Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/vcy34sd4taIiL4an2dxCBZRM3Qk.roa
File: vcy34sd4taIiL4an2dxCBZRM3Qk.roa (raw, json)
Hash identifier: mfZEd8doVue1o4k0ADwki4pB/q55C9K1ZCAuJHp+bEg=
Subject key identifier: BD:CC:B7:E2:C7:78:B5:A2:22:2F:86:A7:D9:DC:42:05:94:4C:DD:09
Certificate issuer: /CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Certificate serial: 018573FDF589381834792F7E0A5A3BBC6CAF
Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/vcy34sd4taIiL4an2dxCBZRM3Qk.roa
Signing time: Mon 02 Jan 2023 19:38:21 +0000
ROA not before: Mon 02 Jan 2023 19:38:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49030
IP address blocks: 45.10.120.0/24 maxlen: 24
2001:67c:1424::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:fd:f5:89:38:18:34:79:2f:7e:0a:5a:3b:bc:6c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Validity
Not Before: Jan 2 19:38:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdccb7e2c778b5a2222f86a7d9dc4205944cdd09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1e:b8:35:84:59:75:35:63:83:54:71:b1:bf:
db:78:44:f1:59:f9:74:cf:c0:59:e9:c7:71:65:77:
d0:b4:06:57:bc:3c:78:cc:4b:35:23:21:b6:7c:42:
d3:65:bb:a2:e2:b5:06:f8:0a:2c:a5:eb:78:0b:9c:
86:2d:96:11:ee:dd:91:df:80:96:7b:3d:c0:f3:81:
5b:6a:7c:0d:2a:fb:78:58:10:a5:9a:ed:f6:b0:d5:
b7:2a:f8:75:df:a2:76:9b:4a:d4:05:d5:a1:0b:33:
59:e5:a5:cf:39:44:0c:f7:e1:76:34:23:84:75:f5:
3d:c5:64:e0:f7:18:7b:2a:4d:9a:b1:59:1c:46:d4:
6b:1b:d9:3d:c4:5b:67:d4:45:2d:1c:0d:f9:6b:a7:
7c:f0:7b:7d:46:1d:09:d8:be:94:62:b0:ea:5a:45:
05:0e:13:70:93:b6:b7:00:ff:82:78:a0:42:1c:db:
96:92:15:d7:4b:76:4d:5f:07:8d:e0:d0:db:9d:fd:
04:e3:2a:e1:ca:b9:cc:2b:f2:9c:e4:69:2d:c9:0f:
39:86:94:23:bb:12:47:93:fb:20:70:4b:9a:1b:b0:
41:44:7f:9d:f9:2b:f4:4b:e2:ec:3b:75:11:90:90:
1d:97:be:fd:9a:ad:2e:8a:60:5a:47:ce:f5:84:7f:
86:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CC:B7:E2:C7:78:B5:A2:22:2F:86:A7:D9:DC:42:05:94:4C:DD:09
X509v3 Authority Key Identifier:
keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/vcy34sd4taIiL4an2dxCBZRM3Qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.120.0/24
IPv6:
2001:67c:1424::/48
Signature Algorithm: sha256WithRSAEncryption
93:3c:f6:53:fa:0a:53:c1:b9:eb:31:2b:dc:bf:19:97:3f:b4:
81:6d:85:8e:4e:ee:c1:f1:be:88:4e:b2:60:03:1a:8f:85:21:
00:7a:41:a4:3f:cc:20:88:9f:29:10:50:5f:61:98:a0:08:47:
94:3c:a5:93:9b:af:50:aa:c4:bf:e4:05:65:61:d2:d5:f9:65:
02:32:1d:58:55:f7:d3:78:2a:32:10:bf:f6:46:ee:7b:93:76:
63:ff:38:8a:ed:c8:cd:a6:3a:7a:48:3d:af:e7:cf:b0:77:df:
2e:dc:7e:6f:21:89:a7:96:15:c7:45:5b:a3:bf:ce:b4:a6:03:
d9:5b:e0:c5:d7:ef:c9:ed:07:3b:3d:2a:5e:14:f9:be:d2:0a:
45:07:0a:e5:0b:b4:43:f9:2f:2b:cc:68:4c:41:96:e0:c6:c5:
64:f9:e7:ea:35:54:d1:06:a7:55:8f:5d:d3:a8:59:1b:0c:d4:
78:1f:41:e7:b9:d1:66:c6:04:e9:a9:78:ea:f3:ff:40:bd:84:
3c:65:4a:ed:85:fa:56:75:40:89:b7:9a:8f:dd:96:e0:86:87:
ec:fe:69:3f:00:25:fc:dd:35:9e:02:8c:b1:0e:f5:be:22:30:
28:2a:9f:d5:05:04:cb:26:63:2b:76:c6:41:8f:70:61:2d:06:
55:b7:63:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:21 2024 by rpki-client on console-ams.rpki-client.org