Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/VJlDkfIDbUdyDuJfDLZytDqa5B8.roa
File: VJlDkfIDbUdyDuJfDLZytDqa5B8.roa (raw, json)
Hash identifier: LBQagJysrpR5oj9+4WqRBYMikv392cT547ZhyOEPPQg=
Subject key identifier: 54:99:43:91:F2:03:6D:47:72:0E:E2:5F:0C:B6:72:B4:3A:9A:E4:1F
Certificate issuer: /CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
Certificate serial: 01856CAF4507E61806005F17267812BB039C
Authority key identifier: A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/VJlDkfIDbUdyDuJfDLZytDqa5B8.roa
Signing time: Sun 01 Jan 2023 09:35:03 +0000
ROA not before: Sun 01 Jan 2023 09:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 553
IP address blocks: 134.60.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:45:07:e6:18:06:00:5f:17:26:78:12:bb:03:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
Validity
Not Before: Jan 1 09:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54994391f2036d47720ee25f0cb672b43a9ae41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:c1:1c:ff:fa:b5:28:1f:5d:f8:9c:ee:82:
08:99:79:28:71:fa:50:a5:9d:c2:44:77:f6:ce:8a:
ee:cb:03:74:84:0f:d1:19:ac:d9:18:07:29:fd:4c:
da:1c:42:1e:49:fb:6e:20:92:a9:45:c3:b4:a2:e5:
ee:f8:e1:59:dc:25:9f:6a:70:bb:1d:96:92:dd:f7:
c3:fa:a8:ae:6a:36:63:3c:25:76:84:b4:7c:4d:8d:
66:19:04:01:f6:04:19:53:0a:df:aa:dc:02:59:e6:
3f:fa:50:68:40:49:ea:b1:75:7d:76:91:d1:39:ea:
df:80:0b:3d:0f:63:58:d1:db:74:a9:89:e2:57:2d:
ee:ab:84:42:dc:ef:bf:7e:0e:3d:96:27:eb:fe:96:
ef:c4:fa:53:f7:5e:e3:37:bc:a1:61:ed:c8:74:50:
95:3c:2b:fa:1b:90:99:c2:d4:6b:53:14:4d:21:b1:
ad:f0:45:96:05:10:16:52:94:8a:60:76:fc:e9:ce:
43:98:7e:df:8c:96:8d:4f:5f:41:d9:a3:5f:44:ab:
72:2d:54:79:de:89:44:43:75:73:3f:9e:19:52:3e:
68:24:80:9e:98:07:9c:a8:c9:a1:a6:41:64:3a:f5:
f8:ac:b1:c3:a3:b7:9a:08:c2:c3:c4:44:59:4c:48:
bc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:99:43:91:F2:03:6D:47:72:0E:E2:5F:0C:B6:72:B4:3A:9A:E4:1F
X509v3 Authority Key Identifier:
keyid:A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/VJlDkfIDbUdyDuJfDLZytDqa5B8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.60.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:bc:91:e9:93:4b:0b:70:54:2f:72:39:34:de:9c:02:ae:82:
14:4b:63:af:65:1a:7d:05:ea:96:74:df:31:14:80:81:b0:88:
f3:af:15:b9:7b:22:09:63:18:dd:2a:b3:23:48:8d:36:f9:36:
e3:98:c4:da:8e:b6:08:f4:16:b6:79:ab:be:73:23:c9:bd:e8:
96:00:b5:3f:61:c0:78:54:6f:1e:74:64:6d:1e:d8:50:48:34:
4d:a8:a2:ce:c1:02:e6:df:a5:cb:42:53:37:ca:e3:a6:2d:01:
37:34:b6:16:b3:80:d4:60:91:9d:dd:bd:1b:e5:6f:1a:30:89:
7b:0d:38:ba:e7:32:d4:d9:24:1e:6f:58:a1:3c:7f:a7:39:a5:
d5:9b:c0:4e:0e:d4:fd:95:d3:1a:2d:8c:06:9c:5f:bf:02:ea:
57:5f:13:98:04:68:79:db:d6:e2:b8:f1:c4:a4:41:eb:47:e8:
73:0c:eb:9b:5c:34:81:af:96:13:7b:c8:f2:70:66:52:1c:4f:
9a:4d:46:86:e7:1e:6c:14:1f:ed:5b:be:51:9c:4c:98:bd:f7:
45:3d:79:2e:dc:d5:64:14:9c:2a:e5:98:92:90:06:75:f1:58:
97:a7:f4:1c:f2:c0:71:0a:2d:7d:5c:71:8a:d3:e0:bf:70:41:
5e:f1:31:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:09 2024 by rpki-client on console-ams.rpki-client.org