Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/vcN5SrXMR62fEgnCmF6v7bvFvkk.roa
File: vcN5SrXMR62fEgnCmF6v7bvFvkk.roa (raw, json)
Hash identifier: fZU9wWLdnRHREyAI6ZV7fH83EgbfHP8ESudmz3fK7gA=
Subject key identifier: BD:C3:79:4A:B5:CC:47:AD:9F:12:09:C2:98:5E:AF:ED:BB:C5:BE:49
Certificate issuer: /CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Certificate serial: 0193DF326CAC14260D91C4AC1AF6C1EE1709
Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/vcN5SrXMR62fEgnCmF6v7bvFvkk.roa
Signing time: Thu 19 Dec 2024 13:54:03 +0000
ROA not before: Thu 19 Dec 2024 13:54:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213354
IP address blocks: 91.228.68.0/22 maxlen: 22
185.248.192.0/23 maxlen: 23
185.248.194.0/23 maxlen: 23
194.15.112.0/24 maxlen: 24
194.15.113.0/24 maxlen: 24
194.26.18.0/24 maxlen: 24
2a11:9c00::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:df:32:6c:ac:14:26:0d:91:c4:ac:1a:f6:c1:ee:17:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Validity
Not Before: Dec 19 13:54:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdc3794ab5cc47ad9f1209c2985eafedbbc5be49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:19:c6:08:9c:4a:61:cd:a0:e5:41:61:c3:1c:
0c:d2:a6:13:80:22:ac:d0:ab:83:95:4a:1d:a9:53:
08:c5:43:f3:ab:60:2b:77:93:4f:f1:8c:d8:33:b9:
40:f2:1f:04:bd:92:69:f3:0c:5a:a4:78:a5:13:be:
7f:d5:cc:0b:c7:c3:26:58:02:69:72:fe:e0:70:90:
aa:5d:5e:45:39:07:b1:1f:9b:39:71:5b:0a:2c:e9:
2b:1d:b7:dd:b5:c0:a0:94:38:44:97:32:98:2d:25:
b4:3f:12:40:aa:6a:51:b9:50:7a:48:cd:9e:19:70:
47:17:06:14:59:5f:cf:3d:dc:da:f2:18:4b:14:d6:
2b:29:e3:20:2b:85:2f:80:f4:5d:ef:b5:e5:17:42:
73:10:e8:45:bb:dd:f6:f0:7e:19:e6:7d:c6:a6:69:
5d:82:4f:87:a6:70:b6:1f:5b:55:94:d2:27:a0:c2:
4b:26:20:80:bd:a9:30:ac:81:76:f9:f6:f0:69:8e:
0f:d0:de:b1:70:a2:27:ff:9b:3f:eb:1a:de:55:2b:
13:a0:e8:59:58:a5:f2:ee:a3:54:3a:b4:f8:84:36:
93:97:c7:7c:10:9e:ed:4f:f1:af:18:67:77:01:9a:
9f:b7:e1:a8:42:5e:c1:da:e8:fb:45:f4:15:b0:c5:
47:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C3:79:4A:B5:CC:47:AD:9F:12:09:C2:98:5E:AF:ED:BB:C5:BE:49
X509v3 Authority Key Identifier:
keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/vcN5SrXMR62fEgnCmF6v7bvFvkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.68.0/22
185.248.192.0/22
194.15.112.0/23
194.26.18.0/24
IPv6:
2a11:9c00::/40
Signature Algorithm: sha256WithRSAEncryption
74:93:51:e0:13:dc:8c:e5:1f:03:31:9e:37:4a:dd:07:52:7a:
1e:59:de:95:3a:61:b1:06:74:dc:05:fa:90:9d:8c:b0:e4:00:
eb:bf:53:4c:cb:fe:aa:cd:09:86:e6:c9:de:35:96:e9:34:54:
19:80:1a:e0:15:f3:21:7d:bd:61:ed:b7:37:64:fc:e3:b0:04:
c3:ed:1b:55:60:a6:08:84:3d:bc:e0:02:fa:42:59:f2:7a:72:
88:f3:b1:be:6f:13:df:95:de:97:1f:a1:c9:61:6b:2f:6d:1f:
10:19:f9:c9:fd:d6:90:7c:62:77:4a:de:0f:63:86:c2:bd:c6:
89:f6:95:96:47:37:7c:dd:40:b7:c8:ce:1a:7c:39:09:b9:fa:
98:41:8c:ea:1a:66:7a:e2:30:cd:46:91:aa:fb:ec:fc:d4:b0:
54:c3:78:aa:98:e7:80:11:2b:7e:4b:99:0d:e8:8c:37:51:e0:
e4:0d:02:02:f0:d3:f3:a5:33:eb:18:e0:da:a7:c8:2a:11:b8:
81:6e:9a:88:97:81:25:b5:c8:16:88:2a:3e:a7:85:df:c7:c4:
2b:e3:42:df:ac:5f:fa:69:23:6e:66:88:38:f5:13:ab:6e:61:
d5:08:4e:fb:2b:a5:3c:ec:0f:78:70:59:d5:44:9c:67:52:87:
41:4f:d4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:21:10 2025 by rpki-client