Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/VL5JAiGzJnWppHjjH3FJ-AUWFa0.roa
File: VL5JAiGzJnWppHjjH3FJ-AUWFa0.roa (raw, json)
Hash identifier: JW4JaQZyWqQqy1Mvf/Fj2FI0dAm1/co3pvzAx/UkH1o=
Subject key identifier: 54:BE:49:02:21:B3:26:75:A9:A4:78:E3:1F:71:49:F8:05:16:15:AD
Certificate issuer: /CN=c65613d5999f3632985ed89a02efaabd1890ba09
Certificate serial: 019440068E6FC4341690DEE299E8D9FA72A8
Authority key identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/VL5JAiGzJnWppHjjH3FJ-AUWFa0.roa
Signing time: Tue 07 Jan 2025 09:09:18 +0000
ROA not before: Tue 07 Jan 2025 09:09:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215492
IP address blocks: 2001:67c:df8::/48 maxlen: 48
2a14:8100:10::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 31 Jan 2025 03:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:40:06:8e:6f:c4:34:16:90:de:e2:99:e8:d9:fa:72:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65613d5999f3632985ed89a02efaabd1890ba09
Validity
Not Before: Jan 7 09:09:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54be490221b32675a9a478e31f7149f8051615ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c8:36:51:d1:67:1f:27:96:f3:8c:27:c0:ee:
76:42:93:48:22:69:f6:16:16:f9:91:b9:e6:09:cf:
4a:c6:2e:c8:ce:66:73:ae:79:af:db:90:f4:d0:3b:
db:9e:2f:d0:86:96:af:23:df:aa:4f:ea:dc:ff:e8:
56:81:3c:2e:e1:f5:1b:87:e2:d9:58:b6:c7:ed:a8:
3b:d4:53:5c:0f:36:8a:0a:a9:fa:a1:5c:b4:4f:2e:
42:c2:b0:c3:da:92:98:a7:91:a2:f5:fe:4f:de:dd:
66:66:5a:c2:68:dd:45:b5:33:41:9d:f2:2e:c7:21:
81:48:e7:76:f1:2d:f0:d3:cb:54:ce:d1:49:58:5b:
0e:c3:3b:91:4d:81:36:c1:12:cd:54:b9:60:0f:75:
78:f7:75:f0:2a:53:d3:0b:ce:75:14:11:58:b3:54:
99:b3:e9:62:99:29:48:6f:ae:11:93:48:92:bf:05:
76:1e:80:86:5c:6b:63:e1:27:34:36:8d:89:ce:3c:
7a:d3:3c:10:93:8b:6b:ed:3b:ab:62:04:0a:ca:75:
38:77:dd:fb:fc:19:1a:3f:26:e4:1c:00:3f:94:9d:
68:00:43:92:a0:0d:f6:c1:9f:30:2c:33:b6:7b:5c:
c3:3a:37:fd:d8:c3:e8:ba:5b:89:ac:4c:a8:2f:b1:
12:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BE:49:02:21:B3:26:75:A9:A4:78:E3:1F:71:49:F8:05:16:15:AD
X509v3 Authority Key Identifier:
keyid:C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/VL5JAiGzJnWppHjjH3FJ-AUWFa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:df8::/48
2a14:8100:10::/44
Signature Algorithm: sha256WithRSAEncryption
8e:3a:90:b6:da:cd:4f:25:45:38:77:7c:32:76:ab:2e:26:c2:
db:e6:11:d9:d4:9e:d0:ed:c2:2d:a2:af:14:f8:82:eb:15:9a:
82:1c:a3:8c:c1:b6:87:0e:46:3b:f7:82:c4:80:57:e7:d3:4a:
41:5f:7d:1d:98:c8:eb:65:e2:06:2b:37:40:33:f1:9d:24:5d:
49:6b:8e:fa:1f:93:7a:51:88:49:77:40:53:f5:54:a3:e9:4c:
11:42:16:a5:4b:30:85:37:16:22:98:65:a7:44:26:07:2a:1a:
e6:b1:13:aa:e5:94:48:cb:a7:09:36:98:6f:af:14:72:5f:ad:
b5:80:aa:4a:b0:36:02:69:c0:49:6e:16:c4:eb:d7:97:08:40:
7b:f3:c2:24:fb:8c:55:2d:08:0f:08:44:e9:3b:74:44:fa:61:
97:0c:43:97:f3:63:14:43:63:18:e9:aa:82:d2:a1:04:38:5a:
05:4a:f1:3a:2b:c9:0e:3e:55:4e:ab:9f:75:ad:51:53:8b:f9:
70:eb:0a:01:06:a6:2b:ee:65:7c:24:57:fd:4d:2e:f7:21:f5:
f3:c4:3e:13:20:76:10:5f:b4:9b:a5:38:76:f0:30:70:9a:a2:
8a:27:df:f9:89:c2:d8:fe:60:88:db:79:ac:ad:1c:58:56:19:
f2:14:db:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:56:41 2025 by rpki-client