Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/VAvSNMrofazAVGII_90D2XNk36Q.roa
File: VAvSNMrofazAVGII_90D2XNk36Q.roa (raw, json)
Hash identifier: 8I0xEafAYXeVv7t3SeotkX/ri5lO8MSyYM0ZIK7I/oQ=
Subject key identifier: 54:0B:D2:34:CA:E8:7D:AC:C0:54:62:08:FF:DD:03:D9:73:64:DF:A4
Certificate issuer: /CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Certificate serial: 0185727114BAA2DC1FBCE8A84F8186536785
Authority key identifier: B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/VAvSNMrofazAVGII_90D2XNk36Q.roa
Signing time: Mon 02 Jan 2023 12:24:51 +0000
ROA not before: Mon 02 Jan 2023 12:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50873
IP address blocks: 2001:678:580::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:14:ba:a2:dc:1f:bc:e8:a8:4f:81:86:53:67:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Validity
Not Before: Jan 2 12:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=540bd234cae87dacc0546208ffdd03d97364dfa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3b:92:f9:da:5c:cf:a9:77:7e:04:80:08:db:
9d:fb:9d:d2:21:6f:6f:d7:96:2c:5c:74:ea:61:d2:
c9:64:9a:00:f5:4e:34:4e:05:02:70:5f:c8:5a:bf:
54:a3:af:12:ec:7d:e8:da:f3:e5:ef:e9:fc:cc:af:
a0:ad:5e:9b:8b:71:83:87:1f:5b:c1:fa:6a:8e:07:
5f:b0:7c:4a:55:22:b1:59:52:22:ef:d9:85:ea:d5:
62:fe:78:88:02:33:06:e9:37:9e:bd:22:8d:a6:97:
26:f0:cd:e9:fa:7a:14:f9:2b:a3:96:6e:45:e1:be:
a7:47:78:4f:c4:9b:7a:00:ad:6e:e5:92:5c:7d:f2:
28:37:23:f6:53:40:32:57:e2:d5:87:80:3b:00:56:
89:bd:2d:61:a7:21:c4:cd:cc:c7:82:59:73:cc:c0:
76:ec:a5:30:5e:a8:e4:81:c2:c2:d6:35:00:96:27:
65:d5:03:60:d0:b6:e7:58:ce:be:f3:ff:7c:3f:d9:
ae:d5:52:20:30:a8:18:5b:89:f9:b7:dc:82:ee:d6:
ce:c0:a6:96:97:4d:7a:9e:c5:dc:a4:f9:36:b3:5d:
3d:dd:4e:37:fd:36:45:56:4e:6f:a8:86:c5:3f:5d:
c3:ff:3f:83:3b:47:5a:96:e0:38:9a:84:06:37:c4:
9d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0B:D2:34:CA:E8:7D:AC:C0:54:62:08:FF:DD:03:D9:73:64:DF:A4
X509v3 Authority Key Identifier:
keyid:B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/VAvSNMrofazAVGII_90D2XNk36Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:580::/48
Signature Algorithm: sha256WithRSAEncryption
06:64:66:89:b2:74:bb:5c:23:13:4a:24:c0:06:d2:55:3e:f7:
0b:6d:8e:ce:47:f8:a6:26:9f:0e:e9:d0:3f:47:90:9e:fc:ef:
a5:4e:3a:b9:4a:e4:8b:29:f5:91:0b:02:1a:9c:f8:c3:5d:7f:
b5:02:6d:77:07:91:e8:cd:3b:e4:46:c9:eb:f6:c8:fa:49:31:
c4:7c:eb:c0:c4:e6:a3:0c:5a:1d:a8:7b:d9:0e:e0:80:58:e8:
90:c4:6c:4a:2b:c8:33:7f:02:b2:cf:af:c1:14:5c:cb:3e:63:
82:5d:83:b8:6b:b2:2c:5d:97:2d:b9:07:f5:20:5a:78:50:84:
dd:5a:4d:c4:aa:98:2e:72:bf:77:9f:02:76:3f:4c:99:82:e8:
80:a7:b6:e9:90:26:c5:22:f7:3b:29:b2:29:a4:92:1e:ab:dc:
05:10:8f:ee:2c:bb:93:c1:c2:e7:1b:2a:f3:a8:53:cc:1c:7e:
ba:a5:f3:f6:63:6b:76:df:27:bd:82:96:df:c8:52:a7:77:8c:
b8:ae:01:51:90:93:d3:d1:fa:3d:ba:ca:31:98:ea:36:58:15:
75:21:c1:4b:b7:d0:03:f2:af:62:83:8b:1a:f1:88:a5:5b:18:
5b:f1:8c:68:a1:66:19:6d:d6:b4:e5:03:1a:75:1b:2c:f3:05:
ee:56:c5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:20 2024 by rpki-client on console-ams.rpki-client.org