Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/VLVIXhhbqWj_tldF0afKXtipnKU.roa
File: VLVIXhhbqWj_tldF0afKXtipnKU.roa (raw, json)
Hash identifier: mdnrHH3UUlCcFbVQuCAdS0dHZTMDyDHXJ9VEBV77arE=
Subject key identifier: 54:B5:48:5E:18:5B:A9:68:FF:B6:57:45:D1:A7:CA:5E:D8:A9:9C:A5
Certificate issuer: /CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Certificate serial: 018D11E988E3406AD62FD36521748F00CDC7
Authority key identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/VLVIXhhbqWj_tldF0afKXtipnKU.roa
Signing time: Tue 16 Jan 2024 10:55:34 +0000
ROA not before: Tue 16 Jan 2024 10:55:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15525
IP address blocks: 91.216.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:11:e9:88:e3:40:6a:d6:2f:d3:65:21:74:8f:00:cd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Validity
Not Before: Jan 16 10:55:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54b5485e185ba968ffb65745d1a7ca5ed8a99ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:45:83:ad:55:14:6b:82:5c:26:5d:9d:50:5a:
23:e8:b4:80:8d:9a:c1:46:9b:67:45:fe:dc:7c:e3:
4f:e0:64:0e:fe:00:05:b6:2b:54:fe:24:1c:13:4e:
70:47:e2:57:97:bb:8a:07:b4:94:4d:df:79:dc:81:
fb:0d:f3:74:ff:b1:9d:a1:a3:02:5c:00:15:d5:08:
0c:d0:78:4e:ae:08:1c:a0:2f:38:be:cd:54:ea:75:
11:c3:ea:49:46:bb:97:c5:b4:29:ea:58:aa:25:82:
44:18:90:e7:25:19:5c:54:cd:92:3c:5a:53:63:52:
5b:eb:37:8c:e9:5c:2b:9b:ba:24:60:a8:ea:bf:e5:
ec:8f:62:fd:9d:bc:c6:a7:61:12:7e:7f:5d:38:ea:
a9:18:df:09:bc:bf:38:c5:4d:30:62:c2:d1:dd:45:
30:cd:92:a3:43:70:6f:25:01:41:85:96:30:3f:a1:
df:04:84:56:57:ce:98:24:a2:1f:a3:53:13:9d:0d:
c8:d5:46:49:09:2e:d9:40:7f:dd:85:0a:e2:e5:3d:
d9:5d:eb:0a:d7:83:c0:e4:56:b1:6c:0f:12:c2:a1:
d0:3c:d8:47:4d:b9:a3:fa:da:30:63:b1:1b:17:95:
ba:23:bd:91:03:fe:0d:6b:94:15:b4:3c:46:f3:6d:
78:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B5:48:5E:18:5B:A9:68:FF:B6:57:45:D1:A7:CA:5E:D8:A9:9C:A5
X509v3 Authority Key Identifier:
keyid:8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/VLVIXhhbqWj_tldF0afKXtipnKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.117.0/24
Signature Algorithm: sha256WithRSAEncryption
61:43:a8:60:48:95:a1:cd:df:34:89:d2:7a:fd:e2:a5:4f:4d:
a1:8c:15:09:c5:e3:50:95:2b:06:6e:c2:61:2b:28:51:1c:aa:
34:28:b6:e2:e0:b4:5a:89:f4:4a:be:d7:69:f2:54:68:8b:97:
6a:66:c5:b1:87:54:66:c3:fb:03:57:71:6a:29:24:83:71:30:
e6:47:a1:52:d2:8d:a9:61:ea:5f:24:02:37:88:94:a2:8d:b6:
0b:ec:d0:f0:f2:41:3a:f2:91:1d:aa:f2:06:5b:70:5a:63:a3:
22:da:2d:27:36:48:8d:b3:80:9d:fe:ec:1d:09:db:0d:e3:fe:
29:ad:03:ae:2f:35:dc:15:fd:7f:4f:31:3a:3f:81:29:e1:de:
af:61:70:d2:77:27:ae:a7:32:8d:40:97:f1:4b:af:c5:95:81:
45:58:75:43:72:a1:76:e7:9d:77:69:7f:2d:d5:e0:72:0d:05:
73:7d:18:5f:c0:99:56:e9:80:fb:1a:6d:32:bc:0f:5e:c4:fc:
ff:76:87:b0:aa:13:60:6d:cf:39:c9:d5:6e:dd:fa:33:0b:d9:
f7:45:81:b2:a1:8b:7a:58:94:79:0b:df:1f:52:6e:7b:53:5d:
5c:16:81:a7:6a:2c:cf:ca:de:db:f6:29:54:bd:87:a7:81:ab:
28:2b:d3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:06 2025 by rpki-client