Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/vhIIcPgqHj99ZolDYjHEBdispdU.roa
File: vhIIcPgqHj99ZolDYjHEBdispdU.roa (raw, json)
Hash identifier: s2XFDEXP1Idb5HcUOuurYmMcW/VRU1haFeiVUTsdyNw=
Subject key identifier: BE:12:08:70:F8:2A:1E:3F:7D:66:89:43:62:31:C4:05:D8:AC:A5:D5
Certificate issuer: /CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
Certificate serial: 018A1C41905DFC4F53184D5632A0EDA72FA7
Authority key identifier: 1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/vhIIcPgqHj99ZolDYjHEBdispdU.roa
Signing time: Tue 22 Aug 2023 07:59:33 +0000
ROA not before: Tue 22 Aug 2023 07:59:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39356
IP address blocks: 164.215.108.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1c:41:90:5d:fc:4f:53:18:4d:56:32:a0:ed:a7:2f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d65b7b7b898faaee70767d09715c436a83fcdc2
Validity
Not Before: Aug 22 07:59:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be120870f82a1e3f7d6689436231c405d8aca5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:48:2c:e9:15:a7:83:a0:10:78:ee:3b:52:b0:
a7:a5:49:51:25:c8:fa:c3:53:e6:8d:7f:74:b5:2d:
9c:03:06:93:5c:d2:40:32:f6:4e:2a:70:f9:7f:07:
07:68:47:10:a0:02:23:7a:17:ae:c3:4b:dc:9e:24:
59:95:13:1c:df:65:1a:3f:f7:98:d9:34:25:69:30:
75:5b:ee:5a:a4:c4:f7:c9:65:c8:fd:8f:23:3f:fe:
8c:35:12:18:d3:de:75:1a:1c:9d:a4:a9:28:31:9a:
c3:4f:5c:e8:24:3d:4b:8c:1b:f7:33:8a:c0:0a:78:
84:fe:03:b0:3f:03:73:03:a7:71:ec:5f:24:60:30:
63:77:77:48:c8:2f:d3:b9:8f:36:81:f8:88:9e:18:
e2:e4:6f:cd:cd:9a:d8:cc:eb:56:7e:b3:7c:11:fb:
be:af:3b:0d:8f:1a:0c:c0:4a:0d:06:c7:e7:49:0b:
9a:c7:43:9b:cc:f4:79:2b:3a:63:cd:ca:87:01:72:
21:d1:a0:e4:72:b8:43:10:d5:85:11:3e:f0:92:b3:
82:90:2d:c2:f6:49:74:f7:3e:ea:1d:f5:ec:a4:ea:
d9:ee:15:ce:00:52:f8:6f:e5:6c:c8:47:7c:e1:3e:
34:96:8b:b6:3c:ec:c2:55:3f:4c:db:3d:c1:44:ab:
64:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:12:08:70:F8:2A:1E:3F:7D:66:89:43:62:31:C4:05:D8:AC:A5:D5
X509v3 Authority Key Identifier:
keyid:1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/vhIIcPgqHj99ZolDYjHEBdispdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.215.108.0/24
Signature Algorithm: sha256WithRSAEncryption
04:f1:e0:5d:d1:5d:31:aa:fe:f5:93:30:2d:bb:89:3d:0b:be:
dd:6e:44:3a:b3:ec:31:48:91:8c:ee:44:c2:f9:0a:70:14:5d:
0c:45:7f:c6:be:95:b9:fe:f3:cb:de:da:2f:fb:1c:35:16:e2:
1f:89:7f:82:34:15:b0:7c:84:35:e5:6e:2b:3b:c9:ce:68:74:
fe:b4:87:1d:20:ec:48:be:f1:ad:1e:b2:54:aa:9f:4e:83:ee:
c1:f2:56:26:fa:13:95:f0:38:85:d3:3e:79:be:a7:e5:35:df:
ec:d7:3d:5e:23:ac:34:c7:fe:7f:3f:06:4d:0f:9d:a9:cb:4a:
11:93:21:eb:25:df:f0:c5:32:99:f6:be:10:4e:2b:8a:52:d2:
ce:d2:11:2e:94:8d:84:fc:61:1f:cf:57:be:a1:c3:20:ac:b9:
76:b5:74:3d:56:8e:bb:6c:7d:6a:c4:f0:ec:c7:2c:1a:a7:15:
39:25:18:96:e0:73:ac:a5:2e:ae:5d:3c:73:c1:18:6c:61:61:
5e:4f:11:44:a9:77:3d:8e:9a:62:d5:37:db:79:48:30:e6:cc:
be:7a:24:b2:e0:9a:0f:82:fd:fe:40:ba:b9:b4:34:c7:53:49:
82:30:a9:74:bd:3f:6e:1c:64:9f:77:53:25:71:55:ea:14:79:
fe:12:a8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:55 2024 by rpki-client on console-ams.rpki-client.org