Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/VLKsD6WnZJQIyG2kneBh9gr5HNc.roa
File: VLKsD6WnZJQIyG2kneBh9gr5HNc.roa (raw, json)
Hash identifier: vnoQF1XhG4J/yjEwcoQgzg9zLyI5eHvI+Os72kiF9/A=
Subject key identifier: 54:B2:AC:0F:A5:A7:64:94:08:C8:6D:A4:9D:E0:61:F6:0A:F9:1C:D7
Certificate issuer: /CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Certificate serial: 01970CF7C8C2DDAC39405671D2F38A57D808
Authority key identifier: 5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/VLKsD6WnZJQIyG2kneBh9gr5HNc.roa
Signing time: Mon 26 May 2025 14:20:54 +0000
ROA not before: Mon 26 May 2025 14:20:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58030
IP address blocks: 91.238.0.0/24 maxlen: 24
2001:67c:1158::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 May 2025 16:20:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0c:f7:c8:c2:dd:ac:39:40:56:71:d2:f3:8a:57:d8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Validity
Not Before: May 26 14:20:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54b2ac0fa5a7649408c86da49de061f60af91cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e7:71:55:af:72:69:ad:5f:18:ba:8a:12:86:
b4:2e:0c:b2:30:96:4b:f3:0a:49:db:64:81:8a:56:
9f:ed:c7:f4:2a:7a:1a:6b:21:39:6e:8f:3f:40:34:
b3:13:ab:78:e8:0a:f7:60:a9:78:e4:f0:58:13:69:
bb:9c:e6:c8:f2:b9:ae:67:27:28:ac:f7:62:33:00:
ae:a6:02:47:97:ac:3c:1f:ed:13:32:67:48:ea:5b:
e9:0a:57:a9:d4:3b:e4:72:9b:17:a0:c0:ec:10:dd:
c3:63:f0:d4:87:c5:88:1d:2f:a3:dc:1d:ed:e3:41:
1a:69:43:c3:e4:14:ae:3e:0d:42:16:64:47:5e:a1:
93:dc:77:8f:9c:4c:fc:a3:2b:35:68:d2:36:28:e7:
7c:3f:f0:2c:20:0a:7b:31:db:83:f2:fc:53:62:5b:
98:85:03:68:42:aa:8b:ca:11:c4:82:c3:7e:52:6a:
fe:80:b8:57:d2:43:ba:e0:9e:9c:9b:b2:6c:02:02:
f4:ab:94:90:ee:53:77:4f:32:ac:c1:5c:1a:be:2f:
65:ab:87:6f:c4:99:67:3a:02:55:99:90:2a:4b:71:
cf:ce:c4:a4:50:1b:4f:8e:d4:86:1d:b4:52:d3:a4:
a2:d9:f8:bb:34:e7:73:4a:d8:14:ea:4c:e9:af:cb:
b8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B2:AC:0F:A5:A7:64:94:08:C8:6D:A4:9D:E0:61:F6:0A:F9:1C:D7
X509v3 Authority Key Identifier:
keyid:5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/VLKsD6WnZJQIyG2kneBh9gr5HNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.0.0/24
IPv6:
2001:67c:1158::/48
Signature Algorithm: sha256WithRSAEncryption
47:5e:94:c9:86:e2:78:33:b5:54:dd:53:68:0a:5b:fd:36:67:
dc:d8:32:1d:cb:65:db:a7:21:3b:fc:fb:82:69:ab:d4:16:a9:
80:08:99:bd:e7:35:6c:94:85:25:92:ae:19:89:c3:43:cb:63:
33:25:7b:9a:bf:31:50:bd:73:4f:bf:bb:11:ea:5e:62:4d:af:
24:3c:2f:6b:92:4c:b5:f4:8f:9d:c9:07:2f:c9:57:1a:83:6a:
db:49:6c:e3:4c:29:43:55:17:2c:08:7f:f3:d7:a1:d4:ab:f6:
f5:e8:1a:c7:b8:25:59:9a:4c:41:e9:bf:2e:03:c4:70:de:56:
ea:d1:fa:0a:aa:a5:8b:23:6c:6f:99:87:f9:94:ea:35:4f:1a:
3e:5f:27:d3:88:05:c8:47:75:17:a9:f4:da:8d:c2:f0:f4:57:
c5:a7:45:e1:8a:f6:54:95:19:e6:81:8b:ef:f5:e6:ee:4f:79:
6c:62:90:28:f8:d7:32:84:29:5e:3c:59:f8:a1:30:57:cb:cb:
c3:f3:bd:05:21:72:ee:bc:52:47:82:9d:f2:46:4e:47:e9:fc:
14:d4:7e:21:92:cd:84:89:84:0a:da:77:17:b4:36:02:d8:2a:
47:ac:26:67:24:f5:d8:cc:d4:cf:96:68:bd:c5:fe:3e:3f:d8:
53:73:3d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:03:17 2025 by rpki-client