Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/VC3mXKCXQcvA1f4x49Fpwey4SR4.roa
File: VC3mXKCXQcvA1f4x49Fpwey4SR4.roa (raw, json)
Hash identifier: W1C6BZmedb+ab2o5cpq7t1gjH/S4Nt4sHOHO5MW8rcQ=
Subject key identifier: 54:2D:E6:5C:A0:97:41:CB:C0:D5:FE:31:E3:D1:69:C1:EC:B8:49:1E
Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial: 018CC802EA45C472917E808D12C10D3FE6CC
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/VC3mXKCXQcvA1f4x49Fpwey4SR4.roa
Signing time: Tue 02 Jan 2024 02:31:23 +0000
ROA not before: Tue 02 Jan 2024 02:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212616
IP address blocks: 91.230.48.0/24 maxlen: 24
93.175.32.0/19 maxlen: 19
176.97.214.0/24 maxlen: 24
2a0e:5b00::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 05 May 2024 03:13:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:ea:45:c4:72:91:7e:80:8d:12:c1:0d:3f:e6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Validity
Not Before: Jan 2 02:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=542de65ca09741cbc0d5fe31e3d169c1ecb8491e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f8:6a:24:b3:50:1c:34:ba:bb:26:2f:c9:8e:
ed:15:85:25:6c:4b:53:d2:55:91:c2:cb:78:3b:e4:
36:54:f9:d7:89:d8:c2:91:62:97:66:fb:8f:b6:f4:
b7:7f:77:d8:18:76:9a:38:bb:98:59:a6:79:23:81:
c5:a8:66:5d:ed:5f:91:d9:e1:8d:e6:11:8a:80:16:
fe:bc:b4:36:5e:b6:5e:c4:c5:f9:46:96:e1:52:c4:
4e:cc:8a:8a:34:59:a0:5a:5b:ca:a8:3c:c4:4d:b8:
7a:d3:10:8e:90:24:65:06:24:58:7f:d8:12:ca:c7:
53:56:6a:ec:e0:2a:34:3c:d6:bb:ff:f1:87:cf:e7:
2e:93:58:db:4a:21:59:ad:09:46:eb:13:79:a9:9c:
06:c0:40:90:48:58:91:67:52:88:7a:14:4e:94:81:
d2:c4:ed:f2:a3:b4:ca:e2:c9:52:bb:be:3d:9f:9c:
44:b3:31:fc:1e:a6:5c:b0:2e:2a:0d:60:2f:56:c5:
43:c6:db:2e:8c:0c:d7:af:bc:c9:55:23:6b:52:5e:
9d:13:c8:3d:95:fd:ee:91:fc:a9:9a:10:9b:b0:67:
8f:12:3e:95:54:90:57:08:cc:06:f9:44:1d:f7:09:
ad:b4:96:2d:a6:c7:03:3f:d3:b4:84:aa:a7:01:33:
27:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2D:E6:5C:A0:97:41:CB:C0:D5:FE:31:E3:D1:69:C1:EC:B8:49:1E
X509v3 Authority Key Identifier:
keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/VC3mXKCXQcvA1f4x49Fpwey4SR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.48.0/24
93.175.32.0/19
176.97.214.0/24
IPv6:
2a0e:5b00::/29
Signature Algorithm: sha256WithRSAEncryption
3c:95:20:96:76:cb:29:f9:9d:e7:8f:99:d4:83:26:6d:46:e4:
18:cd:0d:29:65:04:9b:00:37:48:5b:78:c8:6a:86:b7:05:3f:
98:51:c7:95:06:aa:20:11:e6:88:b9:8a:42:88:28:4f:ad:8e:
b4:de:b5:68:c9:24:c4:7b:c0:96:1a:1c:86:dd:d3:1b:4b:c7:
14:b4:90:f8:dd:99:f4:15:e9:08:04:b5:64:a8:92:2c:85:0d:
40:b5:29:2a:d6:6c:0c:5b:2f:17:4f:48:1f:8d:3c:9a:5e:ae:
7e:d2:b0:2c:fc:1b:41:c7:41:60:c5:1a:b9:c5:39:06:b3:da:
54:16:8d:17:50:18:83:42:b6:50:78:f1:fd:a1:9b:2d:6a:68:
68:eb:99:a7:2e:84:0e:04:e2:46:30:1c:fc:c9:34:b6:f9:a7:
d2:a1:3b:af:28:38:04:d5:14:7d:71:71:6b:cf:15:da:ba:b4:
33:4e:c2:4a:3a:11:60:df:b5:4d:19:2a:34:32:34:b9:e4:a9:
85:d9:35:35:19:cd:48:35:4c:9d:73:94:6f:b5:52:0f:23:73:
46:31:6f:aa:28:76:21:61:b7:8b:7c:63:2d:cc:dc:0e:9d:6e:
43:e0:78:37:4d:35:99:f2:fb:55:47:98:30:ea:e1:92:f5:b1:
59:47:bd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:00 2024 by rpki-client on console-ams.rpki-client.org