Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/VBUn-DFuaZaNCvw0R1VsO4hsRaE.roa
File: VBUn-DFuaZaNCvw0R1VsO4hsRaE.roa (raw, json)
Hash identifier: Xen/Pe6A95BBo5BUBaduMUT/OMBQYISog8b9zGEXlQY=
Subject key identifier: 54:15:27:F8:31:6E:69:96:8D:0A:FC:34:47:55:6C:3B:88:6C:45:A1
Certificate issuer: /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial: 018FE213023F1B76F5DC4AD30207659321F5
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/VBUn-DFuaZaNCvw0R1VsO4hsRaE.roa
Signing time: Tue 04 Jun 2024 07:07:27 +0000
ROA not before: Tue 04 Jun 2024 07:07:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 89.49.0.0/21 maxlen: 24
89.49.8.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jul 2024 07:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e2:13:02:3f:1b:76:f5:dc:4a:d3:02:07:65:93:21:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Validity
Not Before: Jun 4 07:07:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=541527f8316e69968d0afc3447556c3b886c45a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:6c:eb:1a:ef:c6:eb:34:64:12:b6:60:e1:
2c:91:e7:20:57:12:2b:0a:c7:6a:e0:a9:d7:51:5d:
22:34:2a:43:18:d6:7d:38:eb:e1:c3:36:05:6f:30:
a4:8d:62:a8:43:8d:53:de:81:cc:49:fb:ae:9a:e9:
3a:7f:67:78:57:e6:93:e5:0e:5e:2a:11:02:aa:72:
2d:b4:20:a6:27:9c:9e:34:e9:81:cf:e8:e4:c9:06:
32:be:ed:0a:83:af:89:3f:8d:10:9e:d5:da:b2:4c:
11:97:10:49:7d:b2:4b:cb:32:40:c9:23:e7:56:f2:
d1:9c:27:52:19:7e:a9:0b:67:db:31:a3:b8:58:cd:
40:ef:1f:ff:f2:9f:84:a7:21:5f:62:ad:9f:ae:1d:
40:bb:c7:41:e1:f8:16:8b:80:34:13:51:fd:39:12:
7f:8f:ff:c0:49:d1:c2:2d:c7:c6:52:55:5e:4b:47:
96:44:50:37:bd:86:36:ad:1b:7b:00:ac:7e:48:cf:
72:36:08:03:24:1a:26:2e:23:f7:60:2e:97:b4:7f:
30:40:0a:59:7c:79:8a:ca:2b:5d:e7:8f:c6:2f:f1:
b3:93:b9:9e:23:0c:cf:98:af:74:79:f8:8d:0c:ad:
64:5d:4a:1c:10:e5:54:2d:d3:6f:db:ca:ce:3a:93:
82:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:15:27:F8:31:6E:69:96:8D:0A:FC:34:47:55:6C:3B:88:6C:45:A1
X509v3 Authority Key Identifier:
keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/VBUn-DFuaZaNCvw0R1VsO4hsRaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.49.0.0/20
Signature Algorithm: sha256WithRSAEncryption
9f:40:27:70:43:55:e1:5f:5b:97:18:c8:5d:5a:96:7d:69:81:
99:7d:13:f7:b6:a3:91:ad:dc:b7:e6:70:31:76:7c:04:b8:de:
22:69:70:ad:5b:6b:f0:24:ca:18:5a:31:33:ea:eb:6a:0f:2c:
ba:d8:8d:99:3d:05:cd:79:1c:90:25:92:b7:80:df:9f:59:38:
b4:90:9e:2f:53:14:2b:f4:11:fe:63:a0:e8:3e:1e:54:81:f8:
23:eb:ae:b1:39:96:55:62:57:68:e0:d7:14:8c:5c:fe:88:7c:
b5:66:22:59:28:be:13:9c:a7:e7:b6:c3:61:4b:d4:a0:a2:4a:
92:eb:76:50:ba:bf:7a:49:be:63:98:dc:d2:c0:0f:a5:95:9b:
f8:36:2b:a0:7b:bf:55:0c:5a:2a:22:81:f2:46:8f:60:b2:6d:
48:f5:7e:a0:d4:62:e0:08:91:d4:44:29:bd:74:99:9d:ae:3d:
b2:db:51:ea:44:5a:a7:88:54:83:65:95:7a:88:48:3c:81:03:
df:32:1f:7c:70:c2:23:62:d3:7f:f7:6a:cb:aa:8a:94:35:6a:
8c:60:3f:18:86:da:8d:68:35:c9:c0:7d:c7:36:7d:74:5f:0e:
d5:e5:84:14:2c:2e:e8:fc:1e:be:38:35:73:e2:e2:1d:98:fc:
3b:d3:fd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 09:58:21 2024 by rpki-client on console-ams.rpki-client.org