Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/VPbUOMpTX_13tkVfuWQ_a1NoCHQ.roa
File: VPbUOMpTX_13tkVfuWQ_a1NoCHQ.roa (raw, json)
Hash identifier: IsBL+cPqKG91iERR6JnZMQOi/KL7IaCx6P7+XHpdVkE=
Subject key identifier: 54:F6:D4:38:CA:53:5F:FD:77:B6:45:5F:B9:64:3F:6B:53:68:08:74
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 01948259BD7191C44DB9771B38FCB9156973
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/VPbUOMpTX_13tkVfuWQ_a1NoCHQ.roa
Signing time: Mon 20 Jan 2025 06:15:06 +0000
ROA not before: Mon 20 Jan 2025 06:15:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 213.108.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Jan 2025 18:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:82:59:bd:71:91:c4:4d:b9:77:1b:38:fc:b9:15:69:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 20 06:15:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54f6d438ca535ffd77b6455fb9643f6b53680874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:86:af:98:e6:39:9e:89:bc:f0:d7:f0:bc:
66:29:94:80:37:59:de:8d:f7:2e:d4:c9:c3:6f:cd:
a9:a1:bc:d1:21:70:4c:4e:bb:27:a6:bb:b3:76:43:
88:a7:91:89:07:fe:16:52:cf:2a:4e:27:aa:49:69:
19:41:3b:c0:bf:05:e2:20:b6:fc:4a:72:4b:77:b2:
0b:fb:1f:fd:b8:70:c1:a1:da:ee:56:74:fb:b2:aa:
51:8c:1f:cc:27:02:1d:2f:7d:26:fb:0b:13:75:c3:
91:a4:0f:50:bb:5b:ec:f6:2e:65:97:c9:8b:6f:47:
fd:7d:6d:ef:ed:a2:6c:8c:a0:50:49:7c:1d:90:ba:
ba:13:dc:2b:58:55:da:82:11:47:da:a1:d2:f8:38:
cc:60:79:77:71:d7:78:ba:30:43:d5:c8:51:cf:33:
51:ba:d4:6d:00:8b:76:6a:1c:a3:ac:f4:dd:3d:3f:
6b:86:f5:ef:be:21:8c:a7:46:27:00:55:05:cf:31:
9d:c9:f2:50:c6:11:45:3f:80:ee:d2:6a:ad:71:56:
e7:b2:ba:5d:81:cf:5b:88:3c:6a:93:9d:cf:e4:51:
fa:d6:90:2c:e8:34:26:ee:24:a5:58:e9:bd:b3:0e:
2e:0c:56:4d:a3:47:52:96:2f:f5:a1:4d:5f:55:23:
7a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F6:D4:38:CA:53:5F:FD:77:B6:45:5F:B9:64:3F:6B:53:68:08:74
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/VPbUOMpTX_13tkVfuWQ_a1NoCHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.108.199.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:e7:90:cf:33:3d:89:0c:3c:cd:a4:4f:fd:56:4a:3c:04:bd:
6c:37:aa:75:70:ea:1b:cd:f8:c3:d0:e9:05:ff:cd:97:21:a9:
dc:38:1a:70:cf:32:7f:93:01:1a:43:c6:f4:82:c8:e3:75:4f:
84:56:17:ce:dc:d3:ba:22:31:d9:cf:1f:e2:4c:20:d1:41:13:
cc:b1:e6:3c:c5:60:64:31:7d:dc:0b:11:35:d2:f3:3e:55:13:
0c:72:33:03:72:55:26:b3:95:fc:f3:dd:58:06:2f:c4:5d:2e:
cb:ae:5a:d4:73:4a:dc:ec:c4:70:e1:8f:37:1a:88:be:ce:a5:
19:4f:fb:8f:7b:bc:8c:d1:f7:47:a7:38:a3:63:d5:75:ab:fe:
9a:fc:be:5e:62:1f:38:8c:56:cb:2c:6c:08:9d:35:67:d8:66:
3e:49:1c:f9:e9:e8:15:80:2e:db:97:89:3c:50:82:6a:28:00:
ac:b7:67:95:0b:b4:0e:d1:eb:c5:11:a7:74:ed:32:0d:f7:87:
d9:ae:09:10:10:1a:dc:a7:f5:4b:ac:96:84:51:be:6c:ee:c5:
fc:b5:3f:e2:1f:79:cc:e7:39:6b:15:ba:4f:3c:08:aa:a9:23:
01:d4:a1:9d:20:83:14:6b:56:88:1d:12:2c:7d:de:00:56:fb:
3b:e0:9c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:01:21 2025 by rpki-client