Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/VouQ0v2l4rjFW22DMkWno5mXcy4.roa
File: VouQ0v2l4rjFW22DMkWno5mXcy4.roa (raw, json)
Hash identifier: loaXCv3gqvawh4NKlt1h9Gk38ndrfWmBJX8t+g4CKsI=
Subject key identifier: 56:8B:90:D2:FD:A5:E2:B8:C5:5B:6D:83:32:45:A7:A3:99:97:73:2E
Certificate issuer: /CN=02cc691476a6e7895b0e456116444f91937bf01e
Certificate serial: 01856B77CA6681B5379419B977BABF4C0387
Authority key identifier: 02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/VouQ0v2l4rjFW22DMkWno5mXcy4.roa
Signing time: Sun 01 Jan 2023 03:54:50 +0000
ROA not before: Sun 01 Jan 2023 03:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29471
IP address blocks: 195.158.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:77:ca:66:81:b5:37:94:19:b9:77:ba:bf:4c:03:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02cc691476a6e7895b0e456116444f91937bf01e
Validity
Not Before: Jan 1 03:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=568b90d2fda5e2b8c55b6d833245a7a39997732e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:2f:76:82:0e:3a:ed:a1:56:f0:98:33:61:
49:d1:fc:59:16:51:f3:ec:aa:a0:97:18:db:be:63:
fa:23:22:64:a6:38:f9:16:63:ba:4e:48:bb:0d:b7:
e8:7b:82:48:fe:fd:b0:4e:08:8f:5c:1e:ca:9d:b6:
07:fa:01:6a:f2:d5:32:71:27:61:51:4e:24:29:f8:
23:10:e7:fc:d5:e8:ea:10:da:23:10:7d:17:66:ff:
ea:d1:26:66:19:ad:ff:ba:1e:dc:7c:c5:2a:a8:f3:
c4:20:e9:96:fe:7d:13:a4:37:96:55:cc:4c:5a:a9:
c7:53:dd:a7:50:e4:9c:df:45:eb:ff:46:bd:cb:60:
72:71:e9:13:a7:1a:fe:4d:08:ad:ac:8b:0e:4d:bb:
e8:eb:8b:3d:08:f9:62:85:18:c3:0e:61:42:f9:5d:
e5:be:44:73:cb:43:73:79:57:e8:52:fb:f0:58:ba:
de:fd:37:28:3f:e3:11:f9:4e:66:ea:3d:07:a7:a6:
43:2e:fb:3d:fb:f4:e7:da:2f:9d:3d:8d:6d:f2:a3:
88:8a:d3:c4:61:16:47:ca:5a:5e:d8:57:4e:af:43:
b8:48:d6:71:e8:a0:f1:43:d9:09:0e:fb:61:56:c0:
3f:46:44:28:ea:3a:58:b3:93:59:82:d6:d8:4b:4f:
59:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8B:90:D2:FD:A5:E2:B8:C5:5B:6D:83:32:45:A7:A3:99:97:73:2E
X509v3 Authority Key Identifier:
keyid:02:CC:69:14:76:A6:E7:89:5B:0E:45:61:16:44:4F:91:93:7B:F0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsxpFHam54lbDkVhFkRPkZN78B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/VouQ0v2l4rjFW22DMkWno5mXcy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9a6860-224f-4b34-a9b6-bc192bb73025/1/AsxpFHam54lbDkVhFkRPkZN78B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.158.54.0/24
Signature Algorithm: sha256WithRSAEncryption
45:eb:5b:15:dd:c6:cd:c8:f2:73:fa:bf:98:dd:e3:67:4f:f4:
89:85:2a:a8:0e:c0:c6:5c:3d:98:16:ac:43:62:23:aa:cf:af:
26:20:0e:d3:9b:63:b9:d1:bc:1f:a0:56:d6:4b:d5:5e:92:75:
54:6b:90:df:a6:29:4b:de:7f:4e:3b:02:62:21:13:5d:63:69:
b1:d4:21:80:84:03:00:18:90:01:d5:8e:c0:5b:df:1c:95:05:
65:d8:5f:67:3f:fa:b7:d5:90:e6:dd:ac:74:cd:a7:cb:0b:b6:
5b:7d:88:b6:ac:e2:23:d6:01:fd:07:4c:9e:ec:81:de:05:d7:
75:37:d1:25:28:36:38:10:53:b7:1a:c5:4e:83:d1:57:49:d5:
35:8c:d6:e5:0b:3f:30:95:cf:33:20:08:03:53:8e:6c:f0:e9:
06:bf:84:db:9e:87:f5:df:24:e6:02:00:b9:a4:c8:52:c7:6f:
41:85:11:49:cc:f7:1d:d7:d7:09:cd:1b:d1:a3:de:ec:4a:fa:
d3:01:e6:cf:80:35:e7:2a:93:b7:71:cd:56:a9:05:e1:48:46:
37:79:2a:3e:ba:f6:73:3a:48:e8:3e:ff:8a:72:66:6f:18:0c:
47:b5:61:f0:7d:0e:17:10:d5:4a:5a:d1:6b:a9:84:d2:bf:f8:
55:97:ff:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:40 2024 by rpki-client on console-ams.rpki-client.org