Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/vjij0NnS4BQ1CyWipli2rNpBbpQ.roa
File: vjij0NnS4BQ1CyWipli2rNpBbpQ.roa (raw, json)
Hash identifier: Wh5tzqbIHA3aH2asTmQLvWNYsw/SbRhtLDoKyBoVl1w=
Subject key identifier: BE:38:A3:D0:D9:D2:E0:14:35:0B:25:A2:A6:58:B6:AC:DA:41:6E:94
Certificate issuer: /CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Certificate serial: 018CC94E63875BB77EAAE7CCDD7DDBCE0AA7
Authority key identifier: B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/vjij0NnS4BQ1CyWipli2rNpBbpQ.roa
Signing time: Tue 02 Jan 2024 08:33:26 +0000
ROA not before: Tue 02 Jan 2024 08:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 185.91.127.0/24 maxlen: 24
2a12:de40::/29 maxlen: 29
2a12:de41::/32 maxlen: 32
2a12:de44::/32 maxlen: 32
2a12:de40::/32 maxlen: 32
2a12:de45::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 04 Jan 2024 16:51:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:63:87:5b:b7:7e:aa:e7:cc:dd:7d:db:ce:0a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Validity
Not Before: Jan 2 08:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be38a3d0d9d2e014350b25a2a658b6acda416e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a5:b5:42:34:9f:94:63:7a:82:d9:54:3f:a4:
3b:58:54:d2:c1:00:4c:f8:4f:0a:94:d7:64:45:08:
00:c7:73:99:60:3d:10:65:64:21:f8:19:6d:19:fd:
1a:2a:6f:94:da:a4:bf:30:8d:28:5a:bc:a1:da:90:
25:d1:61:ab:34:a3:f6:3c:63:26:a3:d8:11:d0:32:
54:4f:bd:78:ce:78:88:35:9c:97:68:00:3b:2e:bd:
77:59:9f:b3:61:4a:66:89:df:d9:41:ea:b3:95:21:
67:1d:e2:7f:15:18:87:e3:d1:91:aa:fc:48:cc:f4:
2f:df:fd:9a:2d:ce:f1:1e:a8:bf:50:a2:18:9b:4b:
e1:bc:ae:e5:e1:81:ee:f5:1f:88:35:64:c6:69:25:
1f:6f:56:55:76:09:c4:43:b6:2d:1b:18:22:71:de:
47:bf:62:77:3c:5f:c7:2f:6a:7d:8d:8c:3e:dc:5c:
68:76:bf:66:36:e1:43:3e:61:25:e6:89:b9:53:cd:
51:3b:b8:22:ac:84:d9:4f:12:5f:38:8e:39:97:f0:
68:ad:c5:0b:94:44:eb:02:7a:f4:f1:c3:6c:3c:7e:
65:9d:f8:18:c0:ff:6a:df:f0:95:af:48:e5:12:c0:
bb:fc:17:e9:9e:46:d3:ed:c3:13:10:9a:c0:c6:0e:
fe:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:38:A3:D0:D9:D2:E0:14:35:0B:25:A2:A6:58:B6:AC:DA:41:6E:94
X509v3 Authority Key Identifier:
keyid:B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/vjij0NnS4BQ1CyWipli2rNpBbpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.127.0/24
IPv6:
2a12:de40::/29
Signature Algorithm: sha256WithRSAEncryption
6a:c7:c9:20:9b:a5:6e:54:b6:f2:2d:df:bb:f0:ee:3c:d3:90:
98:c3:ae:3c:f6:67:bf:6a:b5:9b:ff:0a:0d:2c:fd:f9:9a:f4:
64:78:ea:d3:b9:6a:00:05:8d:bd:4a:3d:a0:77:ca:7f:20:0a:
f0:cf:4a:1a:13:09:2a:6c:c1:fd:40:bd:ac:ad:44:f6:af:c9:
20:be:a3:6c:8d:e6:27:70:23:a8:03:ae:53:df:19:47:d3:29:
7b:d7:eb:5b:37:51:85:c6:5d:58:d0:9b:4b:af:58:b6:b5:b0:
67:e5:0e:15:f9:6f:f4:c2:c3:d3:58:90:c2:fb:91:4b:68:a8:
40:64:70:9d:b6:43:57:93:3e:33:ee:4f:66:c8:be:62:65:5c:
a9:7a:1f:b7:a2:28:72:53:17:10:af:66:1c:e0:3b:48:f1:f6:
2a:f7:60:b6:ba:fb:ec:8f:02:56:1e:e7:12:a9:0d:97:e9:26:
06:82:33:a9:21:13:1a:48:68:fe:de:61:f7:f4:36:5c:31:78:
62:9a:14:b2:82:d7:23:f6:88:54:ae:e2:b7:f8:ed:46:20:2f:
23:68:e8:b7:78:5c:76:e7:3b:88:eb:ce:e9:ae:c9:a3:c3:93:
81:27:31:48:2a:f4:34:c2:f6:45:77:5d:47:c7:92:6c:45:80:
68:18:ed:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:39 2024 by rpki-client on console-fra.rpki-client.org