Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VriVE_pCShkPZM0Qc5KFIlb_0zI.roa
File: VriVE_pCShkPZM0Qc5KFIlb_0zI.roa (raw, json)
Hash identifier: 0/ShZl5BOGa1gSWjOK8j36yWx6srI9HS6AKxoqesjiA=
Subject key identifier: 56:B8:95:13:FA:42:4A:19:0F:64:CD:10:73:92:85:22:56:FF:D3:32
Certificate issuer: /CN=567ac9bf0be91e0a48664ec8b6a6770957a21020
Certificate serial: 018CC501483065DDC746F564D00E1256F670
Authority key identifier: 56:7A:C9:BF:0B:E9:1E:0A:48:66:4E:C8:B6:A6:77:09:57:A2:10:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VriVE_pCShkPZM0Qc5KFIlb_0zI.roa
Signing time: Mon 01 Jan 2024 12:30:44 +0000
ROA not before: Mon 01 Jan 2024 12:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58208
IP address blocks: 91.216.120.0/24 maxlen: 24
5.42.152.0/22 maxlen: 22
5.42.153.0/24 maxlen: 24
5.42.159.0/24 maxlen: 24
2a01:45c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 13 Mar 2024 09:38:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:48:30:65:dd:c7:46:f5:64:d0:0e:12:56:f6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567ac9bf0be91e0a48664ec8b6a6770957a21020
Validity
Not Before: Jan 1 12:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56b89513fa424a190f64cd107392852256ffd332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:11:50:31:b7:cc:1a:56:f2:3b:69:cf:6d:ab:
3a:cd:f1:77:c8:2b:5f:95:d8:7b:c4:d8:0d:f8:3b:
aa:b3:60:41:30:c8:87:d2:31:f6:8d:bd:d5:a0:11:
2f:9c:cf:ce:82:f0:2b:9b:08:91:d6:4b:b5:47:65:
0e:03:9e:9c:05:e6:0a:b2:70:6c:2f:2c:95:07:ff:
3c:8c:da:36:c6:11:14:17:42:2d:19:3c:54:ec:9e:
f0:62:d7:12:e5:09:72:dc:49:80:96:1a:f1:29:58:
01:e2:8d:d4:bf:7c:2d:2a:df:39:a0:31:45:3a:5c:
d6:bc:68:1a:af:59:ae:d8:76:78:a1:0a:01:b9:24:
40:6f:20:5f:25:fc:59:77:b2:dd:7c:1f:c4:61:aa:
9e:94:84:ce:f7:e7:30:ef:4b:32:ce:19:a1:b3:cd:
b7:30:68:d8:d7:17:75:e9:6c:c2:8d:d6:a8:c5:c6:
c0:f7:d6:8f:da:45:18:f8:2f:2e:d7:8e:04:6e:bb:
20:12:bb:fd:96:b0:bf:38:4e:e2:8b:67:10:4b:b8:
3c:19:29:82:c1:a2:d8:b7:8c:cc:86:bc:1b:0f:95:
48:13:ce:50:e4:80:77:ee:f3:d0:7c:7f:00:52:ef:
60:5c:b0:40:eb:d3:13:f2:00:82:e6:d0:f8:86:e6:
a8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B8:95:13:FA:42:4A:19:0F:64:CD:10:73:92:85:22:56:FF:D3:32
X509v3 Authority Key Identifier:
keyid:56:7A:C9:BF:0B:E9:1E:0A:48:66:4E:C8:B6:A6:77:09:57:A2:10:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VriVE_pCShkPZM0Qc5KFIlb_0zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.152.0/22
5.42.159.0/24
91.216.120.0/24
IPv6:
2a01:45c0::/32
Signature Algorithm: sha256WithRSAEncryption
0b:28:4f:3e:ee:31:86:64:e1:0d:0d:58:71:85:8c:74:4f:1d:
86:f4:1c:ac:62:1f:94:8a:45:18:81:2b:03:9a:4f:f6:68:dc:
dc:fa:e0:9f:75:01:2b:26:63:ae:f7:5b:d5:94:6c:bc:4b:c9:
57:95:d7:5d:e4:10:e2:6b:78:2e:1b:74:e2:e0:21:79:8a:d0:
83:99:1b:3d:63:cc:27:25:c3:be:1b:98:f2:76:aa:2e:1e:43:
0d:0c:09:a0:07:dd:12:44:65:03:fd:3f:1d:e0:10:7d:40:58:
46:3d:81:a8:c8:ac:a6:09:d4:ed:3e:32:89:ee:36:df:cd:ba:
8b:63:a0:95:76:a9:37:3b:11:f0:06:88:d7:c7:db:09:6d:77:
b2:69:d0:ac:a1:b2:bb:6a:e3:24:17:dd:a9:7a:a8:2b:e0:b9:
23:29:08:a4:df:0d:a3:59:c5:ee:6a:4f:6d:bc:ce:a3:75:78:
fe:50:4e:8c:fa:70:f1:91:27:e6:ee:d8:26:fe:51:12:42:14:
44:c9:6d:ad:c1:94:71:28:fb:13:a0:2d:69:65:78:29:47:a3:
d9:45:50:ed:3e:0b:b8:bf:30:84:d3:dc:4d:59:ab:ea:41:05:
f5:fe:2b:15:66:5c:83:be:4a:f6:bc:ba:a2:98:4e:a7:ac:a7:
80:ac:44:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:14 2024 by rpki-client on console-ams.rpki-client.org