Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/VDPKuCltRutbRnr9E3tcfp-VTUY.roa
File: VDPKuCltRutbRnr9E3tcfp-VTUY.roa (raw, json)
Hash identifier: R9jZYicF5B8TCZMutLio+EtoUF1XsyITWuZ8O//xKR0=
Subject key identifier: 54:33:CA:B8:29:6D:46:EB:5B:46:7A:FD:13:7B:5C:7E:9F:95:4D:46
Certificate issuer: /CN=62e93f08a45d2b7c74bf5de01b252201602aeee8
Certificate serial: 01856C65E703A4091E35C3BCE0F82A5F2B62
Authority key identifier: 62:E9:3F:08:A4:5D:2B:7C:74:BF:5D:E0:1B:25:22:01:60:2A:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/VDPKuCltRutbRnr9E3tcfp-VTUY.roa
Signing time: Sun 01 Jan 2023 08:14:55 +0000
ROA not before: Sun 01 Jan 2023 08:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211583
IP address blocks: 188.94.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:e7:03:a4:09:1e:35:c3:bc:e0:f8:2a:5f:2b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e93f08a45d2b7c74bf5de01b252201602aeee8
Validity
Not Before: Jan 1 08:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5433cab8296d46eb5b467afd137b5c7e9f954d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c0:db:a3:85:14:fa:6b:b7:3d:f3:7b:a0:55:
9e:27:5f:83:64:d0:14:bb:b1:6a:00:c8:bd:8d:95:
41:e0:50:a7:e9:3e:b9:99:47:78:3b:e0:db:04:ce:
ad:18:b2:7d:57:36:c4:2a:be:fe:41:03:b9:5b:69:
22:3d:f5:fe:be:13:5e:2c:1a:0c:6c:f1:38:82:e9:
8b:46:1a:3e:0a:97:c6:fe:b1:80:a7:60:41:82:93:
31:a5:30:fe:a8:07:f2:8a:5e:f8:3d:85:66:43:d4:
3c:49:87:4c:3f:01:b7:7a:70:e8:cb:4e:4a:25:4f:
dd:18:df:38:d5:44:8e:8a:c7:ab:44:67:b3:56:21:
86:4e:5c:bc:be:f0:17:42:c3:d1:5e:2d:21:4f:c0:
3e:2a:80:8a:32:0e:73:52:01:cd:80:5e:89:29:64:
1b:cd:df:62:4c:b6:8b:97:34:e1:b3:67:c2:f0:40:
47:e1:5c:c3:0c:83:03:90:79:7a:e6:c7:97:5b:93:
65:1e:14:b0:2f:a1:42:cd:69:11:94:75:41:d1:19:
aa:97:2f:43:3c:dd:ad:99:48:67:c1:ff:1f:55:a3:
46:e7:e1:36:13:13:16:f7:1a:e3:fc:cc:e3:44:ad:
57:28:e4:78:f1:5a:3d:a9:8d:66:12:c3:9d:74:b2:
48:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:33:CA:B8:29:6D:46:EB:5B:46:7A:FD:13:7B:5C:7E:9F:95:4D:46
X509v3 Authority Key Identifier:
keyid:62:E9:3F:08:A4:5D:2B:7C:74:BF:5D:E0:1B:25:22:01:60:2A:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/VDPKuCltRutbRnr9E3tcfp-VTUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.94.188.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:9f:96:e4:36:51:47:63:3e:2a:80:6b:50:b5:9e:22:7e:e4:
1d:c3:88:8b:8c:23:88:83:d0:4c:52:5b:89:41:ac:e4:27:3c:
8e:71:12:10:40:84:4f:f0:fb:67:76:9e:d9:4a:17:a8:3c:cc:
72:ab:02:c4:24:40:33:99:97:f1:d5:dc:f3:70:30:3c:d4:90:
51:02:8b:69:a3:af:ab:04:64:3d:9e:c4:10:69:8b:dc:4d:71:
11:59:fa:6d:97:d1:ef:d0:d7:af:fb:14:82:a5:e0:03:55:44:
58:09:16:dd:8c:21:51:1e:31:63:be:b1:5b:25:fe:ad:07:00:
ff:26:df:81:5d:cf:81:aa:c1:12:79:62:22:8b:02:b9:9c:c3:
34:14:bc:cd:89:a1:77:e0:12:c2:f6:85:95:36:5e:be:72:db:
d8:da:05:7b:eb:61:1e:5d:58:75:d7:ef:56:cc:36:fc:1b:cf:
b0:87:18:02:11:80:a8:35:a6:18:e5:70:35:b9:50:96:3f:13:
9d:96:d8:1d:ec:ea:f5:c5:b4:83:6f:14:6d:52:36:8c:7f:e1:
01:bf:8c:45:ff:38:a6:3a:5b:18:90:81:1e:48:bc:48:81:12:
49:e4:9e:10:05:5a:79:59:4a:82:a2:5e:93:f7:41:66:df:7c:
a0:ba:9c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:30:55 2024 by rpki-client on console.sobornost.net