Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/VfETAoliq5VT9Fk2Mz7xZiSVXN8.roa
File: VfETAoliq5VT9Fk2Mz7xZiSVXN8.roa (raw, json)
Hash identifier: sBmg55yh/SKU+PCNnaPaGk9EkThIf13nL6D5ki7sjMc=
Subject key identifier: 55:F1:13:02:89:62:AB:95:53:F4:59:36:33:3E:F1:66:24:95:5C:DF
Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Certificate serial: 01869945AD3FEE92F19D4B06FF5F0E6B5BBA
Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/VfETAoliq5VT9Fk2Mz7xZiSVXN8.roa
Signing time: Tue 28 Feb 2023 18:25:25 +0000
ROA not before: Tue 28 Feb 2023 18:25:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210289
IP address blocks: 195.177.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Feb 2023 19:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:99:45:ad:3f:ee:92:f1:9d:4b:06:ff:5f:0e:6b:5b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Validity
Not Before: Feb 28 18:25:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55f113028962ab9553f45936333ef16624955cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:05:32:2c:17:95:5a:5c:36:bb:98:21:1f:d4:
08:8e:17:62:eb:65:4f:e9:aa:4d:f6:3d:5a:44:73:
2d:65:4c:a6:b5:cb:ad:45:ab:8a:99:77:9a:38:31:
16:b0:4f:78:13:09:dd:1c:50:a7:39:f8:2e:1b:c4:
67:e0:a3:0a:0b:66:bc:1a:d7:d3:7b:7f:16:df:e1:
b4:8b:f2:8b:e3:6e:d7:89:b3:7a:7d:a5:a9:81:e8:
0a:d1:83:41:8b:46:45:d7:4a:9d:a8:ce:9a:aa:7b:
0e:b0:be:dd:0d:56:d4:59:ae:d8:c1:9f:74:0e:5f:
0b:af:43:1f:a4:1b:5f:bb:57:df:4e:4a:5b:fe:56:
fa:11:87:eb:b2:3d:58:91:98:e9:54:8f:4b:37:f0:
26:ed:08:2c:15:33:58:ad:18:63:44:88:14:36:4c:
80:b2:a7:d3:7c:1a:46:8d:d6:9b:9c:61:4c:24:4f:
4c:a1:c2:99:31:8f:19:a0:7e:72:00:8a:98:27:3b:
cc:72:63:ec:72:59:f0:e3:c0:ee:90:5f:48:55:92:
5b:0f:73:e9:20:80:fd:7c:2e:4e:04:54:49:e5:b7:
de:db:8d:28:b1:2b:38:96:c7:58:08:1f:49:94:1e:
f6:44:7e:15:17:74:a0:49:f7:f9:26:19:d7:e2:8a:
ff:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F1:13:02:89:62:AB:95:53:F4:59:36:33:3E:F1:66:24:95:5C:DF
X509v3 Authority Key Identifier:
keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/VfETAoliq5VT9Fk2Mz7xZiSVXN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.230.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:1e:b0:5d:87:43:14:c7:b0:0e:6c:24:91:b0:96:75:d4:97:
2b:4c:9e:a5:15:57:fd:5d:31:09:bd:8b:91:94:ac:67:df:9b:
9b:0d:c6:85:8e:3c:64:70:7a:61:76:eb:fa:42:f1:31:72:74:
a8:23:e5:ad:b4:0d:9b:0d:ee:6c:9a:95:d0:1d:24:d4:b0:b2:
41:fb:17:85:50:49:a2:fe:fc:96:8a:96:d1:37:5a:ca:f6:8e:
7d:93:bd:3b:0c:6f:33:bf:30:ee:17:6c:e0:a8:60:71:26:3f:
90:38:a7:05:77:7f:6b:42:53:08:f5:0d:30:dd:7b:e8:96:64:
df:d2:81:ce:c2:19:b6:37:af:95:d7:4d:ac:54:dc:33:6e:d6:
43:8d:92:d2:25:b7:4e:a7:1b:9f:81:01:5d:02:d0:91:8f:41:
6a:9a:57:36:95:06:e6:c2:e0:57:8c:53:c1:20:42:e0:57:de:
f2:fa:30:7c:a6:7d:5d:33:e7:c7:4a:5c:04:59:7d:b9:71:b2:
ba:2d:01:0d:8b:23:00:8d:ac:43:57:a7:3c:e2:4d:5a:c3:59:
29:96:af:d5:a0:0e:52:c3:60:97:73:4b:2d:fa:54:e4:f9:11:
c5:06:ec:46:42:65:6f:04:ae:1e:d2:46:cf:62:a3:a0:c9:7e:
cc:07:84:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:56 2024 by rpki-client on console-fra.rpki-client.org