Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/vuzVN-G6m3bzv_P1YINhyhBukOE.roa
File: vuzVN-G6m3bzv_P1YINhyhBukOE.roa (raw, json)
Hash identifier: uIPS+76HPFAOc/QDD35+3OlsXssp9wnoe45OxmFlKxM=
Subject key identifier: BE:EC:D5:37:E1:BA:9B:76:F3:BF:F3:F5:60:83:61:CA:10:6E:90:E1
Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial: 018C415BF54A57C096F7A1F661B15233DC2A
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/vuzVN-G6m3bzv_P1YINhyhBukOE.roa
Signing time: Wed 06 Dec 2023 22:59:54 +0000
ROA not before: Wed 06 Dec 2023 22:59:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197962
IP address blocks: 2a10:503::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:41:5b:f5:4a:57:c0:96:f7:a1:f6:61:b1:52:33:dc:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Validity
Not Before: Dec 6 22:59:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=beecd537e1ba9b76f3bff3f5608361ca106e90e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c8:15:4c:d8:ea:79:63:bf:a5:2c:4a:2b:3c:
87:39:dd:c7:a0:53:d5:16:e7:b6:b6:b4:35:8f:bf:
75:a8:b9:20:15:ae:c5:8f:a0:94:3d:86:fc:3a:c6:
b1:6d:c0:fd:da:ef:d8:0f:3a:c4:71:6f:94:04:27:
db:6e:3e:eb:a8:de:3a:ea:4d:6c:cf:62:e6:1f:25:
cc:e6:a9:03:84:71:6c:8f:bb:1c:a7:a8:ea:d9:fd:
4b:20:be:f4:8f:1a:68:66:b1:1b:1e:a0:55:3c:15:
db:84:b9:9e:35:64:c1:11:f4:98:b5:a1:45:34:7b:
52:d5:f6:91:f6:5e:67:04:ed:7a:fc:5f:48:c2:f3:
af:b1:be:7a:21:0f:65:b6:04:5f:d7:8a:43:b7:8b:
c1:d6:04:64:95:f5:e1:a5:0d:23:b1:27:3b:84:9e:
fe:9d:84:38:20:97:3d:bf:5b:82:bd:07:6a:a4:ca:
75:c2:a8:aa:9e:50:8d:d7:e7:ab:ad:0e:65:fc:0d:
f2:7d:52:f4:6a:5e:bd:6a:25:1f:e0:49:38:76:6c:
4f:fb:69:63:df:1f:e9:cb:b8:1d:c9:bb:af:f4:eb:
5b:c7:80:3a:b7:43:2f:a2:19:5b:a5:33:52:82:43:
5c:5d:4f:d0:64:64:52:9c:0a:69:3b:6f:e2:7b:28:
d9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EC:D5:37:E1:BA:9B:76:F3:BF:F3:F5:60:83:61:CA:10:6E:90:E1
X509v3 Authority Key Identifier:
keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/vuzVN-G6m3bzv_P1YINhyhBukOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:503::/32
Signature Algorithm: sha256WithRSAEncryption
9c:b9:e2:ed:3e:49:c3:00:6d:47:6f:b1:a2:db:62:df:7f:05:
4e:64:fb:1a:32:de:d4:8f:a2:12:16:54:5f:42:2c:d5:ac:a5:
50:71:e9:88:63:96:aa:36:eb:d4:59:7b:ff:39:43:8f:5b:e4:
1e:e2:a8:c0:97:11:7d:21:c3:47:26:be:35:2f:47:b3:5f:9c:
04:4d:a1:b0:bb:ac:cd:50:fb:ca:40:69:dd:0a:52:68:4c:e4:
fd:39:00:b3:36:8c:85:1e:17:64:a0:d3:fa:33:d8:44:fa:f6:
c3:05:43:a5:c5:0a:57:38:00:19:74:d1:73:79:b6:28:4a:b4:
02:85:e7:84:6e:ca:4e:66:46:d4:9b:77:dc:ac:c6:77:0b:c6:
df:ad:5d:38:46:b2:05:8f:23:c4:a9:d2:eb:d1:a4:2f:58:04:
9f:ab:f1:74:80:aa:91:61:84:50:7f:c9:d0:2b:ba:9d:e9:1e:
a8:4d:83:63:0a:e8:ec:d3:6c:bb:2e:d3:ce:f8:29:25:3e:42:
97:b8:cd:20:df:47:69:70:7a:a9:8e:b2:07:d6:8d:c3:c0:3b:
4c:f0:0d:ff:5d:da:fe:09:cf:6d:cb:ab:55:c6:d9:66:86:0f:
3a:05:f2:a6:fd:07:4b:7f:ff:00:ad:5a:7e:57:1b:84:7d:ac:
3d:9a:35:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:37 2024 by rpki-client on console-ams.rpki-client.org