Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/VrMG-pA7HqZmxla3mPYSgWh9JPE.roa
File: VrMG-pA7HqZmxla3mPYSgWh9JPE.roa (raw, json)
Hash identifier: 5pc576mphAaRM7hUZExK6pJ/lJXJJNW+azi5QTkSivY=
Subject key identifier: 56:B3:06:FA:90:3B:1E:A6:66:C6:56:B7:98:F6:12:81:68:7D:24:F1
Certificate issuer: /CN=a76b7b9f7fd66943927c60dcf1212ddc07df0523
Certificate serial: 01856F38F5917389441D35C49DE947CEE3B7
Authority key identifier: A7:6B:7B:9F:7F:D6:69:43:92:7C:60:DC:F1:21:2D:DC:07:DF:05:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/VrMG-pA7HqZmxla3mPYSgWh9JPE.roa
Signing time: Sun 01 Jan 2023 21:24:41 +0000
ROA not before: Sun 01 Jan 2023 21:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59441
IP address blocks: 2a11:1dc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:38:f5:91:73:89:44:1d:35:c4:9d:e9:47:ce:e3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76b7b9f7fd66943927c60dcf1212ddc07df0523
Validity
Not Before: Jan 1 21:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56b306fa903b1ea666c656b798f61281687d24f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:02:d8:a9:bb:f5:a7:c3:3d:2c:e5:3a:25:
69:49:3c:14:7d:97:11:4e:ec:31:ad:22:a4:bb:f3:
2a:16:55:fe:ec:a4:4a:60:64:26:97:74:71:1f:3b:
7d:55:0e:f6:0a:dd:12:ab:93:46:72:36:4d:1d:38:
5d:90:37:fa:e4:7f:e2:e2:a0:f8:a3:2e:df:bd:57:
a9:67:b3:d8:8e:7b:98:0c:56:b2:6d:18:58:fb:2b:
e1:36:03:06:9e:3b:bf:84:98:85:97:bd:1a:99:54:
6a:c1:c1:ad:ab:e0:d5:0e:76:a3:83:77:67:c7:9d:
ff:83:d5:67:39:ca:23:ce:7e:1b:8f:23:6c:c9:36:
bb:84:19:0b:57:3f:c2:1b:40:52:07:89:54:f7:d5:
05:8e:8f:09:ea:32:f4:22:06:10:e5:b4:f3:1d:bb:
ba:c4:c4:f6:2b:2e:e3:8f:af:d4:34:03:b5:57:a1:
ae:43:70:8b:f4:54:35:9c:4f:af:62:d5:14:bd:45:
c3:0b:65:f6:b0:25:a6:e0:90:dc:18:23:60:b6:6e:
b4:86:ff:9c:df:88:51:80:7c:f3:26:59:ac:9e:97:
11:15:3e:c2:4f:84:39:5a:49:03:54:f6:22:1d:28:
9d:a1:c7:97:da:6e:00:8a:38:0e:77:0b:1c:e4:dc:
a4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B3:06:FA:90:3B:1E:A6:66:C6:56:B7:98:F6:12:81:68:7D:24:F1
X509v3 Authority Key Identifier:
keyid:A7:6B:7B:9F:7F:D6:69:43:92:7C:60:DC:F1:21:2D:DC:07:DF:05:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/VrMG-pA7HqZmxla3mPYSgWh9JPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1dc0::/29
Signature Algorithm: sha256WithRSAEncryption
01:0c:73:24:41:11:0a:ce:61:f6:a1:d3:95:25:95:bf:17:bb:
80:72:d3:3f:e1:fd:05:c9:ec:05:85:48:4b:cd:25:1d:dc:07:
b3:21:b7:34:8a:84:f8:03:cf:7a:cb:5b:9b:c2:08:50:c2:bd:
ca:8c:a2:9a:b7:9e:ba:42:8d:9e:4f:d0:17:7b:be:a9:5c:32:
30:57:8d:30:2f:01:e6:81:3c:31:7a:50:73:cc:d3:ea:da:21:
b9:59:94:b4:5a:6f:56:f9:18:78:23:6c:0c:70:c8:c6:f5:dd:
38:87:94:c8:b4:9c:fd:48:af:a2:8e:de:80:88:9f:7b:f8:1f:
2c:a1:d9:b4:37:31:0e:9d:3b:2c:f2:07:8a:10:5e:b1:d6:bd:
d7:cf:16:7a:35:d9:80:1d:23:2e:c5:ec:33:83:5c:84:72:8d:
eb:1c:bc:07:3d:8e:ae:30:b9:77:91:4f:a9:7c:0c:e0:da:3b:
c3:5b:49:d4:5e:8f:1c:d0:90:72:a8:2d:58:9f:5d:37:8d:a2:
f7:fc:00:cc:00:0d:76:56:7e:bd:38:fc:de:8b:37:29:d2:1b:
9e:d2:3a:eb:13:c7:60:df:a9:68:a0:65:fb:67:0b:20:60:4e:
18:bb:4f:d4:70:6a:c9:8d:d4:28:86:f1:09:de:dd:97:4e:8b:
49:4e:c8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:30 2024 by rpki-client on console-fra.rpki-client.org