Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/vofNjJvNIaO5VHyr8ZEnlUTuQr8.roa
File: vofNjJvNIaO5VHyr8ZEnlUTuQr8.roa (raw, json)
Hash identifier: Rh+OmCdsu6jE+pfW3B54eDWntlNH80j2nT2M6M2bsgg=
Subject key identifier: BE:87:CD:8C:9B:CD:21:A3:B9:54:7C:AB:F1:91:27:95:44:EE:42:BF
Certificate issuer: /CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d
Certificate serial: 018CC94D931AB742CB90E878B3B33E33E43F
Authority key identifier: 54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/vofNjJvNIaO5VHyr8ZEnlUTuQr8.roa
Signing time: Tue 02 Jan 2024 08:32:33 +0000
ROA not before: Tue 02 Jan 2024 08:32:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197835
IP address blocks: 2a13:940::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 25 Jan 2024 16:58:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:93:1a:b7:42:cb:90:e8:78:b3:b3:3e:33:e4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d
Validity
Not Before: Jan 2 08:32:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be87cd8c9bcd21a3b9547cabf191279544ee42bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:7f:ef:23:29:73:00:f3:07:02:ed:33:82:
29:56:b8:79:a8:d9:83:b0:60:a2:55:bd:eb:35:dd:
d6:c3:a4:14:bc:ea:92:9d:80:4e:b8:07:86:cf:5a:
26:a7:ee:17:df:e8:90:7e:a1:fe:89:67:58:1b:0a:
d3:0a:e4:ec:5e:c1:fb:82:8e:bc:f1:33:d9:6c:8d:
b2:c6:e5:c5:40:78:1b:34:5d:8a:d0:18:d2:ac:ef:
64:64:b7:46:3f:cb:30:02:80:b1:6f:22:d1:39:07:
60:c9:72:fa:b4:de:d5:fc:c5:bc:b4:3a:9e:56:a2:
46:1b:f2:c9:42:a7:d5:1a:7f:ac:d2:a8:9c:65:72:
8d:97:fd:e7:03:db:d2:98:2e:52:2b:dd:23:5e:9a:
6a:e6:f3:8a:ba:36:7e:0d:eb:fa:13:d2:5a:4c:55:
d1:38:a3:35:25:4e:b8:89:2e:bd:53:91:7a:22:a1:
ce:5b:1f:f9:81:bb:c2:f4:44:ab:77:53:1d:ed:56:
aa:87:61:bc:b3:59:9e:14:aa:11:95:66:3e:ce:fc:
c8:9a:52:a4:58:69:21:33:d2:03:70:0a:5c:a6:24:
76:d7:12:da:8a:e9:07:39:a7:76:93:e9:56:f3:de:
9f:a1:66:87:ad:77:db:8c:39:9f:53:2b:57:3b:84:
10:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:87:CD:8C:9B:CD:21:A3:B9:54:7C:AB:F1:91:27:95:44:EE:42:BF
X509v3 Authority Key Identifier:
keyid:54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/vofNjJvNIaO5VHyr8ZEnlUTuQr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:940::/29
Signature Algorithm: sha256WithRSAEncryption
aa:85:c1:e9:07:87:35:b1:82:46:be:2e:1f:8d:4b:db:06:ba:
78:dc:a2:30:3d:6f:44:12:69:d9:20:e5:ff:2e:cb:33:46:51:
97:1e:46:a1:1d:3c:34:52:05:ce:42:1f:96:b5:52:be:87:be:
66:75:10:00:2d:37:74:92:c5:3a:de:37:8a:02:dd:40:bf:8e:
ed:d3:92:e5:7f:05:fa:50:27:ce:5c:3d:7e:eb:47:8f:2a:b2:
a2:71:98:5b:41:e9:fc:c8:02:cd:13:ea:70:5c:ce:e0:fa:09:
e3:3a:15:98:7f:26:a8:b7:16:08:e5:82:d3:0b:ee:28:52:25:
bf:da:e0:ff:da:37:22:30:a4:97:b1:f1:28:0d:0a:b0:4c:89:
fb:43:6a:91:fa:92:2b:65:88:54:67:c1:70:b3:24:f4:25:5b:
36:a7:65:41:b5:9e:2a:f6:73:01:aa:6a:90:b3:11:af:a5:67:
94:67:91:ee:e7:47:cd:9e:9d:b9:7b:ec:0e:01:fb:a5:5b:4f:
9e:e1:9f:12:45:72:70:b2:3a:5c:7c:38:6b:9c:6f:f4:4e:b8:
88:1e:29:54:20:51:3c:b5:82:31:26:6b:c0:3f:d3:72:22:42:
97:62:4b:c4:ff:7c:2e:de:1f:67:dd:36:bb:cf:c4:22:ac:ec:
91:a1:d7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:19 2024 by rpki-client on console-ams.rpki-client.org