Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/VlC5SeCoyM4hr6Uc02mzqEVigrw.roa
File: VlC5SeCoyM4hr6Uc02mzqEVigrw.roa (raw, json)
Hash identifier: jhNzaqe2NDsVn8aeraTi8lngS76ZaxCUPCnnArxabx0=
Subject key identifier: 56:50:B9:49:E0:A8:C8:CE:21:AF:A5:1C:D3:69:B3:A8:45:62:82:BC
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 018AAE50DFE1F1B62166CB82B6EB87022781
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/VlC5SeCoyM4hr6Uc02mzqEVigrw.roa
Signing time: Tue 19 Sep 2023 16:40:50 +0000
ROA not before: Tue 19 Sep 2023 16:40:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139482
IP address blocks: 217.25.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ae:50:df:e1:f1:b6:21:66:cb:82:b6:eb:87:02:27:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Sep 19 16:40:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5650b949e0a8c8ce21afa51cd369b3a8456282bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f2:4a:82:f5:9e:df:88:69:f6:cf:43:a9:62:
ad:af:c2:b7:32:68:f8:b8:53:f4:a2:f3:ab:e0:ef:
00:67:c8:f2:5f:53:e5:12:30:60:26:57:d3:f6:ed:
6e:0a:f5:33:3a:07:6f:f9:c7:8c:36:e2:aa:dc:9b:
7b:0a:fc:a7:7f:fc:a7:01:72:6b:ee:70:ed:44:21:
9b:48:a3:26:c5:07:8e:12:3f:69:60:a2:3c:ce:fe:
79:b0:9e:a2:94:c9:a9:76:7a:1e:5d:cf:5c:70:cd:
d6:86:63:81:9a:20:94:30:ab:c2:a8:06:bd:02:df:
2e:1c:f8:46:fa:39:2b:a8:c9:c4:09:cb:c6:eb:57:
01:8b:37:a6:27:24:25:33:e8:27:0a:e1:f9:3e:a1:
82:60:45:bd:bd:2f:23:f3:69:66:80:a1:62:26:53:
f1:fb:b8:58:4a:eb:24:e1:24:e7:8b:44:97:34:74:
77:98:1f:f2:70:3f:9d:8b:be:bf:e7:be:46:63:0f:
3e:1e:b8:d8:d1:72:d1:bc:69:3c:d8:c8:5e:d2:9b:
65:b2:86:40:c7:10:1f:84:43:22:86:de:60:5b:dd:
e0:c3:cf:b2:82:d0:51:cd:3e:00:50:f7:d9:4c:4d:
56:c2:41:9b:b5:54:58:3c:a5:77:ea:be:1c:20:50:
2b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:50:B9:49:E0:A8:C8:CE:21:AF:A5:1C:D3:69:B3:A8:45:62:82:BC
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/VlC5SeCoyM4hr6Uc02mzqEVigrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.25.12.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:3d:d1:92:63:f4:09:6e:61:c0:62:32:f5:9e:e4:5f:85:90:
9b:ef:50:9b:87:d6:e9:33:6e:0b:f4:8d:42:65:e8:5c:db:3f:
0e:5b:3a:49:29:97:bc:6a:c0:db:3f:f0:69:71:5a:d7:ba:9d:
a6:8c:02:e2:50:39:b7:0c:ca:a7:eb:0a:76:37:33:bf:01:fd:
02:45:dd:a4:c2:16:64:8b:a5:2a:26:6a:7a:f1:a2:47:11:8b:
a8:3a:ba:42:aa:50:fa:8f:7e:bf:90:64:08:d6:d9:2f:27:bd:
0e:19:63:b2:7d:cd:97:13:fb:7e:75:70:7c:50:10:df:dc:1b:
7f:26:eb:be:79:06:70:a9:cc:b3:af:85:66:27:34:c3:50:5c:
b0:53:97:2d:32:f0:f4:cd:02:23:49:78:15:f8:10:c9:a9:d8:
04:61:cb:45:b9:72:99:9a:17:b5:0c:87:7d:cb:3d:d7:52:c3:
b1:85:87:4f:ff:7d:9b:59:1c:75:ba:f2:01:9e:58:01:7d:60:
82:aa:c6:16:47:24:c6:29:5d:8c:40:9e:6e:35:d5:30:3f:ab:
a7:08:49:88:fa:c1:ac:15:86:12:ff:56:b2:eb:92:ab:fe:a0:
6f:c9:9f:c9:5c:17:68:f7:b5:86:3c:94:a7:2f:20:68:9a:e3:
5d:bf:27:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 18 14:44:25 2023 by rpki-client on console-fra.rpki-client.org