Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/vdaYoELamVq7MqyUwaeKzbobE7U.roa
File: vdaYoELamVq7MqyUwaeKzbobE7U.roa (raw, json)
Hash identifier: tBoCEmGvFBL/dZF7aCpc8i7EREhz31pVJlGu5bVqUSY=
Subject key identifier: BD:D6:98:A0:42:DA:99:5A:BB:32:AC:94:C1:A7:8A:CD:BA:1B:13:B5
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018D2D6E2DA40CAB5A662DC469A422DE882A
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/vdaYoELamVq7MqyUwaeKzbobE7U.roa
Signing time: Sun 21 Jan 2024 19:10:11 +0000
ROA not before: Sun 21 Jan 2024 19:10:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212667
IP address blocks: 45.91.160.0/24 maxlen: 24
87.247.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 18:23:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:2d:6e:2d:a4:0c:ab:5a:66:2d:c4:69:a4:22:de:88:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 21 19:10:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdd698a042da995abb32ac94c1a78acdba1b13b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:e6:8a:e9:22:b7:d5:46:50:3b:d1:4b:50:
75:5c:c2:8f:26:5e:69:25:55:c0:4f:6e:a9:07:9d:
e2:b2:2a:66:f7:06:73:35:37:3a:bd:dc:a8:5f:3c:
b7:25:ba:49:41:0c:b9:97:f1:b6:6b:8a:f4:fb:67:
41:29:b2:e8:d4:ae:6a:a8:2d:d5:bc:bf:f2:b0:61:
3a:a1:1c:e4:67:7c:06:9f:05:70:5c:ac:39:2b:3e:
dc:dd:59:95:c0:95:a6:38:1a:97:e5:a1:e4:34:9a:
8a:d1:39:a6:03:29:90:01:67:74:6b:49:74:c9:60:
bc:ba:35:5b:08:32:2e:08:6d:2f:4e:67:e7:15:03:
d5:f6:51:c2:cf:02:27:80:e7:a0:10:ac:b2:73:75:
35:c8:0f:8a:d1:6c:ff:5c:75:e6:43:c7:35:84:d6:
61:fd:35:21:d6:eb:76:ac:b1:1e:91:58:01:2c:c4:
b7:83:a2:08:fc:f6:36:aa:c1:c3:7b:54:12:93:32:
ed:3a:67:51:0d:35:6e:45:99:0e:d1:70:d3:68:c1:
79:f2:7a:8f:c6:67:bf:d2:8f:84:91:f3:3b:b5:a8:
69:f3:91:12:c5:11:f6:2f:a8:d1:05:9a:d2:c9:12:
5e:2e:a2:77:48:e3:50:ce:4d:a0:f3:25:3c:4a:39:
71:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D6:98:A0:42:DA:99:5A:BB:32:AC:94:C1:A7:8A:CD:BA:1B:13:B5
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/vdaYoELamVq7MqyUwaeKzbobE7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.160.0/24
87.247.140.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:41:62:31:0e:84:37:6a:11:82:49:09:58:dd:0e:62:09:a9:
0d:d0:0b:03:22:16:f3:c6:8b:27:c6:d3:43:30:ae:41:ff:c4:
eb:7a:47:95:e1:79:0e:c0:99:e5:a1:2c:97:82:59:c0:75:47:
29:67:cd:96:9c:11:ed:b0:59:48:50:2e:5a:a0:6f:37:6a:9a:
b0:8d:31:26:0f:ea:ae:cb:bf:9b:11:97:63:cb:ff:96:5b:83:
c3:3a:aa:8e:a4:5d:26:81:a4:8f:4f:0d:d4:8c:f1:82:b8:7b:
d6:94:3b:83:74:b4:c8:d9:ec:9e:0b:ce:1a:82:63:82:63:83:
cd:9a:04:3c:95:1b:9f:30:1d:3d:f9:28:cd:1a:67:92:28:8a:
f2:4d:e7:f1:a5:3a:14:c8:45:4f:1b:5d:e0:02:f2:ee:dc:1b:
2e:a8:e9:34:25:a1:ee:1c:bf:00:38:56:75:81:aa:0f:e6:68:
43:b9:df:fa:05:58:97:7c:09:a4:0b:81:4f:69:09:37:96:94:
54:ba:93:50:21:fa:5c:03:7f:74:e8:e3:4e:a1:4f:26:3c:36:
f3:dc:35:60:5e:02:8b:fa:72:70:2a:d6:0b:fb:fe:ae:5d:4e:
02:9a:23:24:cb:b0:32:3b:41:09:f7:54:f6:4b:31:59:b1:09:
d6:50:8f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:39 2024 by rpki-client on console-ams.rpki-client.org