Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/VqwlRfznBhbhp25ItfBW-vb9Q8Q.roa
File: VqwlRfznBhbhp25ItfBW-vb9Q8Q.roa (raw, json)
Hash identifier: 5iPqc7kRGS1pC06M8PjSoaD4V2F+9N/+wPyYak6D2O0=
Subject key identifier: 56:AC:25:45:FC:E7:06:16:E1:A7:6E:48:B5:F0:56:FA:F6:FD:43:C4
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018B4C179619C072FBCDB9F80424AF05CCC4
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/VqwlRfznBhbhp25ItfBW-vb9Q8Q.roa
Signing time: Fri 20 Oct 2023 07:58:15 +0000
ROA not before: Fri 20 Oct 2023 07:58:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15723
IP address blocks: 164.215.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4c:17:96:19:c0:72:fb:cd:b9:f8:04:24:af:05:cc:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Oct 20 07:58:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56ac2545fce70616e1a76e48b5f056faf6fd43c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:51:f1:e9:44:6c:3b:4a:9b:b0:ee:73:1f:23:
ad:81:3c:73:9b:8a:f6:30:66:a9:9a:c5:a1:21:12:
16:2e:79:ef:4f:b3:39:94:45:77:fe:d2:f7:10:7b:
ec:bf:b5:be:23:d6:09:05:a5:9c:3a:4a:a7:93:33:
5f:b5:d7:98:bb:30:3b:f1:e2:e9:5a:8d:69:55:4e:
1b:47:c0:76:b9:0d:1e:a7:bc:6e:40:15:cc:23:fa:
92:a9:c6:42:d1:7d:e6:67:c7:06:f2:49:cd:64:48:
63:dc:47:ed:c5:27:e8:69:d8:47:f1:38:1a:a8:44:
0d:ad:11:50:f4:4e:02:4f:cc:70:0f:18:55:6f:89:
c2:22:aa:e4:72:98:94:67:5b:08:ad:92:0d:58:dd:
bb:49:2e:63:cd:df:21:b2:b0:01:4a:60:fe:b1:22:
fc:0b:81:5b:64:c1:c9:0e:98:67:4c:6a:24:42:98:
8d:f7:38:57:d2:8d:00:c8:41:34:d4:28:28:e4:b8:
cd:be:c0:19:02:51:05:17:88:02:5b:78:cd:42:b1:
a7:56:4e:b7:57:9f:44:2a:46:25:19:26:c9:fd:d6:
3d:d2:bd:9e:24:6e:b1:ba:12:80:87:05:ff:76:a8:
9f:ad:56:43:97:3e:29:d3:76:6f:77:87:dd:69:68:
84:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AC:25:45:FC:E7:06:16:E1:A7:6E:48:B5:F0:56:FA:F6:FD:43:C4
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/VqwlRfznBhbhp25ItfBW-vb9Q8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.215.97.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:bb:1b:1e:49:4e:b9:7e:fd:7a:cf:6f:7a:22:8f:df:b4:30:
f9:ba:91:69:80:b2:91:7d:db:c3:6d:ce:60:41:3b:b3:93:5d:
bd:be:a0:fd:92:31:a5:88:e9:d2:c2:5e:0f:39:87:e3:f4:6d:
a7:f3:96:fd:6b:38:fe:79:41:08:30:a8:84:98:02:99:1e:20:
eb:e2:90:bf:4b:6a:72:06:37:09:5c:6c:ab:bd:fa:8d:84:49:
b4:15:25:b2:67:51:c2:78:8f:63:4f:da:c4:31:be:89:53:74:
aa:7f:10:c7:a5:c6:2a:d5:5d:1c:49:86:6a:0c:c2:9f:05:67:
06:f1:e2:7b:90:ca:b7:5d:e5:5c:55:96:56:c2:b6:da:d1:af:
e9:47:a2:82:1a:20:36:57:57:4e:16:21:72:71:7e:99:0d:5a:
14:3b:4c:c1:c6:62:6c:9e:47:8b:3e:47:d6:34:2d:b7:27:6b:
a0:94:b4:ae:dd:58:62:af:46:58:e8:04:c8:72:d2:d5:f8:af:
c3:99:38:01:25:07:e6:a8:b7:43:f0:21:37:d3:d0:7f:c2:14:
0c:26:b7:9b:09:e8:da:69:f9:b4:26:a1:0f:85:e3:97:ab:c0:
db:9d:3f:a8:dc:76:c1:56:d5:be:1a:3f:f6:35:31:c7:69:19:
d2:46:ec:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 4 07:06:06 2023 by rpki-client on console-ams.rpki-client.org