Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/VQMhtbG3H00xViuMl26l9bGOUPs.roa
File: VQMhtbG3H00xViuMl26l9bGOUPs.roa (raw, json)
Hash identifier: +I7bUjyzrPH4wBqEVta5WzpYf4x+cbTYGN4yafGFkHQ=
Subject key identifier: 55:03:21:B5:B1:B7:1F:4D:31:56:2B:8C:97:6E:A5:F5:B1:8E:50:FB
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCACD4CBC8B6FD8215A2D3E801D4DA9
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/VQMhtbG3H00xViuMl26l9bGOUPs.roa
Signing time: Sun 01 Jan 2023 10:05:08 +0000
ROA not before: Sun 01 Jan 2023 10:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2859
IP address blocks: 192.121.121.0/24 maxlen: 24
194.68.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:cd:4c:bc:8b:6f:d8:21:5a:2d:3e:80:1d:4d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=550321b5b1b71f4d31562b8c976ea5f5b18e50fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c1:d6:e0:18:6e:aa:7c:3c:2b:b9:00:e7:d4:
cf:7c:72:5c:7b:16:74:44:fa:6e:b5:e9:37:fe:99:
4e:62:4a:29:f7:64:6a:f5:a5:68:e3:76:fc:82:65:
57:72:50:5e:86:42:41:65:f8:3d:2b:c3:3c:28:2e:
0e:08:18:f8:46:d2:0b:7c:dd:0d:1f:20:63:73:ac:
c2:79:8c:6d:4b:82:70:c1:9f:79:8e:6e:e9:11:6a:
18:fd:7a:0c:83:69:29:f3:87:50:e1:4b:39:ee:3a:
09:d7:56:9d:18:84:ab:57:fc:58:40:6f:af:70:b9:
c0:a1:bc:64:c0:96:a3:a9:e5:fa:81:70:4e:e4:c8:
f8:da:d1:c9:5e:23:93:1a:b3:c2:96:92:66:87:78:
4b:dd:ca:88:73:18:fa:83:03:da:b1:40:f9:07:bf:
ba:ea:db:15:ca:09:18:9e:9b:b6:7c:66:31:49:53:
31:1f:f7:57:ce:78:8f:17:2f:a0:d8:82:43:f7:5f:
1c:4e:4c:00:2d:92:62:88:e8:50:9a:90:47:e5:58:
7d:32:b1:69:2f:8b:ff:0f:d6:6f:9b:a6:58:f2:ed:
13:5d:90:21:ad:1a:f8:a2:05:2a:1d:53:f9:d4:2a:
ac:72:04:3a:27:ab:b5:11:bb:73:68:8c:c5:58:c2:
21:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:03:21:B5:B1:B7:1F:4D:31:56:2B:8C:97:6E:A5:F5:B1:8E:50:FB
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/VQMhtbG3H00xViuMl26l9bGOUPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.121.0/24
194.68.230.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:8a:f2:70:d6:d5:14:d3:6c:53:32:e3:81:e9:50:dd:27:1f:
e7:8d:89:e6:f1:cd:42:be:f7:7a:04:26:2a:0d:08:4c:55:47:
7a:ce:5e:5d:2e:9c:7b:21:ba:46:30:5a:0d:c1:bf:4c:23:0c:
1c:60:79:bf:ad:72:9b:d6:80:7e:3f:7f:55:f1:59:6a:48:3b:
78:7c:b6:1d:06:33:98:72:a0:8a:ce:fb:2e:2c:a7:56:fb:a4:
2c:78:70:6e:d7:56:dd:80:31:90:aa:6c:90:64:aa:aa:6b:af:
2a:18:8c:a6:db:cb:25:8c:a7:73:d2:0d:56:dc:fb:81:3e:28:
77:99:17:a5:7e:e4:d2:09:6d:63:f1:c9:e9:ee:47:4c:fa:df:
43:db:5f:e1:b6:80:c4:15:5e:e8:5e:1e:19:80:8f:9f:9f:e5:
e8:9b:3c:a4:88:5f:4a:25:1a:d1:43:46:30:c8:60:c3:a6:74:
42:95:5d:cd:00:3c:73:7e:2f:bc:9e:42:02:32:ef:fd:ab:3b:
d7:0f:98:85:21:29:9e:ab:b4:3f:4e:43:c5:f1:b1:48:60:11:
32:31:55:6f:82:93:84:4f:13:89:18:65:5f:f6:a2:f9:16:90:
d5:23:de:e8:25:1a:ad:15:1c:23:f4:cc:d4:73:67:ae:6a:83:
60:5c:da:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:20 2024 by rpki-client on console-ams.rpki-client.org