Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/VOAgyYMlvyUeH91AqkSXYoqnysY.roa
File: VOAgyYMlvyUeH91AqkSXYoqnysY.roa (raw, json)
Hash identifier: Ylv9BOTN1aJ+UrQBzvZYgLtDu6/mcD5a+GHMAh1Gxk0=
Subject key identifier: 54:E0:20:C9:83:25:BF:25:1E:1F:DD:40:AA:44:97:62:8A:A7:CA:C6
Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial: 01856F94E0E212758214F3773E8EB6408D42
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/VOAgyYMlvyUeH91AqkSXYoqnysY.roa
Signing time: Sun 01 Jan 2023 23:05:05 +0000
ROA not before: Sun 01 Jan 2023 23:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59796
IP address blocks: 193.84.78.0/24 maxlen: 24
193.84.85.0/24 maxlen: 24
193.84.88.0/24 maxlen: 24
193.84.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:e0:e2:12:75:82:14:f3:77:3e:8e:b6:40:8d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Validity
Not Before: Jan 1 23:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54e020c98325bf251e1fdd40aa4497628aa7cac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cc:db:54:ba:0d:a0:ec:35:e5:35:81:e1:a9:
cf:e9:83:c3:d0:18:a4:7e:4c:87:a0:a4:67:0c:01:
a2:88:37:25:a4:4f:13:e5:c1:c6:2b:4c:19:2c:03:
2f:f6:4e:fa:b3:4d:b3:e4:30:d8:88:fc:f7:f6:20:
12:d0:4a:77:3b:5e:de:a1:30:8c:4f:23:b4:8e:3d:
3a:7d:59:65:78:e0:15:b3:68:f4:b8:ce:fb:0d:58:
60:c4:d1:7d:91:5a:49:03:d5:ea:f0:a2:46:11:8e:
5b:a8:8f:43:28:d9:a0:6a:01:98:1f:c6:49:4a:fd:
0c:80:5d:db:95:25:10:9e:ab:47:6f:f1:fa:cc:55:
9c:55:12:ac:dc:23:2c:72:36:db:32:8a:24:fe:9d:
06:69:05:1a:44:6a:55:96:c7:ac:a3:ad:b2:a2:2e:
75:61:ef:f6:d5:b7:ef:5c:03:36:5c:bb:34:e2:b2:
8f:36:71:ca:82:57:e7:63:58:c4:85:cf:8e:82:58:
6a:f1:94:ed:75:2b:a7:73:eb:b2:05:3c:eb:85:62:
ee:11:3f:8b:30:f2:be:9b:ad:ac:52:fd:3e:fc:00:
a4:0c:2c:d3:b5:c8:33:15:f0:6b:b9:20:0d:0c:8b:
26:93:5b:e2:af:f2:97:29:31:ee:93:b5:72:b2:d1:
23:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E0:20:C9:83:25:BF:25:1E:1F:DD:40:AA:44:97:62:8A:A7:CA:C6
X509v3 Authority Key Identifier:
keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/VOAgyYMlvyUeH91AqkSXYoqnysY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.78.0/24
193.84.85.0/24
193.84.88.0/24
193.84.90.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:c0:51:5b:ce:bb:07:c2:fe:65:fb:35:17:e7:15:57:58:22:
a4:98:61:23:5d:7b:7c:09:62:d6:9a:46:dd:83:92:7d:79:a5:
2d:56:bd:2c:f4:20:ee:7c:77:91:c0:c8:54:4a:5e:f6:e8:0b:
c4:1d:02:b4:df:82:78:53:ed:07:c0:33:d6:92:d6:d3:43:53:
22:84:91:91:98:2f:bd:7a:7b:84:f7:a4:38:69:e2:8d:02:67:
8d:48:07:48:84:78:b4:c0:8c:0c:2e:bb:a9:cb:95:34:a4:eb:
0c:0a:95:c6:74:6b:fb:aa:89:5b:f8:21:5a:5a:da:7c:6e:9a:
9d:c5:e9:49:7b:0d:eb:e5:a7:20:7a:82:33:4e:73:79:01:c2:
6e:5d:68:a8:50:55:62:c2:0a:d5:f6:18:93:63:31:fe:77:4e:
0d:1c:63:09:06:fc:03:fe:fe:74:5b:e6:64:07:83:99:18:18:
b8:5a:88:01:b5:27:65:38:a0:9d:13:45:5a:a4:1a:2c:a9:b7:
a1:29:c5:79:74:86:87:de:1a:42:fc:15:48:7d:91:3d:a4:59:
1d:e3:8b:02:96:36:87:36:a7:e6:a3:12:ea:f7:44:e7:6b:3e:
96:31:06:8a:26:41:10:ba:92:21:10:4e:8c:e0:4a:db:ed:f2:
2e:57:c5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:45 2024 by rpki-client on console-fra.rpki-client.org