Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/VN5XCNYun2VGVkp-uzDdn-lgoxQ.roa
File: VN5XCNYun2VGVkp-uzDdn-lgoxQ.roa (raw, json)
Hash identifier: 1R85bJ8RlZa8KsBC7cdcuzBFhYl6BVz2KAEsqFLtFWg=
Subject key identifier: 54:DE:57:08:D6:2E:9F:65:46:56:4A:7E:BB:30:DD:9F:E9:60:A3:14
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01907804318A72450044CEBDBB54B819B310
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/VN5XCNYun2VGVkp-uzDdn-lgoxQ.roa
Signing time: Wed 03 Jul 2024 09:54:18 +0000
ROA not before: Wed 03 Jul 2024 09:54:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133296
IP address blocks: 159.148.157.0/24 maxlen: 24
159.148.236.0/24 maxlen: 24
159.148.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jul 2024 10:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:78:04:31:8a:72:45:00:44:ce:bd:bb:54:b8:19:b3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jul 3 09:54:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54de5708d62e9f6546564a7ebb30dd9fe960a314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c5:14:f7:13:b5:0d:ea:c8:2b:b4:d6:22:8a:
6f:0d:a8:29:35:1a:ce:35:7a:75:cd:b8:07:29:12:
3e:d7:db:58:9f:1d:24:12:8f:ff:04:af:47:64:69:
3e:22:54:25:c4:21:62:4e:c0:29:7c:4e:98:8c:55:
54:dc:0b:01:b0:26:a5:b1:38:12:be:67:f5:ca:6d:
a9:c5:80:c6:d5:02:a3:88:a7:d8:cd:e0:7f:ab:69:
ad:d6:dc:6f:a3:ce:07:88:cb:53:48:55:e6:ff:21:
10:68:b3:de:f6:5e:c9:57:fd:99:88:e8:dd:d4:42:
b8:2c:45:70:c8:5b:95:90:d2:e7:74:64:8e:08:22:
81:d9:d4:3a:30:b8:ff:2f:df:b5:eb:4d:fc:44:59:
30:d3:a6:2a:ac:93:1f:ac:ec:c5:d0:48:41:a7:86:
f1:d6:77:b1:1c:de:66:10:49:bb:5a:e9:ed:11:57:
2a:73:91:80:2c:04:92:29:a2:a8:f4:b6:9f:fa:60:
09:a2:fc:2d:00:cb:f5:08:5c:85:d8:07:9d:e0:21:
6d:93:64:12:2b:0d:3c:a9:d3:94:e7:c7:01:70:43:
43:ef:65:6b:a7:d5:de:1a:ce:2f:b8:09:9c:cb:83:
e9:97:da:e6:bc:ba:b1:14:d8:80:82:dc:e8:10:18:
2d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DE:57:08:D6:2E:9F:65:46:56:4A:7E:BB:30:DD:9F:E9:60:A3:14
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/VN5XCNYun2VGVkp-uzDdn-lgoxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.157.0/24
159.148.236.0/24
159.148.239.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:c7:fb:5b:85:7f:08:2e:0d:2c:8a:1d:71:bf:5a:01:45:49:
4b:e3:22:45:5a:1f:05:50:f8:33:b1:77:11:59:98:a4:56:06:
15:25:50:07:62:8b:fb:cb:09:ff:c4:5f:b0:52:b8:58:35:61:
ff:92:64:0c:b8:e3:5e:e8:a7:f1:e8:88:46:6a:87:12:c3:ec:
6a:a8:de:dc:95:3a:c9:be:59:a6:92:1d:b5:a1:f7:4b:a0:41:
77:99:5b:66:27:8f:20:9b:62:5b:64:32:ac:1c:9e:96:1b:96:
66:7d:2e:f4:dd:6a:4c:90:88:70:22:58:c0:3d:e5:5a:dc:b9:
03:58:93:b6:e3:85:bc:ea:d2:fa:59:89:6b:8d:46:15:fb:88:
ae:3b:3b:d8:88:60:76:5c:9a:04:39:37:68:88:91:03:75:cd:
d9:1e:f6:0a:26:24:92:54:bf:08:6a:c6:c8:fa:41:40:ae:31:
e9:66:fb:d5:1e:e5:67:e7:fe:45:45:e6:03:77:94:ee:ed:27:
71:d7:d1:8b:59:3d:7d:3f:b8:55:c2:f4:b8:7c:76:b1:b4:e3:
04:58:a8:d5:8b:f1:67:c9:b5:99:38:63:a5:47:54:d6:3f:5b:
75:47:76:eb:bd:16:e6:ab:17:18:ab:38:43:e1:6f:89:9a:ee:
bd:60:7f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:21 2025 by rpki-client