Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/vnTMHybCqWkcUzo7f36LfOTNch4.roa
File: vnTMHybCqWkcUzo7f36LfOTNch4.roa (raw, json)
Hash identifier: ODiWqwsvZNf/vD9+9xd08swMcdRYxePTqQ41geZA52s=
Subject key identifier: BE:74:CC:1F:26:C2:A9:69:1C:53:3A:3B:7F:7E:8B:7C:E4:CD:72:1E
Certificate issuer: /CN=e86fc9f927947aa48983b027cf3de38475b053d3
Certificate serial: 018CC8013DFC07CE03F7C570C712D8D08765
Authority key identifier: E8:6F:C9:F9:27:94:7A:A4:89:83:B0:27:CF:3D:E3:84:75:B0:53:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6G_J-SeUeqSJg7Anzz3jhHWwU9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/vnTMHybCqWkcUzo7f36LfOTNch4.roa
Signing time: Tue 02 Jan 2024 02:29:33 +0000
ROA not before: Tue 02 Jan 2024 02:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28795
IP address blocks: 194.247.180.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:3d:fc:07:ce:03:f7:c5:70:c7:12:d8:d0:87:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e86fc9f927947aa48983b027cf3de38475b053d3
Validity
Not Before: Jan 2 02:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be74cc1f26c2a9691c533a3b7f7e8b7ce4cd721e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ce:33:30:63:6c:a0:9e:c6:95:57:51:0f:ac:
94:69:c9:09:a2:34:32:e6:f0:76:0f:77:ad:cd:5a:
a1:14:0b:5c:8d:4c:af:6e:e2:21:8d:46:ef:1a:80:
55:75:16:19:51:8e:c7:c1:99:f5:38:c4:4b:95:5c:
a6:62:b7:15:ce:8c:21:b0:0a:60:93:f6:86:86:e9:
72:6c:24:3f:dc:7d:c3:7b:d2:97:3f:aa:c1:ad:1d:
f8:66:66:e0:f9:95:db:21:96:78:cd:73:9b:9d:a8:
e6:d6:90:c8:db:58:c7:31:5c:1e:9d:a6:7d:76:c6:
bd:dd:10:52:d3:69:66:b7:0d:07:10:a0:41:ad:9a:
c5:2d:e0:66:a8:83:47:da:48:08:5a:4d:99:27:c1:
7c:22:f1:6e:ad:0d:e2:88:3a:7a:cd:82:58:0a:78:
de:3a:d8:25:d5:f3:a9:b8:71:c0:f1:0f:ca:4d:0a:
0c:3e:97:c2:55:b8:ef:e6:41:e7:94:92:4e:9f:bc:
ed:b3:b6:3b:e5:60:3a:0d:8d:11:7e:31:84:15:07:
15:17:d4:14:97:c2:6d:62:93:b7:38:cd:31:85:b2:
bc:11:1f:1f:d9:40:c9:bc:41:80:6b:c4:b0:7f:df:
29:fe:31:e9:80:f3:69:87:63:1c:42:65:3a:5b:30:
49:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:74:CC:1F:26:C2:A9:69:1C:53:3A:3B:7F:7E:8B:7C:E4:CD:72:1E
X509v3 Authority Key Identifier:
keyid:E8:6F:C9:F9:27:94:7A:A4:89:83:B0:27:CF:3D:E3:84:75:B0:53:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6G_J-SeUeqSJg7Anzz3jhHWwU9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/vnTMHybCqWkcUzo7f36LfOTNch4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bc9563-8ff9-4e95-8e7e-13b4c0d0aae1/1/6G_J-SeUeqSJg7Anzz3jhHWwU9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.180.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:c0:8b:cd:ce:03:9e:97:4a:1d:6f:86:8e:82:f9:3d:98:c9:
6f:8a:dd:25:21:9d:67:6e:82:93:9d:9e:69:f2:3a:de:f1:4e:
45:ba:ff:15:22:fa:0b:5c:d8:80:5c:b5:c4:b9:32:ce:4c:c3:
06:42:d3:13:89:d8:46:06:6c:f6:02:83:25:b0:e3:77:b4:bd:
b3:86:a5:73:98:fd:70:ed:44:da:91:b9:98:3e:d0:05:3c:88:
1d:a2:e0:64:fa:b5:09:b1:a8:76:12:a1:94:21:a7:ff:17:a1:
f9:e9:e2:d3:3b:12:f2:67:6d:ad:5a:f3:2a:6a:b1:87:96:32:
8c:4b:c8:17:cb:bf:0c:e3:e5:d4:ff:63:18:a9:94:7a:62:c8:
e9:14:75:88:f5:55:90:dd:07:d1:49:a3:fc:33:96:78:2c:02:
93:b7:a4:8f:9e:ea:c9:a9:d2:1f:48:fb:65:33:c4:24:3b:e5:
4a:ec:68:e8:7f:fd:79:ca:65:a3:ae:bd:8f:eb:59:88:b3:c5:
b0:2b:7c:81:62:97:17:14:1a:68:3c:7d:ec:90:12:0e:00:1c:
19:e2:0d:7b:7f:8a:ec:56:bb:61:91:fa:65:b5:43:af:a0:4a:
e2:f4:05:36:4e:2b:8b:72:e4:29:f3:76:f3:ff:69:23:8d:36:
8a:23:1f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:55 2025 by rpki-client