Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/VaQU402WpHGO6QjOLEPxX-FSMBY.roa
File: VaQU402WpHGO6QjOLEPxX-FSMBY.roa (raw, json)
Hash identifier: cMh+0b8DbX9keCYkmCwswtAqX9g1pAT1JmmIJjvhyF0=
Subject key identifier: 55:A4:14:E3:4D:96:A4:71:8E:E9:08:CE:2C:43:F1:5F:E1:52:30:16
Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial: 018E664E829053F7B52AD416F1B7D700A7AB
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/VaQU402WpHGO6QjOLEPxX-FSMBY.roa
Signing time: Fri 22 Mar 2024 13:16:44 +0000
ROA not before: Fri 22 Mar 2024 13:16:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.15.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 17:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:66:4e:82:90:53:f7:b5:2a:d4:16:f1:b7:d7:00:a7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Validity
Not Before: Mar 22 13:16:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55a414e34d96a4718ee908ce2c43f15fe1523016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ae:2e:11:7b:b7:05:bc:f7:04:89:12:57:cf:
64:75:af:00:d3:5c:b2:31:03:57:bd:67:72:5b:96:
d8:de:9f:47:3f:f8:e5:79:d2:e6:8c:44:8e:1d:1b:
84:9d:33:73:5f:70:2c:e0:e1:6a:32:27:42:e1:88:
0a:0e:d9:88:47:3c:f8:64:18:f0:bb:fe:45:38:2c:
44:19:46:3b:98:a6:15:f3:f3:1c:34:0d:be:27:00:
9c:1b:93:ba:43:ab:bf:39:b6:c2:78:d8:51:30:74:
b3:80:d4:45:bb:43:58:ea:93:3b:88:f2:1b:d9:9a:
3f:0f:66:5a:f5:42:10:9e:83:75:7d:03:4f:af:db:
f3:0f:b0:15:41:4a:32:ee:60:fd:54:4d:2f:ac:9f:
30:0a:94:0c:61:4a:30:81:fc:04:19:2d:81:bf:f0:
11:d6:a0:55:88:1d:ea:8f:e3:2e:46:f6:ad:3b:e0:
0d:e1:32:7d:dc:6f:33:c2:f5:58:df:6e:53:62:ae:
5e:bf:f4:6a:a6:73:f4:4b:55:a8:c3:41:d5:2c:a9:
89:f2:17:d3:10:68:01:a4:84:41:58:50:9b:d5:03:
ec:eb:46:ad:d5:c1:b4:ef:95:6e:4b:79:20:57:be:
0a:f4:a9:1f:0d:4f:37:c7:d6:a3:f7:b8:fd:3b:8b:
fe:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A4:14:E3:4D:96:A4:71:8E:E9:08:CE:2C:43:F1:5F:E1:52:30:16
X509v3 Authority Key Identifier:
keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/VaQU402WpHGO6QjOLEPxX-FSMBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.41.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f5:10:bf:b7:bf:5b:49:80:37:d8:9e:8f:7a:6d:5e:c0:19:
5b:56:7e:a5:d0:bf:1c:41:ec:99:2a:7e:27:18:05:da:74:d4:
2f:c8:29:31:29:ab:d8:f0:6c:80:08:f4:77:34:ca:45:06:87:
01:d3:a5:e3:84:2b:d7:3a:0c:04:03:6d:84:00:a1:ff:23:03:
c0:07:d4:64:88:63:c9:63:6c:4e:0d:06:32:73:8b:25:99:0a:
55:ab:f7:83:14:97:13:8c:7c:25:fc:56:de:82:15:e5:f5:7b:
35:95:fe:c1:24:73:5e:4d:7c:07:ef:dc:dc:c4:e6:2c:7a:86:
02:71:c4:22:aa:6e:3a:02:5a:09:70:96:ca:18:80:ee:e6:f3:
67:8b:18:8d:a3:3b:bb:cf:97:25:90:ae:8b:94:b1:28:aa:89:
9d:69:d5:ec:03:d9:85:9d:0b:0e:02:0d:f9:fd:5c:56:28:33:
17:01:dd:2b:4f:b9:70:37:d4:c9:1e:e0:aa:22:5f:f5:ef:51:
02:b6:b3:8e:98:f8:b6:8e:11:a0:a2:21:08:86:29:1e:f3:91:
c6:f3:80:6e:40:d0:a9:6c:0c:63:a2:13:61:81:57:d0:18:8c:
d4:84:1d:24:ca:ab:dc:c6:cc:46:e4:ff:f0:b3:10:a1:4b:40:
89:d2:dc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:59 2025 by rpki-client