Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/VA_povD0zmhckqw75T5n5-Pd9Qo.roa
File: VA_povD0zmhckqw75T5n5-Pd9Qo.roa (raw, json)
Hash identifier: /gE+C09NBv2pUguBA6ESPfeKIaTr3j02G5m6o7Yzf0M=
Subject key identifier: 54:0F:E9:A2:F0:F4:CE:68:5C:92:AC:3B:E5:3E:67:E7:E3:DD:F5:0A
Certificate issuer: /CN=3d767d5fe7ef3f228bddbde5a0e5c18006f75408
Certificate serial: 01856D9D2C295B8AE2C9DAFE01859AB0FBBC
Authority key identifier: 3D:76:7D:5F:E7:EF:3F:22:8B:DD:BD:E5:A0:E5:C1:80:06:F7:54:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXZ9X-fvPyKL3b3loOXBgAb3VAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/VA_povD0zmhckqw75T5n5-Pd9Qo.roa
Signing time: Sun 01 Jan 2023 13:54:55 +0000
ROA not before: Sun 01 Jan 2023 13:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50097
IP address blocks: 193.104.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:2c:29:5b:8a:e2:c9:da:fe:01:85:9a:b0:fb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d767d5fe7ef3f228bddbde5a0e5c18006f75408
Validity
Not Before: Jan 1 13:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=540fe9a2f0f4ce685c92ac3be53e67e7e3ddf50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:95:40:d2:24:ca:b6:d1:4b:2e:29:e4:a5:51:
ee:cd:87:b7:02:d2:b2:e3:ce:7d:b7:1e:f3:07:c0:
0f:30:4f:08:9e:99:7e:37:0e:e6:58:82:20:06:bc:
13:9f:da:2a:a4:5a:9a:fc:25:83:25:ec:18:5e:53:
ba:0e:7e:6c:e9:8c:6b:7f:bd:c6:16:ec:40:a5:d1:
d9:72:05:51:03:00:02:b7:55:ad:e1:00:6c:41:60:
1f:a6:99:a0:b1:e1:dd:21:9f:82:c9:bd:62:f8:2a:
21:e0:2e:fe:66:75:98:50:7b:00:51:07:3b:d4:6d:
27:10:2a:81:d9:52:f3:a5:74:b3:4b:18:a6:5e:da:
d5:06:a1:31:1d:98:d4:e5:06:0a:24:ec:c5:1d:10:
bf:e7:0e:3b:c0:a9:18:6b:49:84:bd:ff:df:5d:bc:
88:6f:81:be:65:73:18:f4:79:50:29:1f:db:8e:9c:
1a:3a:31:97:5c:7a:ef:b3:e2:68:fb:0a:42:64:88:
ea:aa:fb:b6:fb:d3:5a:ff:27:c6:8b:0a:91:f4:f9:
c1:c8:de:34:82:ed:20:25:d2:c8:4d:d6:3c:20:61:
82:30:1a:9d:41:dc:22:79:19:7f:ae:26:9e:0e:63:
71:5d:e7:8d:21:fa:22:d7:31:e4:f5:7f:09:e3:73:
92:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0F:E9:A2:F0:F4:CE:68:5C:92:AC:3B:E5:3E:67:E7:E3:DD:F5:0A
X509v3 Authority Key Identifier:
keyid:3D:76:7D:5F:E7:EF:3F:22:8B:DD:BD:E5:A0:E5:C1:80:06:F7:54:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXZ9X-fvPyKL3b3loOXBgAb3VAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/VA_povD0zmhckqw75T5n5-Pd9Qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.17.0/24
Signature Algorithm: sha256WithRSAEncryption
47:b3:65:db:b0:dd:ca:1b:9a:b0:72:60:29:fb:52:b8:60:74:
12:78:9d:c0:0f:c9:52:39:24:a9:81:d0:1d:5b:4a:4f:e1:91:
ce:ef:4a:45:a5:87:aa:47:b2:01:57:97:45:6a:2e:c7:bb:05:
51:43:3a:e0:45:20:e2:f3:91:cf:64:4a:2d:89:06:13:7c:0c:
ab:71:d2:38:e9:cc:d2:32:04:1a:3a:30:a8:c7:eb:74:8b:b8:
b6:5d:53:b8:9c:fd:f5:0f:38:e8:c3:0e:3d:b1:28:35:d6:18:
fa:1e:85:94:61:fb:50:f4:5a:1b:08:ea:8f:07:94:90:c3:cb:
84:77:8b:d0:cf:b5:a5:8c:6f:75:b0:9c:2d:81:38:23:2c:5b:
6c:5d:e8:f9:4d:a2:ab:33:df:dc:b2:9d:5a:f2:11:1d:8b:f0:
c7:6f:9d:30:45:47:56:81:c9:46:1c:dc:18:ff:d4:51:56:f0:
3d:53:7c:25:f3:b7:94:d4:fd:0f:fc:e2:0b:68:34:9f:c2:c5:
40:33:c6:90:7b:9c:43:2f:1c:3b:ac:8d:a5:f2:d4:28:21:83:
56:36:9c:7a:b2:be:86:0e:61:de:e2:20:c2:e6:28:c7:c5:d2:
32:d7:04:aa:d3:de:c3:82:cb:ad:0a:b9:97:c7:69:1a:86:ba:
5c:f2:07:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:24 2024 by rpki-client on console-fra.rpki-client.org