Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/VNZjJ634_jQ-Rpn0kj2uwQ-reFw.roa
File: VNZjJ634_jQ-Rpn0kj2uwQ-reFw.roa (raw, json)
Hash identifier: xLPghJJ2jw4YFzloGhekzQbY/8XW5BAqsWxMLagbqWI=
Subject key identifier: 54:D6:63:27:AD:F8:FE:34:3E:46:99:F4:92:3D:AE:C1:0F:AB:78:5C
Certificate issuer: /CN=ca0046a25341cd1103b60cce0b99ea3754ba5c41
Certificate serial: 01928F0B3F2F3BD0F2AAE8249237DA1CA8A2
Authority key identifier: CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/VNZjJ634_jQ-Rpn0kj2uwQ-reFw.roa
Signing time: Tue 15 Oct 2024 07:18:51 +0000
ROA not before: Tue 15 Oct 2024 07:18:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25400
IP address blocks: 193.160.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8f:0b:3f:2f:3b:d0:f2:aa:e8:24:92:37:da:1c:a8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0046a25341cd1103b60cce0b99ea3754ba5c41
Validity
Not Before: Oct 15 07:18:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54d66327adf8fe343e4699f4923daec10fab785c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:da:b0:ea:1e:9e:4a:18:1a:76:be:6b:cf:2d:
0e:05:b4:80:eb:42:3a:ab:99:01:19:c3:f8:cc:13:
75:73:dc:1c:4d:bf:5e:0f:4e:5d:ab:23:51:03:75:
10:e7:6a:1d:b0:67:dc:2c:a2:0a:75:c3:62:1c:ac:
87:a9:35:66:1e:40:0d:9a:f7:0f:2d:35:92:87:23:
d0:79:24:76:51:20:6a:16:7a:82:30:2a:f3:c5:fb:
23:4e:7a:37:19:a2:76:4a:53:85:74:ce:69:3a:09:
46:78:a5:a5:9a:90:dd:6c:a7:df:fb:74:58:82:dd:
00:9a:d3:6f:8d:a7:51:38:ce:07:dc:8f:49:08:66:
ba:c2:7d:9b:95:1e:c1:98:66:74:c3:8a:aa:b3:00:
80:76:dc:77:dc:2d:3b:26:31:dd:b3:cd:1c:de:f8:
d4:52:75:46:b5:aa:6d:96:04:f1:1e:10:62:fd:56:
bb:3c:47:df:f4:e3:c7:58:7e:b0:b4:7d:23:52:9b:
cd:51:49:40:e6:88:29:5f:b9:a9:01:76:44:20:bb:
c5:06:ad:32:05:ab:4a:39:7a:b3:b9:50:6a:ca:b3:
f9:92:4d:64:b0:dc:41:82:8d:62:e4:5a:43:a6:55:
05:42:10:8f:7e:ac:f7:0b:e4:37:f4:5e:2b:1a:f6:
90:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D6:63:27:AD:F8:FE:34:3E:46:99:F4:92:3D:AE:C1:0F:AB:78:5C
X509v3 Authority Key Identifier:
keyid:CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/VNZjJ634_jQ-Rpn0kj2uwQ-reFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.252.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:2e:da:f6:4b:67:8b:70:d0:e8:c7:60:0a:3a:71:81:7f:11:
97:68:ad:a2:07:3e:eb:09:a7:a9:48:ce:69:99:de:db:48:14:
b3:48:5d:7f:43:b4:d9:be:41:d9:c3:71:f8:df:56:a6:9d:9c:
19:76:5f:8f:7a:fa:6a:ae:b7:51:a5:a8:b2:45:0f:dd:a2:a7:
76:93:d7:15:d5:a5:dc:f0:a7:41:b7:2d:07:bb:84:fb:b6:fb:
40:c2:51:43:0b:3f:ad:11:b3:5c:17:58:03:bb:35:1c:22:0f:
5c:e8:4c:61:15:d1:d6:cf:77:61:0f:25:93:a7:01:69:d1:58:
9d:4f:46:33:b1:99:e7:81:c4:ea:fd:0b:2c:70:a6:d9:b9:7d:
43:05:84:c9:39:24:dc:30:45:f5:86:e6:ad:90:a2:70:68:79:
3e:8d:21:21:2c:d7:16:74:44:0b:62:bc:b7:57:ff:bb:80:8b:
03:2c:30:23:fb:35:0c:bb:11:55:5a:e8:1a:77:06:ef:fb:8e:
bd:51:e9:48:42:11:55:e6:c2:a8:8a:7c:7d:9c:a7:33:4f:4e:
b3:2e:00:76:86:8e:4a:ed:88:71:02:9e:ab:0d:80:8e:72:c9:
e0:91:d4:ba:a0:3e:a4:d2:bf:0f:9e:00:70:65:f3:95:33:c3:
3f:20:f2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:36:01 2025 by rpki-client