Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/VQMtuTfgZCSZ8-AbnXnHaAy5QOg.roa
File: VQMtuTfgZCSZ8-AbnXnHaAy5QOg.roa (raw, json)
Hash identifier: Fxg9cjsIs8Du4wHGW4RJrUTGiSUqVvyhBOKgdSL4+3I=
Subject key identifier: 55:03:2D:B9:37:E0:64:24:99:F3:E0:1B:9D:79:C7:68:0C:B9:40:E8
Certificate issuer: /CN=f07be9d1189771b7337efc1ced2c825dc2472a56
Certificate serial: 01926C641986E33E2061DBB5644E6BEC8771
Authority key identifier: F0:7B:E9:D1:18:97:71:B7:33:7E:FC:1C:ED:2C:82:5D:C2:47:2A:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Hvp0RiXcbczfvwc7SyCXcJHKlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/VQMtuTfgZCSZ8-AbnXnHaAy5QOg.roa
Signing time: Tue 08 Oct 2024 13:49:12 +0000
ROA not before: Tue 08 Oct 2024 13:49:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42909
IP address blocks: 194.0.2.0/24 maxlen: 24
2001:678:5::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:64:19:86:e3:3e:20:61:db:b5:64:4e:6b:ec:87:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f07be9d1189771b7337efc1ced2c825dc2472a56
Validity
Not Before: Oct 8 13:49:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55032db937e0642499f3e01b9d79c7680cb940e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:76:1d:5e:38:32:cb:76:fc:6e:73:83:3b:e9:
e1:ee:50:5e:48:bb:b6:19:77:78:6e:ba:a4:3c:d9:
26:fd:7f:c9:90:78:d7:d2:22:e0:d2:c4:c5:bc:ea:
28:a2:65:78:9d:5e:03:e6:24:09:a0:b5:29:29:29:
fa:b2:a7:7f:4a:47:d3:76:10:e3:a7:25:02:a5:1a:
f8:44:23:1e:04:32:90:a8:36:55:81:fb:de:5f:96:
9d:6e:96:16:1b:68:a0:44:e0:fa:1a:e2:d4:cf:67:
3e:ce:f4:db:5b:8a:02:da:7b:d4:03:13:bf:f4:26:
8a:18:55:18:47:92:c0:74:8a:ff:e9:2c:bf:c0:7f:
fc:66:9d:42:60:ff:07:a9:53:5a:20:36:2b:50:28:
8d:72:08:93:07:58:98:ee:b3:12:09:81:be:65:2e:
89:e7:e9:1f:2d:3f:e1:83:c0:db:f6:e6:ce:74:68:
41:00:84:16:49:89:00:2e:29:f0:87:31:f5:7d:59:
5e:a7:af:75:db:02:06:b1:e0:ee:9a:3e:e9:4b:8a:
33:1f:85:88:f1:50:5e:07:df:d5:db:82:e5:a1:55:
a1:bd:09:b6:c4:fa:bd:03:be:f2:1d:5c:72:29:54:
10:77:88:f6:0f:64:a3:18:52:ac:c1:c3:5e:48:31:
d0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:03:2D:B9:37:E0:64:24:99:F3:E0:1B:9D:79:C7:68:0C:B9:40:E8
X509v3 Authority Key Identifier:
keyid:F0:7B:E9:D1:18:97:71:B7:33:7E:FC:1C:ED:2C:82:5D:C2:47:2A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Hvp0RiXcbczfvwc7SyCXcJHKlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/VQMtuTfgZCSZ8-AbnXnHaAy5QOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.2.0/24
IPv6:
2001:678:5::/48
Signature Algorithm: sha256WithRSAEncryption
bc:af:3a:00:65:0c:61:10:10:4d:1f:f6:22:97:59:92:e9:cf:
c8:1b:e5:af:68:88:9d:df:73:fb:2e:e0:05:0e:00:9d:04:db:
f4:fe:84:d3:22:93:4b:5d:0c:eb:a8:8e:02:00:41:48:25:7a:
ff:5d:06:f7:84:b4:8a:22:2f:23:ab:86:3c:94:92:c4:e5:15:
8b:d7:2b:e9:25:06:ae:e7:af:ab:26:54:5e:e8:3f:3e:10:d3:
99:a4:cb:f5:da:a6:5b:9f:4c:a8:f3:e5:e3:eb:1c:04:6b:e6:
34:5d:46:ff:c4:83:bf:3d:d5:f7:95:0e:c7:a4:e2:a7:5d:db:
4d:22:0e:92:53:f9:e1:77:69:69:1e:1c:52:63:7f:08:ab:21:
91:a0:02:12:28:67:fc:ee:6c:b1:44:28:3e:32:c1:3d:83:d9:
1f:75:89:b8:1b:f5:f7:da:ab:08:b7:65:7c:cb:eb:b5:46:ab:
54:4a:88:da:ee:32:b1:40:b1:bb:9a:d3:98:ab:92:78:51:94:
06:ec:2b:06:36:6e:e0:02:3b:ba:29:50:cf:28:d2:67:14:84:
5a:44:70:a4:08:ff:68:35:2e:be:1b:ac:de:9f:72:2b:3a:b2:
1d:27:c7:46:d5:31:27:f5:59:51:97:de:96:c2:76:eb:ad:5a:
5a:a2:1c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:59:57 2025 by rpki-client