Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/Vvjws-FdgPuglkzyn8tMp9ebaSE.roa
File: Vvjws-FdgPuglkzyn8tMp9ebaSE.roa (raw, json)
Hash identifier: DSEQR9oNTrHMu62nDUNmkz4HmKhbdgnmk5L7Ia3Rdws=
Subject key identifier: 56:F8:F0:B3:E1:5D:80:FB:A0:96:4C:F2:9F:CB:4C:A7:D7:9B:69:21
Certificate issuer: /CN=191ee3af820563494647551a5206ef0c45cf95c9
Certificate serial: 018602F2BEDC583F8B94C75282604D0A3C03
Authority key identifier: 19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/Vvjws-FdgPuglkzyn8tMp9ebaSE.roa
Signing time: Mon 30 Jan 2023 13:51:48 +0000
ROA not before: Mon 30 Jan 2023 13:51:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204645
IP address blocks: 95.131.20.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:02:f2:be:dc:58:3f:8b:94:c7:52:82:60:4d:0a:3c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191ee3af820563494647551a5206ef0c45cf95c9
Validity
Not Before: Jan 30 13:51:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56f8f0b3e15d80fba0964cf29fcb4ca7d79b6921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:c0:7e:03:43:fe:47:87:ae:a6:cd:66:40:
b2:87:fb:5c:49:6b:92:28:f2:0d:0c:70:ce:8b:b5:
04:4b:6e:43:d4:5b:ec:7a:22:2d:d1:b5:24:bb:c1:
31:00:f1:00:49:23:da:b2:11:f5:b7:8f:58:e7:d8:
60:82:4e:da:bf:11:76:05:62:86:1e:b8:12:7f:40:
ec:a7:9a:b2:4c:37:ea:ef:aa:73:3a:88:5e:27:f4:
e6:1c:29:02:e3:d0:40:82:95:bf:69:ea:cc:d4:12:
ac:ec:ee:75:2d:55:00:a5:43:fd:df:2a:a7:cb:ed:
6b:94:e7:e8:b8:ec:dd:e1:ff:59:60:9a:71:44:0e:
ab:4d:ee:8b:1b:ef:4a:f6:54:4c:94:63:95:06:21:
03:2d:38:89:df:a1:30:53:e9:5c:f1:e8:a8:38:f8:
c0:fc:78:28:c5:2a:46:0a:12:c7:16:47:d7:74:24:
29:c2:72:4a:65:d6:82:77:6b:1d:0d:6d:d1:55:b2:
b7:d1:07:91:63:76:17:68:6d:7b:49:e8:9f:b7:44:
1c:37:7f:eb:f5:18:7a:09:6f:a1:bc:5d:14:9c:88:
b3:95:04:d8:bc:da:50:b0:06:d6:56:48:52:96:e0:
1f:45:03:5a:aa:92:61:31:92:05:65:e7:bc:81:8d:
33:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F8:F0:B3:E1:5D:80:FB:A0:96:4C:F2:9F:CB:4C:A7:D7:9B:69:21
X509v3 Authority Key Identifier:
keyid:19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/Vvjws-FdgPuglkzyn8tMp9ebaSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.20.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:ca:5e:9d:46:51:fe:11:98:9e:d2:23:b6:b7:93:b5:50:b3:
61:bb:cb:b7:3c:2e:2a:70:0a:62:e9:de:85:d5:b6:be:9a:be:
23:0d:8a:ee:be:32:9a:e2:6c:43:4f:c1:b4:fd:21:7b:83:aa:
7a:8f:01:de:66:c6:4b:c3:77:b7:e0:5d:a1:62:ac:2a:5e:95:
33:da:72:82:86:16:2e:d1:eb:53:ad:43:d1:db:a8:cd:e5:42:
cc:b6:e1:61:89:98:8d:b4:c3:90:77:4e:3c:e6:01:9b:36:2a:
64:6e:b1:b4:b7:3c:1e:7e:c0:17:96:fe:b1:65:98:68:22:aa:
0d:70:de:ac:26:5e:75:48:41:15:d6:0c:5b:8b:2d:a9:f7:43:
03:bc:15:34:16:54:b7:fa:fa:3f:6d:ac:0a:a2:99:df:e2:66:
a7:91:58:b8:ca:8a:7b:f6:77:58:73:8c:11:10:ce:40:c7:19:
fc:71:2a:e1:2c:31:83:4f:80:75:dd:ff:98:0c:24:ff:1f:e0:
0d:74:6f:6f:7c:8b:db:d5:89:ed:38:2f:d0:5d:4d:8b:1d:91:
35:2f:79:4e:b2:be:ce:64:a2:19:8f:5d:21:e0:a5:11:61:d8:
93:da:1a:70:82:ba:47:c5:18:be:3d:da:24:62:17:2b:fd:f9:
56:81:4f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:31 2024 by rpki-client on console-fra.rpki-client.org