Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VkZG8i28Lq4Es5_XJwz3-h5NJFc.roa
File: VkZG8i28Lq4Es5_XJwz3-h5NJFc.roa (raw, json)
Hash identifier: 5REQAq4NBCpcZRfaKx2sxIzWTiGS5HRz/6zskLouWTk=
Subject key identifier: 56:46:46:F2:2D:BC:2E:AE:04:B3:9F:D7:27:0C:F7:FA:1E:4D:24:57
Certificate issuer: /CN=56c107a13d5807b792f7a557b2fbad58f944a19f
Certificate serial: 018571276E21F1A8A532FF7E499E8D91AE39
Authority key identifier: 56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VkZG8i28Lq4Es5_XJwz3-h5NJFc.roa
Signing time: Mon 02 Jan 2023 06:24:47 +0000
ROA not before: Mon 02 Jan 2023 06:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 91.209.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:6e:21:f1:a8:a5:32:ff:7e:49:9e:8d:91:ae:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56c107a13d5807b792f7a557b2fbad58f944a19f
Validity
Not Before: Jan 2 06:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=564646f22dbc2eae04b39fd7270cf7fa1e4d2457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6f:22:28:da:9a:19:50:b1:cd:01:6b:52:84:
39:72:ca:da:5c:9b:ed:d0:94:38:f8:d6:b1:74:31:
d0:92:d6:c9:32:98:29:f3:bf:54:62:f2:85:3d:f8:
41:27:97:2d:a5:46:f8:d4:1e:12:91:f2:8d:ef:49:
9f:f7:5a:67:ed:00:c9:fd:9d:43:98:5b:e2:aa:ed:
d3:18:b8:24:6e:d1:a0:fb:3e:b7:f4:a1:4e:f9:44:
2f:b2:11:75:7c:10:a9:d7:cd:4e:5b:d0:55:d4:cf:
f9:c5:ea:26:ce:f6:23:57:2c:2a:14:e4:79:40:38:
1f:9f:51:45:c2:7a:d0:c3:d2:8b:6e:a0:ad:15:d7:
01:42:4a:4a:92:86:41:d8:96:53:78:01:4b:28:3e:
9a:27:60:a6:7d:0b:88:dc:15:eb:ee:15:74:1c:ef:
a5:16:8c:7a:60:94:b4:80:a8:49:85:07:0d:5c:b6:
cd:a2:b6:66:07:35:96:07:79:4a:7b:33:39:af:5a:
18:db:ec:6b:9d:e4:5d:bf:d8:50:6e:0c:b4:ac:d4:
a4:5f:22:ef:d0:e3:81:7a:53:b4:e3:71:a9:93:b5:
65:1e:56:5f:6b:48:a5:59:3e:70:9c:6a:e8:e2:4b:
36:7c:82:27:92:c2:e8:e4:78:30:de:34:17:f4:25:
43:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:46:46:F2:2D:BC:2E:AE:04:B3:9F:D7:27:0C:F7:FA:1E:4D:24:57
X509v3 Authority Key Identifier:
keyid:56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VkZG8i28Lq4Es5_XJwz3-h5NJFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.87.0/24
Signature Algorithm: sha256WithRSAEncryption
43:0e:9b:2a:d6:3c:af:c3:51:fb:6f:d0:e7:7d:45:d2:47:99:
29:67:bf:2f:d6:51:07:b3:76:2a:16:c7:31:ae:65:af:27:ca:
39:ea:64:45:fe:14:f7:38:1d:5e:9e:a1:c2:a9:fa:69:28:4f:
d4:0f:9b:b3:a9:93:dd:08:49:4b:99:3f:36:03:de:3d:2f:e1:
b4:ee:4a:d0:2f:f6:ea:b0:d6:6c:53:91:37:5a:00:27:be:e9:
82:40:75:f7:51:32:ef:57:c8:37:07:04:6e:48:f4:03:95:0e:
e2:e9:8e:71:86:56:1c:11:e7:1f:64:88:35:91:7a:de:1f:5a:
2d:4e:69:0c:e6:c7:65:ae:c3:31:66:b1:7a:61:e0:51:4e:d8:
0b:75:78:b8:12:4f:02:6a:5e:fc:ee:64:7a:0b:ef:76:e1:75:
2b:dd:8b:97:d9:06:35:e8:a3:e1:82:4a:b0:2b:95:77:cb:69:
06:22:af:03:a6:62:c6:48:c8:d7:99:ca:b3:b5:27:da:33:5e:
15:bc:73:ec:91:a8:c0:46:01:d7:6b:33:b9:17:f3:bc:39:44:
3b:bb:c2:74:85:4d:23:56:2c:64:6d:d8:3b:ff:3f:c4:16:ea:
81:b5:89:65:b9:34:a4:0b:61:7b:fb:30:bf:a7:17:bf:48:d4:
be:d1:1c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:55 2024 by rpki-client on console-ams.rpki-client.org