Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VrPaSP-EzeJxdJuH-6R6ec7bDzc.roa
File: VrPaSP-EzeJxdJuH-6R6ec7bDzc.roa (raw, json)
Hash identifier: rOxTm/zPEiUG3PUEJMRq+mrBs6dQv2r/b42fPwPD5xE=
Subject key identifier: 56:B3:DA:48:FF:84:CD:E2:71:74:9B:87:FB:A4:7A:79:CE:DB:0F:37
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824B31124FC12FB57B2FDDECA1C65B1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VrPaSP-EzeJxdJuH-6R6ec7bDzc.roa
Signing time: Thu 02 Jan 2025 17:51:21 +0000
ROA not before: Thu 02 Jan 2025 17:51:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207459
IP address blocks: 193.149.28.0/24 maxlen: 24
193.149.29.0/24 maxlen: 24
193.149.30.0/24 maxlen: 24
193.149.31.0/24 maxlen: 24
194.180.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Feb 2025 15:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:b3:11:24:fc:12:fb:57:b2:fd:de:ca:1c:65:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56b3da48ff84cde271749b87fba47a79cedb0f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:fd:df:74:d2:ae:72:51:a4:22:2c:c3:d2:
84:7b:87:7e:88:05:3b:f8:7b:85:58:f7:d8:28:8d:
40:fa:c3:56:02:d9:e2:ea:de:bc:75:d3:cc:be:2d:
ce:e0:22:90:61:11:07:bc:3c:30:44:fa:6a:e8:a9:
fb:a1:16:0b:32:52:fb:51:70:88:47:30:7f:a3:0d:
48:e7:29:5f:a9:eb:39:6a:d0:b2:af:9d:ee:d1:6a:
7a:1a:c4:cb:0c:7e:27:84:14:40:d8:1d:63:ac:21:
cf:30:91:2d:7d:03:97:fe:ac:b3:6a:cc:d5:22:21:
b0:3d:da:c1:ad:92:bf:e3:8b:90:69:7d:ed:a4:89:
98:07:6d:a4:88:f0:f6:5b:41:b2:9f:74:86:20:03:
1b:50:da:3f:8f:44:c0:4a:bd:2f:7c:16:36:75:9f:
99:71:43:c9:59:ac:38:48:9b:cb:87:98:a8:e9:cb:
32:c8:11:8a:bd:bc:28:69:51:32:4a:73:f3:3a:f3:
5a:cd:b9:ae:e2:e0:f3:64:0d:20:93:7e:08:00:3b:
2c:b5:3f:0b:b0:a1:8b:d4:70:52:3b:48:d8:3c:05:
8e:ca:b0:9f:f4:f4:02:6d:0a:1f:1a:d3:6a:04:06:
fd:c1:48:c8:a7:8a:c5:f7:d0:20:ff:6b:5e:7f:be:
05:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B3:DA:48:FF:84:CD:E2:71:74:9B:87:FB:A4:7A:79:CE:DB:0F:37
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VrPaSP-EzeJxdJuH-6R6ec7bDzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.149.28.0/22
194.180.36.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:c0:c4:9e:81:07:74:eb:87:9e:49:81:e2:0c:bf:1c:de:8f:
e1:b1:3b:37:2f:ac:7e:61:d8:13:21:5c:90:6e:89:e4:bd:a5:
4a:db:d4:03:12:d5:d5:a9:46:00:3c:e1:0f:1e:53:73:d5:28:
bb:24:c5:0d:9f:bb:27:52:b3:aa:12:40:c0:eb:1d:a8:5a:8e:
fd:82:41:d0:8e:9b:2e:bd:48:76:30:d5:96:f6:3d:de:a6:d7:
c0:d2:ec:0f:c1:2d:b3:27:96:ff:92:a7:0b:7a:94:15:3f:f5:
ca:58:d0:7b:36:12:b0:37:28:3a:aa:36:91:e8:8e:27:73:4c:
55:36:d3:ed:c4:42:0f:12:61:aa:96:37:c0:42:4f:7a:ba:c2:
21:22:e0:cb:70:8e:32:a4:4f:7e:d0:71:68:08:17:67:9c:cd:
d7:bb:eb:6d:0e:a0:bd:14:7c:c2:42:fd:07:06:4c:72:9d:d7:
bb:15:c8:b9:00:26:72:93:cf:ef:0a:a1:33:4c:c6:9d:1c:0f:
92:89:c9:80:e3:53:f9:8a:6b:14:7f:84:46:b5:4f:01:17:21:
7b:e8:02:4d:e5:53:cd:57:53:93:d0:77:1d:88:1a:dd:90:8b:
aa:05:5e:89:ac:2c:b0:85:34:8c:05:d3:04:60:ff:ac:89:9d:
f8:43:84:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:41:23 2025 by rpki-client