv38Ep9t7Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5b0e4c-22b1-4dc8-8054-d788da1f91dd/1/VfaP9qyl3PBuCgQSBvO0WPyCKaA.roa
Signing time: Fri 02 Aug 2024 13:42:04 +0000
ROA not before: Fri 02 Aug 2024 13:42:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 45.89.4.0/22 maxlen: 24
141.195.128.0/18 maxlen: 24
2a0a:5580::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 Aug 2024 15:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:13:53:7f:02:48:1d:1b:75:e3:73:c3:cb:9a:42:9a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26239dca9de90b3ff9bd8c23efdfc129f6ded37
Validity
Not Before: Aug 2 13:42:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55f68ff6aca5dcf06e0a041206f3b458fc8229a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:92:ef:4f:3a:0f:a0:cd:b6:d0:e1:19:13:
b6:39:5a:14:88:4c:3a:ff:ac:94:d8:88:9d:a5:ba:
91:e9:7b:eb:4f:4c:b1:b5:d4:b4:f3:50:f7:30:6b:
90:f3:a9:00:2b:94:af:a6:c3:a3:cd:7c:31:5b:84:
de:7f:fd:f5:08:30:f9:aa:03:05:9c:5e:e7:b0:77:
ec:e0:75:bd:42:90:75:20:37:62:3b:89:f7:a6:92:
fd:67:3a:de:5f:4a:59:fe:bc:ac:7d:e8:c8:b6:c3:
57:99:87:65:a7:a9:dd:6f:53:7b:bd:4a:b7:3b:d5:
f0:8a:9b:ed:4d:0c:17:da:fe:f7:f0:85:d9:95:54:
2d:6d:d1:b5:39:40:9e:91:d4:c4:4f:9b:21:2f:18:
62:9e:0a:c4:be:24:9c:a9:f2:91:ea:23:ca:25:4e:
dd:44:13:41:a5:a7:85:49:da:aa:6f:51:8a:24:6f:
53:61:62:43:fa:68:35:5a:e1:4a:05:8e:0e:3d:2e:
e8:41:54:c4:6f:8c:79:b2:ac:d8:78:1d:0d:6c:33:
c8:2c:a0:3a:04:ed:a6:ba:62:a2:c5:dd:06:45:0c:
fd:c9:9e:a8:2f:97:53:ea:c5:3f:75:73:b8:4b:29:
3e:fe:3b:b9:43:65:ed:53:1f:88:3b:1e:9e:bc:7a:
a0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F6:8F:F6:AC:A5:DC:F0:6E:0A:04:12:06:F3:B4:58:FC:82:29:A0
X509v3 Authority Key Identifier:
keyid:F2:62:39:DC:A9:DE:90:B3:FF:9B:D8:C2:3E:FD:FC:12:9F:6D:ED:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mI53KnekLP_m9jCPv38Ep9t7Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5b0e4c-22b1-4dc8-8054-d788da1f91dd/1/VfaP9qyl3PBuCgQSBvO0WPyCKaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5b0e4c-22b1-4dc8-8054-d788da1f91dd/1/8mI53KnekLP_m9jCPv38Ep9t7Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.4.0/22
141.195.128.0/18
IPv6:
2a0a:5580::/29
Signature Algorithm: sha256WithRSAEncryption
62:4b:58:54:6a:d8:46:4b:7b:15:bb:24:f0:73:1f:b1:70:b5:
cf:ff:4d:0b:f2:6c:1b:76:95:4a:16:be:1d:b5:2e:65:3c:c8:
46:ab:cd:a5:f6:0c:b7:8c:51:91:eb:c1:7d:23:19:1d:83:0f:
20:f1:32:5b:81:9d:58:7d:f0:42:46:fe:73:18:47:13:79:21:
3d:07:90:93:02:3e:02:30:a9:03:5f:3b:ec:cc:b1:12:79:34:
d7:9c:f1:3a:f2:18:1c:1d:05:5c:b1:9c:a7:d4:9b:59:1a:f4:
de:00:5a:13:3f:1d:0b:86:03:f9:0e:c9:3f:6b:b2:03:5d:e7:
76:f3:fa:7a:fe:bf:2e:04:b8:8a:ba:83:4e:d3:d3:95:f8:ec:
d7:ff:c7:b5:1b:ce:95:43:47:64:22:52:40:7d:3b:2a:2b:f4:
ce:f0:63:c3:a4:1b:a8:bf:cc:f7:43:0d:79:60:8c:89:0a:51:
69:5b:07:ae:87:f1:05:24:c4:da:63:e2:1c:fa:c1:7f:c6:3f:
7d:a0:75:12:23:83:f6:b0:84:e9:06:92:bf:23:33:83:d2:43:
83:9c:97:42:d3:9f:f5:89:7d:ad:86:1e:41:a7:e7:a3:18:9d:
d5:ca:36:bc:23:37:da:2b:c5:43:7f:55:23:d0:8c:fc:14:dd:
51:dd:6a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 18:55:03 2024 by rpki-client on console-fra.rpki-client.org