Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/VlMo0_NMp4nZWqaPzdZEXm81Aqk.roa
File: VlMo0_NMp4nZWqaPzdZEXm81Aqk.roa (raw, json)
Hash identifier: k4Pb0fA6lwi9y8wGRcNiHnkNLGnetALW8PL7Pgi3lNI=
Subject key identifier: 56:53:28:D3:F3:4C:A7:89:D9:5A:A6:8F:CD:D6:44:5E:6F:35:02:A9
Certificate issuer: /CN=c0a233590de586e0c55821c6f6d5732afc841229
Certificate serial: 018CC94DAEA4B19EECC79A7D0C4EBEAB43E9
Authority key identifier: C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/VlMo0_NMp4nZWqaPzdZEXm81Aqk.roa
Signing time: Tue 02 Jan 2024 08:32:40 +0000
ROA not before: Tue 02 Jan 2024 08:32:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57630
IP address blocks: 117.55.200.0/23 maxlen: 23
217.11.175.0/24 maxlen: 24
134.65.164.0/22 maxlen: 22
31.12.80.0/22 maxlen: 22
5.152.152.0/23 maxlen: 23
2a02:7e00::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 22 May 2024 13:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:ae:a4:b1:9e:ec:c7:9a:7d:0c:4e:be:ab:43:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a233590de586e0c55821c6f6d5732afc841229
Validity
Not Before: Jan 2 08:32:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=565328d3f34ca789d95aa68fcdd6445e6f3502a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2d:b8:f9:d7:c4:35:bf:0c:28:53:f7:35:6b:
e3:98:51:f2:be:b6:24:72:d1:4c:70:61:02:31:4d:
49:cc:db:a4:e4:22:9f:4e:55:34:15:9d:6e:5f:9d:
ea:9a:bf:af:80:24:dc:84:aa:c0:22:88:54:41:98:
1d:c8:e1:24:2d:13:dc:7e:13:61:ea:c4:28:0d:86:
54:32:e0:05:ec:63:bf:db:4a:5d:67:d8:52:03:b8:
5b:c2:fb:0f:2f:34:60:5c:03:2b:34:2d:a3:2e:5e:
2c:04:1f:2e:81:22:8c:77:36:3c:07:20:95:3f:c6:
6e:f2:57:c7:67:87:eb:97:bb:c9:22:4b:10:f2:70:
85:7a:97:ad:77:20:62:01:44:39:ef:48:34:42:5f:
2f:ce:e3:0c:91:03:7c:5f:f4:65:6e:75:60:39:c5:
91:e5:72:48:50:a1:53:7b:c5:64:78:10:21:5f:94:
d9:22:a6:1a:5d:44:97:c6:7d:67:60:0b:df:19:e7:
34:6a:19:2e:ea:a4:62:ee:ee:05:cc:df:aa:9f:0c:
59:4f:0b:09:6a:c3:6c:a9:8d:82:08:16:7b:4d:70:
5e:be:1e:e6:a0:66:db:09:f8:9b:0b:f8:fa:3f:c0:
af:d2:0a:cd:5b:1a:48:d7:b1:ba:cd:24:75:bd:3f:
17:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:53:28:D3:F3:4C:A7:89:D9:5A:A6:8F:CD:D6:44:5E:6F:35:02:A9
X509v3 Authority Key Identifier:
keyid:C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/VlMo0_NMp4nZWqaPzdZEXm81Aqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.152.152.0/23
31.12.80.0/22
117.55.200.0/23
134.65.164.0/22
217.11.175.0/24
IPv6:
2a02:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
81:c5:05:86:6b:ac:4b:fe:08:3f:bb:18:da:52:dc:69:0e:32:
dd:97:6a:ae:62:64:14:03:35:f7:b6:aa:22:bb:36:e7:56:47:
e3:cc:8c:ea:90:1e:0e:9a:84:31:e7:be:81:d0:15:0d:10:20:
9b:39:d1:05:b0:b6:3f:57:b2:6c:36:74:f1:b7:0c:44:bd:ff:
f4:ef:84:b8:d5:5c:96:1d:4b:3c:37:41:7d:ab:4b:72:50:ca:
b1:07:0c:be:8e:0f:78:84:b8:bd:1b:30:d8:fc:00:00:7d:1a:
2c:62:fc:35:87:76:d5:43:6d:5e:11:e6:6c:2b:01:e4:90:09:
e4:5d:e5:a8:58:1f:b7:bd:8a:aa:76:1c:fb:54:8f:0c:37:96:
29:42:7d:2d:3d:71:a8:9b:f7:24:83:83:bf:17:7b:c5:a9:cc:
9a:80:50:b4:0d:e2:0f:ee:a6:f5:c8:35:7b:25:39:c1:bd:db:
4b:4f:b1:20:ed:e9:78:2d:64:0d:20:ca:f2:cb:e8:88:c4:cc:
c2:20:b4:9d:a2:7a:3c:1d:50:3a:2d:74:71:e0:c2:28:a4:76:
e3:4c:1e:83:c1:f1:1b:77:2a:a2:ac:1d:3c:95:3d:c2:49:94:
f1:b9:92:66:53:04:eb:3c:ee:6b:bd:74:53:0d:63:2a:03:d0:
2d:3c:df:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:05 2024 by rpki-client on console-ams.rpki-client.org