Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vmxz8LlToUgNWugqqjucOVVm2mo.roa
File: vmxz8LlToUgNWugqqjucOVVm2mo.roa (raw, json)
Hash identifier: CqfekbUlbGnwhFMPIN3c/urPF4FzoZ01qArXGz+qy6E=
Subject key identifier: BE:6C:73:F0:B9:53:A1:48:0D:5A:E8:2A:AA:3B:9C:39:55:66:DA:6A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019428250B564B2833BE97CBAFE56A5D6AB5
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vmxz8LlToUgNWugqqjucOVVm2mo.roa
Signing time: Thu 02 Jan 2025 17:51:43 +0000
ROA not before: Thu 02 Jan 2025 17:51:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212025
IP address blocks: 193.124.207.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Jan 2025 08:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:0b:56:4b:28:33:be:97:cb:af:e5:6a:5d:6a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be6c73f0b953a1480d5ae82aaa3b9c395566da6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:7e:7f:a9:47:9a:be:7c:cc:48:c9:6d:ab:
1e:85:59:f7:e0:25:0f:0a:84:1b:de:00:30:86:e9:
10:ab:27:60:ac:4a:33:8f:44:6c:6c:e7:a1:9c:df:
51:af:2d:6f:bd:db:70:67:1f:fb:41:69:a7:e4:31:
93:4b:11:fe:f8:e6:f7:b5:96:57:03:10:51:45:9c:
b5:8c:2e:12:63:6b:32:3a:53:24:ca:b4:7a:51:be:
7d:8a:46:12:ff:b6:90:5b:35:3d:9c:b7:8d:c7:9e:
76:4c:3b:56:01:a6:fd:90:17:17:43:49:49:90:4b:
16:5b:5c:67:78:ff:5e:7b:20:44:22:ba:b5:7b:18:
b7:7c:56:06:dd:f8:42:1f:15:e2:bc:29:d9:83:9d:
61:c5:0b:ef:ee:3e:a2:9b:ed:16:d5:da:9e:a9:71:
e5:74:84:2b:e5:e5:20:99:72:4e:a7:ea:6d:af:b2:
0b:d3:8f:06:63:ab:e1:eb:b8:67:61:e5:47:41:a1:
40:9e:e8:39:20:e8:53:7a:88:e6:75:02:4b:0d:ae:
bc:74:72:03:e6:cd:5b:96:8e:bf:37:94:fa:d9:d7:
57:4a:ba:bd:db:70:76:b4:fb:a7:9a:98:92:be:db:
70:5f:ed:8a:df:ef:d7:f7:e4:77:6c:65:68:f6:b0:
15:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6C:73:F0:B9:53:A1:48:0D:5A:E8:2A:AA:3B:9C:39:55:66:DA:6A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vmxz8LlToUgNWugqqjucOVVm2mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.207.0/24
212.192.241.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:06:08:4a:90:67:fd:02:ad:8b:46:e7:43:08:2d:d4:94:a3:
4b:48:62:5b:d2:7a:b1:b4:d1:39:32:b6:6b:21:67:95:4b:7f:
17:81:ed:a2:a8:3e:a7:20:4f:33:51:c8:4d:3f:d4:42:2c:6f:
ca:1b:60:ac:b0:df:5f:9c:8e:af:18:9c:2f:27:85:28:c1:a9:
f1:6b:b6:40:98:c8:b7:45:a0:25:99:3f:d7:19:72:49:b3:d9:
c5:05:e3:be:6e:b8:f5:21:3f:fb:a7:dd:e8:ef:8b:9f:c5:08:
78:07:46:f2:a4:93:0c:81:26:16:3e:f0:29:5f:92:89:ef:92:
0d:1d:b9:1b:48:a3:ef:37:e5:c5:3a:10:98:c6:df:6d:4f:35:
3f:33:13:83:83:b6:19:5c:aa:2c:dc:fc:e6:6d:69:ac:d8:7f:
2f:25:96:d8:f6:d0:75:9b:e5:67:d2:c7:9e:45:7c:e1:37:ea:
11:9e:b4:4c:98:e0:13:f1:e1:d1:12:ed:46:fe:d1:f3:2b:fe:
82:7d:6a:54:f2:d3:d3:59:64:30:6f:7d:c4:fd:22:c0:ca:68:
86:e1:41:2d:de:54:d4:8a:9b:54:48:7a:6c:d6:01:3f:e5:b6:
e3:4c:e5:2e:88:ee:a2:61:e4:64:47:e4:26:78:ed:30:47:51:
b2:c3:41:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:06:13 2025 by rpki-client