Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/VLCD6lfaqCExgq9zi24dxH8sgJE.roa
File: VLCD6lfaqCExgq9zi24dxH8sgJE.roa (raw, json)
Hash identifier: pWycJCyfpkLUQ0+SW3VqY/tzh3w7MuznC1LhpSdohQI=
Subject key identifier: 54:B0:83:EA:57:DA:A8:21:31:82:AF:73:8B:6E:1D:C4:7F:2C:80:91
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018929961C509441EEF9508AE921C212A5F2
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/VLCD6lfaqCExgq9zi24dxH8sgJE.roa
Signing time: Thu 06 Jul 2023 05:04:10 +0000
ROA not before: Thu 06 Jul 2023 05:04:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 91.188.205.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:29:96:1c:50:94:41:ee:f9:50:8a:e9:21:c2:12:a5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 6 05:04:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54b083ea57daa8213182af738b6e1dc47f2c8091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:df:d3:38:a0:aa:d7:e0:28:79:3f:b3:39:b6:
29:22:0a:e9:89:f6:fd:36:13:f6:ac:3f:6c:6b:b4:
bc:56:d9:6a:03:a7:77:98:fa:94:93:f2:0a:df:a4:
f0:a5:13:ea:a1:9d:db:4d:90:d6:fe:c6:92:7c:98:
ac:04:47:70:89:19:64:0d:c4:62:45:11:2e:bf:97:
c9:d9:78:22:12:6d:92:85:60:e6:c6:57:79:f2:92:
02:7f:fd:30:9c:34:85:9d:46:b8:f9:7b:dc:89:64:
77:84:60:77:47:88:00:77:fd:5b:53:74:a2:fc:4a:
f0:0a:d3:98:13:c7:f0:61:45:72:c0:74:4d:74:23:
34:43:fc:3d:4c:c9:7e:e9:53:63:4b:b2:a8:d6:41:
02:d4:15:68:0c:81:4b:58:94:06:ff:f1:61:f2:45:
d8:2b:42:1f:80:f2:e4:20:b1:2f:cf:04:8a:7d:9f:
31:08:fb:b0:67:6c:4b:2e:67:37:3c:21:df:f5:81:
37:c7:a0:88:9c:2f:17:69:be:cc:f4:80:4d:59:0d:
d9:3d:4c:dd:ed:12:1d:83:03:5e:b8:ca:2e:52:d8:
c3:c5:b6:d4:f3:76:32:e8:19:c7:48:0a:6f:ff:db:
97:15:94:57:09:2d:4f:78:d3:b6:81:26:4e:b7:26:
b0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B0:83:EA:57:DA:A8:21:31:82:AF:73:8B:6E:1D:C4:7F:2C:80:91
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/VLCD6lfaqCExgq9zi24dxH8sgJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.205.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:85:f4:04:f9:e0:78:61:05:88:5e:eb:2a:ff:68:41:f8:31:
cf:55:1c:62:bd:3c:8e:32:2a:46:22:06:02:34:21:6e:ad:e0:
00:53:7f:3f:77:18:5f:c7:3a:0a:ed:0b:d5:5c:ca:9f:15:03:
d5:92:56:9b:d0:60:b0:a1:39:d5:83:e0:b6:b8:b9:5e:20:7a:
7f:7f:51:99:2c:ee:1b:a3:46:ac:94:9b:c6:17:26:5f:27:d2:
2d:5f:dc:4d:b6:14:be:f0:67:4f:72:1f:ca:30:80:6e:d2:91:
0b:4a:63:97:bc:5e:7d:ee:84:8f:46:fe:27:b0:73:de:2c:64:
f1:48:c8:80:c8:51:d5:01:ed:ba:c8:64:b9:55:42:a3:d1:6f:
9c:dc:7e:68:15:d6:2d:83:98:aa:26:de:aa:2c:dc:60:69:e5:
b0:03:60:2f:ab:11:91:db:9e:34:78:f5:2a:3c:8a:56:47:a1:
36:be:9d:3e:66:8d:1d:be:0e:aa:f6:f1:90:61:41:7d:b6:e4:
b1:bf:00:81:0d:7f:25:10:a8:5a:16:ae:2e:46:78:e3:5a:7c:
21:9a:07:f0:b9:6f:94:d5:15:26:f6:64:68:ec:be:b6:06:bc:
e6:b9:9b:30:6d:ce:34:60:8c:27:b0:91:22:59:e4:ca:e6:ac:
b8:ce:c5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:55 2023 by rpki-client on console-ams.rpki-client.org