Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VAuy_qgwbFYeXLhKQzdrgJxprLM.roa
File: VAuy_qgwbFYeXLhKQzdrgJxprLM.roa (raw, json)
Hash identifier: QQ0O3F3iQrZvWVMB9UNpyVlCsEhDz/YFEnqlqTd4EZ4=
Subject key identifier: 54:0B:B2:FE:A8:30:6C:56:1E:5C:B8:4A:43:37:6B:80:9C:69:AC:B3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194BB0B991A679F5904CF64363F57C0D3AF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VAuy_qgwbFYeXLhKQzdrgJxprLM.roa
Signing time: Fri 31 Jan 2025 06:28:06 +0000
ROA not before: Fri 31 Jan 2025 06:28:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200195
IP address blocks: 87.121.217.0/24 maxlen: 24
193.8.185.0/24 maxlen: 24
194.113.38.0/24 maxlen: 24
194.113.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Mar 2025 11:14:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:0b:99:1a:67:9f:59:04:cf:64:36:3f:57:c0:d3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 31 06:28:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=540bb2fea8306c561e5cb84a43376b809c69acb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1f:01:04:01:c1:11:88:3e:4f:2a:b6:d1:84:
2a:df:61:8a:9e:c9:3b:22:6b:65:02:4a:15:00:54:
7a:03:de:11:77:35:68:9d:ee:7a:a4:f9:5c:fc:6a:
27:07:1a:f2:dc:9f:1c:3b:fe:70:4f:77:22:58:a4:
2d:9e:fe:7b:31:33:f9:56:d2:08:4e:1a:9a:5a:10:
ad:c1:6b:16:57:9e:73:c1:18:91:0b:39:63:ad:03:
43:80:4a:99:54:79:71:21:6e:1d:c4:6e:6a:86:a2:
2b:bc:e3:3d:75:13:00:44:53:62:fa:f0:92:d9:09:
b7:14:a1:7f:f9:82:6f:2e:81:9d:e6:b1:e3:11:c6:
0e:78:de:08:d2:0a:72:e2:2a:35:5c:ba:d4:4a:85:
9b:3f:4b:66:c9:55:31:35:53:5b:c7:b9:53:b5:d7:
80:14:a9:62:e0:92:b5:3a:e2:ab:11:3f:66:e7:2b:
cd:e5:41:99:c6:8b:f4:c5:3c:14:bd:9c:51:98:2b:
b4:17:8b:cc:01:5b:d7:61:4b:a5:20:f7:1f:ee:e9:
f2:e6:be:77:66:49:ae:f7:d3:1f:d9:3c:db:01:ab:
54:d9:fe:be:db:12:61:13:e0:d4:35:4f:dc:0a:fa:
6a:06:b2:ca:dd:96:eb:6c:ce:6e:06:43:fc:e5:a3:
11:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0B:B2:FE:A8:30:6C:56:1E:5C:B8:4A:43:37:6B:80:9C:69:AC:B3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VAuy_qgwbFYeXLhKQzdrgJxprLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.217.0/24
193.8.185.0/24
194.113.38.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:48:c5:04:59:95:52:bf:5a:fb:d4:61:22:8c:68:f0:f7:22:
25:c7:4a:6c:6f:03:4e:a1:45:51:26:45:0a:21:00:14:3c:3e:
7f:12:5a:7b:2c:f4:31:3b:c7:b8:9d:ba:1f:61:40:ca:1e:c2:
fd:6e:48:ee:96:bd:d3:fc:6b:88:8c:b6:75:ee:84:1f:cc:ac:
2c:7a:73:32:db:5f:ce:ce:28:2a:33:23:ab:98:e9:c5:01:39:
3d:1c:b3:51:e8:7b:ca:44:c6:bc:af:93:b5:46:57:9d:82:38:
02:27:fa:c7:04:8a:4c:c6:33:cf:64:72:97:8c:c0:56:56:66:
13:d3:e7:33:28:17:f0:63:67:13:68:e3:12:ae:38:c8:07:10:
16:ad:66:e7:43:e7:a0:3e:b7:b9:11:b2:74:ca:0e:95:11:80:
80:1e:53:50:4f:65:2d:19:be:a2:3f:2c:e8:86:ef:b7:0a:49:
d4:b8:cb:07:8a:2e:96:05:f3:0d:f2:79:d9:b6:cf:c7:82:66:
96:a4:9a:c7:bd:86:3e:e9:43:e6:5e:55:8a:84:82:3c:49:32:
17:54:f8:cd:73:c3:d5:aa:ec:1a:6c:d5:95:54:4d:48:e1:c0:
d5:bc:0c:36:12:a7:29:9b:49:9f:6c:7b:fe:64:9b:ca:6e:18:
bd:4c:76:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:59:30 2025 by rpki-client