Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/VeQoVd7aIL1YYeokOUnlZLEKWK8.roa
File: VeQoVd7aIL1YYeokOUnlZLEKWK8.roa (raw, json)
Hash identifier: bZI/LLb4a+LDyldh/kHTIIoq7EW6g1ee22MglQD7AJ0=
Subject key identifier: 55:E4:28:55:DE:DA:20:BD:58:61:EA:24:39:49:E5:64:B1:0A:58:AF
Certificate issuer: /CN=e31722d79bff4384a597cb544d9e7974490d8734
Certificate serial: 018570FBD5BB4A0FADD67ADE63B1B0867D78
Authority key identifier: E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/VeQoVd7aIL1YYeokOUnlZLEKWK8.roa
Signing time: Mon 02 Jan 2023 05:37:10 +0000
ROA not before: Mon 02 Jan 2023 05:37:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198459
IP address blocks: 91.239.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:d5:bb:4a:0f:ad:d6:7a:de:63:b1:b0:86:7d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31722d79bff4384a597cb544d9e7974490d8734
Validity
Not Before: Jan 2 05:37:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55e42855deda20bd5861ea243949e564b10a58af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:6f:62:0d:12:5f:60:f5:d2:6f:8f:37:55:
30:95:28:3d:77:63:8e:b1:35:09:45:c5:67:f4:69:
47:09:24:d0:fd:0c:b8:63:66:74:0f:d2:ec:fe:c9:
7c:90:de:8d:63:8f:82:40:7c:8c:a8:c1:24:55:c6:
50:ea:34:ff:af:e9:a8:82:a1:4f:44:e5:24:71:c5:
a4:e4:7d:ae:71:79:bb:41:3b:cb:7f:4f:f6:2c:ce:
44:eb:08:8a:c9:3d:d0:88:cb:7b:2b:3f:c8:01:5a:
4b:78:bd:8c:21:8e:f2:c2:5f:f3:59:70:55:a6:8c:
33:e8:cc:fb:b7:80:a5:c4:51:d4:15:44:0f:64:8a:
58:db:7d:82:c8:37:3f:7e:cf:0b:f1:10:70:3f:56:
b2:c3:b9:f9:a5:83:e0:6f:b8:5a:44:72:24:a1:ab:
88:8f:9c:c4:d3:79:27:cc:0f:ec:cd:fe:4b:91:81:
73:38:aa:da:e7:70:67:2d:09:bc:bc:f1:f3:ca:94:
8a:70:73:39:f4:b8:b8:c8:36:80:7d:19:7c:0c:c0:
f6:64:81:99:03:ce:19:0c:b3:75:ba:34:31:0b:4b:
9a:f3:1b:57:fc:5e:a2:1f:8b:51:5d:3c:81:b9:05:
b5:6e:a1:19:c4:cb:ee:eb:e3:7a:a2:8f:c9:ec:36:
a5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E4:28:55:DE:DA:20:BD:58:61:EA:24:39:49:E5:64:B1:0A:58:AF
X509v3 Authority Key Identifier:
keyid:E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/VeQoVd7aIL1YYeokOUnlZLEKWK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.53.0/24
Signature Algorithm: sha256WithRSAEncryption
da:48:91:c4:b3:38:23:7d:36:fa:e1:bd:8b:60:f6:69:d8:86:
87:7b:79:30:21:fa:68:b6:94:6c:73:6c:84:67:90:2e:ae:ed:
c6:c3:56:e2:3a:3d:62:21:e0:92:4d:73:d7:bf:3e:0e:26:11:
dd:28:1d:5d:39:ff:9b:84:bc:8c:36:60:44:e0:06:54:7e:fc:
4c:7c:22:87:81:63:84:0a:54:cc:7c:b2:3d:1a:b4:4b:36:f8:
e7:3a:84:93:79:59:ac:c5:39:db:19:57:81:91:77:6a:a1:95:
68:97:bb:24:bb:a6:8a:be:41:49:b2:ed:43:c6:26:56:25:1c:
a5:63:ce:ad:db:eb:dc:dd:cf:4a:22:6d:7e:ed:2c:c5:bd:cf:
f6:f7:f4:85:e6:9c:48:e6:49:a8:a4:e6:aa:b3:ce:f6:d6:e4:
a1:2a:b7:50:86:88:2d:28:d4:c7:bc:36:69:5f:1f:c7:47:8d:
13:11:36:48:ec:ad:1e:c5:b6:74:25:60:f2:69:27:90:c2:c7:
3b:e8:f6:e7:ea:85:2b:8e:98:c1:f5:1d:8a:4c:39:64:17:25:
4b:88:e6:d2:b2:d6:be:74:9b:09:c5:d1:7c:f7:db:a3:88:3b:
e0:69:b9:ed:94:4d:e8:ba:cd:dd:19:f1:1f:ec:5e:94:9a:79:
e4:69:67:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:53:23 2024 by rpki-client on console-fra.rpki-client.org