Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/VE5g5qz7UG9DExgHajsjQqpcXSk.roa
File: VE5g5qz7UG9DExgHajsjQqpcXSk.roa (raw, json)
Hash identifier: MGwMaFvRC2vAxIsCEn8njRaNezWYeh4l4PjjZiQQV4A=
Subject key identifier: 54:4E:60:E6:AC:FB:50:6F:43:13:18:07:6A:3B:23:42:AA:5C:5D:29
Certificate issuer: /CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Certificate serial: 018CC500FC79A3E3660FC2BE8794D4E997E6
Authority key identifier: C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/VE5g5qz7UG9DExgHajsjQqpcXSk.roa
Signing time: Mon 01 Jan 2024 12:30:25 +0000
ROA not before: Mon 01 Jan 2024 12:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207858
IP address blocks: 193.28.255.0/24 maxlen: 24
193.29.4.0/24 maxlen: 24
193.29.1.0/24 maxlen: 24
193.29.8.0/24 maxlen: 24
2a0f:7a40::/31 maxlen: 31
Validation: Failed, certificate revoked on Sat 27 Jan 2024 18:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:fc:79:a3:e3:66:0f:c2:be:87:94:d4:e9:97:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Validity
Not Before: Jan 1 12:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=544e60e6acfb506f431318076a3b2342aa5c5d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1b:ce:de:86:a2:35:c4:4a:f8:e8:6c:85:ac:
39:44:ec:63:46:71:eb:dd:2d:22:50:33:e5:9a:aa:
29:45:e5:a6:b3:97:18:99:14:be:74:77:cf:1b:9e:
f3:85:88:36:a3:5d:30:33:2e:4a:d1:81:59:b2:ab:
2e:39:9b:a6:e7:89:6d:67:9c:f9:cd:1b:a2:b6:05:
b5:fc:4d:17:b6:13:a2:6d:f0:b7:eb:5b:44:fb:79:
f0:27:72:19:29:90:8e:a0:d1:7b:5a:22:c9:63:42:
f3:71:88:f1:10:81:e5:38:db:cf:12:2a:d5:09:18:
ac:1f:b5:58:f5:69:6f:ba:29:3e:87:f5:59:0e:83:
8a:af:7c:a8:3d:37:4d:6b:8d:b9:6c:ec:c0:5f:e2:
dc:7b:89:d5:29:e5:bd:32:9f:d4:b3:a9:d2:9e:89:
40:b7:8b:d8:cf:8e:74:fd:aa:ab:b3:da:b5:24:1e:
7e:3a:02:ee:f0:bb:72:b5:cc:f7:c3:91:d2:56:3e:
58:67:69:6f:22:f6:21:d2:ab:7f:15:e8:21:39:7a:
6f:13:f9:a2:7b:28:36:8a:06:ea:b3:16:93:42:56:
06:c1:03:e0:a3:1d:c5:98:1c:b8:f5:c5:a2:19:ea:
03:40:b0:78:a0:24:44:ac:31:d0:c5:9a:f2:9d:7e:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4E:60:E6:AC:FB:50:6F:43:13:18:07:6A:3B:23:42:AA:5C:5D:29
X509v3 Authority Key Identifier:
keyid:C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/VE5g5qz7UG9DExgHajsjQqpcXSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.255.0/24
193.29.1.0/24
193.29.4.0/24
193.29.8.0/24
IPv6:
2a0f:7a40::/31
Signature Algorithm: sha256WithRSAEncryption
74:c8:7e:3f:65:a1:7e:67:02:b1:b3:09:06:bd:32:32:3b:8c:
22:58:cc:87:97:6a:61:26:28:50:cb:a7:7e:55:e2:f9:02:6e:
bb:e9:55:65:32:64:93:ca:5f:2d:9d:68:3d:c8:3b:5b:be:63:
49:f1:c0:0e:66:da:d5:82:a2:b3:a6:bf:6a:98:6d:96:f5:2b:
9a:78:8d:fb:c3:74:13:a6:a4:07:6b:62:a2:b8:5e:e0:63:d0:
9a:be:12:07:17:f4:fd:a8:f6:6d:17:17:24:97:14:e1:d5:0c:
cf:76:5a:69:06:32:57:01:f8:e8:3f:d9:75:f3:0a:c1:5b:0a:
c1:96:77:91:4e:04:35:0f:d0:11:bd:ac:32:8e:c0:42:4e:15:
84:18:b7:f1:b7:01:b6:63:61:e7:ee:03:bc:fb:97:47:4b:96:
47:9f:a5:e0:7a:96:22:c5:eb:73:6b:50:ab:5e:aa:2d:90:d0:
08:d9:07:cd:4e:88:fc:95:09:96:ae:36:49:fc:47:95:a9:70:
f1:0c:d1:8b:20:39:36:3e:ba:18:58:14:8d:ff:3d:bf:7a:ef:
61:f9:bf:9e:16:d2:d5:51:9a:7d:b9:df:3e:80:2c:39:2d:45:
77:b4:1f:c0:90:d9:b0:0e:26:5f:df:85:76:9e:b4:63:94:5d:
8a:b1:3a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:30 2025 by rpki-client