Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/VayxyKV5AhFqWE3je5qp80Xnrbw.roa
File: VayxyKV5AhFqWE3je5qp80Xnrbw.roa (raw, json)
Hash identifier: Kpsjzi3kvogtoDdt0lTA+9Lg8nMC+qHmUCujL8Bg1OY=
Subject key identifier: 55:AC:B1:C8:A5:79:02:11:6A:58:4D:E3:7B:9A:A9:F3:45:E7:AD:BC
Certificate issuer: /CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Certificate serial: 018CC87066225DCC138D48A499CC6470B487
Authority key identifier: BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/VayxyKV5AhFqWE3je5qp80Xnrbw.roa
Signing time: Tue 02 Jan 2024 04:30:58 +0000
ROA not before: Tue 02 Jan 2024 04:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208585
IP address blocks: 45.91.124.0/24 maxlen: 24
2a0e:f40::/32 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 Feb 2024 11:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:66:22:5d:cc:13:8d:48:a4:99:cc:64:70:b4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea649ef6030fc80848fdfe21d4321ac8011fd10
Validity
Not Before: Jan 2 04:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55acb1c8a57902116a584de37b9aa9f345e7adbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:71:eb:56:eb:ee:83:97:d7:06:5e:1d:1d:a4:
7f:83:1f:6b:ad:ec:75:84:05:59:6b:6a:1b:ea:d2:
9f:e8:4c:2c:da:af:82:a2:43:4d:55:31:e7:f6:1e:
b3:81:2a:43:4c:b9:a6:32:6f:37:52:05:d6:e1:be:
90:7c:e3:fe:10:5c:01:64:1f:08:68:0c:d4:f2:5b:
53:61:0e:7c:da:98:f9:fe:88:ac:70:92:97:dd:96:
c3:be:1d:61:97:b5:42:be:32:2d:b3:a0:fc:a4:09:
86:1b:a3:8c:3c:24:95:4c:b3:3c:9a:c8:8e:72:67:
3a:37:a0:76:6a:cd:04:8a:58:5a:74:70:c5:66:d6:
18:c7:1a:1e:fc:37:3e:6f:71:6a:eb:22:c0:87:11:
09:1d:c3:48:2a:4e:e3:70:3e:6f:73:8c:98:13:b2:
e0:55:7f:66:a1:25:84:18:a9:c0:5f:d2:c4:3c:aa:
36:22:54:43:e4:fd:77:97:42:42:a8:99:2a:a1:0a:
28:ca:c0:81:f6:bc:c9:94:3e:3d:29:33:58:84:4e:
11:37:36:b4:1f:9a:6d:fa:85:0c:bb:b5:d4:94:63:
88:36:bd:04:75:9a:10:1e:92:96:1c:95:55:4e:45:
44:50:b6:89:92:2d:c1:e9:0e:13:4c:ab:ff:fc:75:
56:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AC:B1:C8:A5:79:02:11:6A:58:4D:E3:7B:9A:A9:F3:45:E7:AD:BC
X509v3 Authority Key Identifier:
keyid:BE:A6:49:EF:60:30:FC:80:84:8F:DF:E2:1D:43:21:AC:80:11:FD:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/VayxyKV5AhFqWE3je5qp80Xnrbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/19455b-d2cf-4e5f-bf58-21df55ba9ebf/1/vqZJ72Aw_ICEj9_iHUMhrIAR_RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.124.0/24
IPv6:
2a0e:f40::/32
Signature Algorithm: sha256WithRSAEncryption
be:8b:e9:6e:ab:40:cc:c7:a2:0e:52:60:57:df:4f:ab:40:56:
98:17:ae:61:ea:28:36:44:6d:a7:17:f3:ba:b0:cd:18:f8:b3:
02:fe:68:dd:9e:3c:56:bd:21:8b:b0:9f:84:a3:22:fd:c2:2a:
a0:66:0f:46:b1:54:f6:37:fe:f6:da:cb:73:60:35:50:94:5d:
01:02:4c:42:76:5b:f1:20:a5:c0:30:8a:14:de:cf:6b:df:42:
79:69:43:89:59:ae:d9:be:9b:11:ec:ae:98:12:29:a8:e7:cb:
c3:e7:13:84:09:c5:d2:d0:da:37:bd:e8:52:97:f5:5c:b3:67:
17:e1:15:d6:5b:9c:3c:20:a2:88:2d:8b:01:1f:3b:a5:26:ba:
00:05:bf:30:8e:4e:37:ce:da:af:f5:ce:84:68:1a:62:89:14:
32:17:d9:e6:96:ca:98:6d:42:43:08:de:a2:fb:62:88:e0:c3:
bf:c5:30:f9:f6:48:21:ed:5d:a0:71:0c:ef:bc:dd:9d:58:83:
cc:f4:12:4d:76:ed:b3:d6:2d:cc:bb:96:c0:3a:fb:d3:a6:94:
c1:10:98:ae:0f:a9:8c:fc:2a:3d:ae:e1:7f:02:06:bb:00:e8:
7e:87:e8:a6:ca:16:a3:ff:24:6e:2e:a9:f2:03:04:45:f7:0e:
fa:35:ae:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:03 2024 by rpki-client on console-fra.rpki-client.org