Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/VPl9niHZ8o3-Kp8HjHAlYvgQD3Y.roa
File: VPl9niHZ8o3-Kp8HjHAlYvgQD3Y.roa (raw, json)
Hash identifier: Bk9ZjB1Ek295QodvZjCG8ASO5FrBWMbnIl5Awb6Kq9Q=
Subject key identifier: 54:F9:7D:9E:21:D9:F2:8D:FE:2A:9F:07:8C:70:25:62:F8:10:0F:76
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 0189FD9B5BE686DD6CFB943ABAD4BD8BEAAA
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/VPl9niHZ8o3-Kp8HjHAlYvgQD3Y.roa
Signing time: Wed 16 Aug 2023 09:09:24 +0000
ROA not before: Wed 16 Aug 2023 09:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12843
IP address blocks: 185.202.196.0/22 maxlen: 22
2a0a:dc40::/30 maxlen: 30
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fd:9b:5b:e6:86:dd:6c:fb:94:3a:ba:d4:bd:8b:ea:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: Aug 16 09:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54f97d9e21d9f28dfe2a9f078c702562f8100f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a3:d1:c2:ae:bd:94:e2:4c:ce:97:f0:c5:aa:
c1:03:17:75:b0:6e:7d:e9:d6:e4:5e:06:13:cc:f8:
15:bf:53:17:49:a8:06:7c:2a:b8:1b:4d:b2:7b:b2:
cf:7f:65:52:c8:4b:57:03:c5:8d:b0:a1:ee:65:8e:
7d:02:1c:c1:44:57:bc:ea:4d:cc:84:2c:ee:e1:33:
1e:89:75:ef:37:12:90:bf:37:7f:cf:4a:08:fe:76:
90:7f:bc:e0:3d:4e:d4:ab:a4:9b:b1:60:46:46:5b:
f1:91:28:6f:df:c7:1a:b3:78:0d:54:75:80:c3:80:
6b:b5:83:05:b3:89:e7:15:a4:b1:2d:b2:14:82:47:
0c:e8:30:ef:5a:e6:c4:5b:91:9b:02:13:58:7f:d0:
6e:19:80:73:46:ca:39:4a:0d:48:77:83:f4:65:bf:
0a:0f:bf:c1:5a:1f:84:52:d5:03:17:64:6e:ca:79:
f2:33:f3:8a:31:0b:fe:8b:54:90:48:d4:94:78:69:
09:e4:eb:6c:7a:ca:ec:6d:5b:58:a4:96:99:59:aa:
65:3e:56:2e:24:dc:9a:51:90:0a:16:bd:ab:dd:a5:
c2:c2:b3:30:70:2d:a4:b0:b8:1c:b7:a5:78:f1:2b:
38:7f:15:cf:2e:43:5b:78:e7:6d:01:74:65:d9:f3:
83:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F9:7D:9E:21:D9:F2:8D:FE:2A:9F:07:8C:70:25:62:F8:10:0F:76
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/VPl9niHZ8o3-Kp8HjHAlYvgQD3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.196.0/22
IPv6:
2a0a:dc40::/30
Signature Algorithm: sha256WithRSAEncryption
3c:c8:08:24:61:ff:bf:d8:5e:b6:91:71:e1:44:b0:b4:30:2e:
75:71:c1:73:ba:71:a1:7c:b5:f3:0a:ef:69:d0:b1:ce:7d:9a:
0f:bb:86:80:55:8d:bc:6e:05:eb:c4:17:ad:d6:fc:0e:fa:b1:
c4:da:85:01:c5:15:a6:1a:fa:e9:0a:e5:68:52:37:d3:fa:d1:
67:87:41:2f:a1:9f:aa:a3:3f:77:b1:8d:53:14:35:02:aa:1a:
e0:5b:02:a8:a0:68:16:4b:cb:07:c2:d6:36:97:31:30:57:b5:
09:83:75:fe:41:05:fd:b5:37:02:91:80:53:3f:72:c1:57:fa:
e6:d4:79:e5:77:87:df:8b:ca:a4:05:78:f4:2b:08:63:7b:fa:
b7:a5:df:53:e8:e2:b0:ce:d5:3d:67:ac:8e:72:ea:a7:85:c8:
0c:f3:e0:f0:a0:05:fc:e5:b6:1c:9d:46:90:a1:dc:76:2a:16:
70:95:e6:84:cb:27:f2:03:93:5b:b3:00:62:97:d6:ac:6d:8b:
1e:c3:c0:61:e5:c7:fd:0e:e2:64:62:b7:88:3d:90:ba:f1:d6:
ea:0d:38:45:ad:aa:91:e8:33:ac:0d:ee:19:54:0b:9f:25:8d:
8d:1e:7a:3b:39:f8:32:39:1c:ce:99:1c:cc:39:3c:9f:55:67:
c8:34:c1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:22 2024 by rpki-client on console.sobornost.net