Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/vc1ptPqLc78heTT1IuqML5Xz9i0.roa
File: vc1ptPqLc78heTT1IuqML5Xz9i0.roa (raw, json)
Hash identifier: 10BMuJx7tpfvKR8FtqmMv4IQZn4OKQuiiasjVc3Oy1k=
Subject key identifier: BD:CD:69:B4:FA:8B:73:BF:21:79:34:F5:22:EA:8C:2F:95:F3:F6:2D
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018BFC2E6ABB5B84D8A3A0FDB8C4196E79E4
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/vc1ptPqLc78heTT1IuqML5Xz9i0.roa
Signing time: Thu 23 Nov 2023 12:36:22 +0000
ROA not before: Thu 23 Nov 2023 12:36:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199961
IP address blocks: 45.132.254.0/24 maxlen: 24
194.67.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fc:2e:6a:bb:5b:84:d8:a3:a0:fd:b8:c4:19:6e:79:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Nov 23 12:36:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdcd69b4fa8b73bf217934f522ea8c2f95f3f62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0d:29:31:7b:ef:f8:34:b3:e7:55:42:66:a5:
6c:63:d9:15:fa:37:33:d0:bf:fd:2a:fb:be:92:cf:
5e:b8:44:56:d8:2b:22:75:18:85:bc:28:75:a0:08:
84:99:3c:52:f3:cc:2b:cf:86:c6:36:d9:da:0b:30:
d5:3a:d3:96:b2:dc:e7:07:9f:3f:ce:4f:49:0b:66:
6c:15:c4:dd:2c:fc:d1:17:ee:a5:32:a7:62:83:bf:
6f:4d:08:36:27:a1:66:92:30:f8:67:d8:29:09:e3:
c6:03:ce:23:76:53:31:7e:95:91:b6:a4:98:3b:35:
a4:7d:c6:5c:70:4b:db:4f:e9:3b:8b:02:21:45:c6:
b7:92:1b:e1:a1:d2:4d:b8:84:aa:19:33:ca:e6:8a:
e9:86:8b:ff:f5:0b:16:53:64:b9:6d:5a:34:06:1b:
7b:b7:52:5b:6e:53:0c:da:c9:88:56:bd:79:85:41:
38:dd:6e:a3:7a:5e:e0:ee:b3:93:e9:6e:51:ac:22:
74:93:56:53:5f:f5:79:33:c7:5e:45:5f:c8:16:11:
bb:b8:ca:b3:b8:69:1b:df:21:5d:46:64:bc:40:eb:
3d:48:59:da:3a:77:56:17:13:cb:03:36:68:09:a2:
18:0e:6e:da:5e:56:f5:47:57:25:a8:b4:f5:c2:1e:
10:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CD:69:B4:FA:8B:73:BF:21:79:34:F5:22:EA:8C:2F:95:F3:F6:2D
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/vc1ptPqLc78heTT1IuqML5Xz9i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.254.0/24
194.67.194.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:6f:20:54:e3:58:f8:e1:73:c7:8a:67:17:30:29:7f:07:af:
44:28:7a:e2:61:40:c2:ad:be:3a:db:bc:29:15:41:95:84:73:
6f:a9:7f:52:28:16:11:62:38:7e:4b:a2:b7:27:fe:b3:f1:ea:
67:c5:32:8f:cf:98:24:aa:9a:23:ac:04:7a:90:54:3e:b0:15:
9d:f4:3c:4a:f2:b6:97:85:64:b3:8c:c9:a0:03:fd:3a:05:7c:
5c:88:c9:1c:2c:69:58:40:7d:c3:a7:f1:95:a9:20:45:35:f1:
d6:cb:65:41:c6:5f:2d:31:35:8f:22:1a:08:5f:71:44:a0:68:
fb:28:19:2a:5b:42:19:88:72:f1:0e:d2:1a:64:a6:f5:37:01:
a8:89:72:93:0a:b5:66:1b:e6:72:32:78:ef:ca:54:50:56:c8:
39:31:30:2e:d9:e0:3a:22:5f:76:f4:d9:57:d2:da:bc:bc:c2:
43:c0:5f:af:70:8f:c8:c3:3f:9f:6e:2b:6e:77:4c:2b:a5:8f:
3a:eb:a0:88:55:49:fc:9a:e8:10:28:83:87:88:d2:de:62:95:
d0:0e:24:50:28:ad:96:9c:64:d5:8e:67:4f:2f:1c:d8:3c:07:
0e:db:25:36:4b:e3:a4:86:56:87:48:6f:93:14:b2:26:4d:c3:
29:db:5a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org