Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/vYkOLwXvgrH_Rj0TmsJR84D7pR8.roa
File: vYkOLwXvgrH_Rj0TmsJR84D7pR8.roa (raw, json)
Hash identifier: 1dQ0s47rM+2CJzNs4hclDPJ9D+HTyr3XgUnQ/2M216Q=
Subject key identifier: BD:89:0E:2F:05:EF:82:B1:FF:46:3D:13:9A:C2:51:F3:80:FB:A5:1F
Certificate issuer: /CN=e93136b445fba1ccc1f43c43590e9bd9a5aa5182
Certificate serial: 0191EB40F810CA367718FF277AF6CADF5014
Authority key identifier: E9:31:36:B4:45:FB:A1:CC:C1:F4:3C:43:59:0E:9B:D9:A5:AA:51:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TE2tEX7oczB9DxDWQ6b2aWqUYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/vYkOLwXvgrH_Rj0TmsJR84D7pR8.roa
Signing time: Fri 13 Sep 2024 11:59:48 +0000
ROA not before: Fri 13 Sep 2024 11:59:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 216.162.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:eb:40:f8:10:ca:36:77:18:ff:27:7a:f6:ca:df:50:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93136b445fba1ccc1f43c43590e9bd9a5aa5182
Validity
Not Before: Sep 13 11:59:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd890e2f05ef82b1ff463d139ac251f380fba51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:20:00:4e:20:10:64:4f:25:59:4f:98:e9:b6:
4a:6d:ce:b1:72:46:6e:71:12:b3:92:01:91:6f:e4:
33:fc:09:2f:04:52:20:ac:51:e0:72:9f:ab:86:18:
3c:40:73:76:e7:03:dd:dd:9b:d0:74:f0:e5:c2:a8:
dd:db:0b:32:ca:07:bd:30:3e:fa:6f:f7:83:e9:a6:
e9:fb:c7:e5:58:fd:21:1a:06:bb:06:0f:2c:6e:05:
b1:e3:6f:a6:fc:42:24:23:12:8b:fa:79:92:e2:37:
71:08:ae:54:09:dd:39:6f:5f:01:a6:1b:c3:87:86:
0d:24:e3:19:dd:12:f8:55:e0:2c:1a:8f:8b:6d:a5:
62:e6:57:5b:10:10:a0:ee:38:a7:57:30:32:a3:c0:
f0:3a:31:12:34:39:53:6a:17:f2:2d:df:0a:f0:5e:
79:c9:5e:60:7e:e9:48:24:ee:5a:8e:6c:f0:94:c6:
ec:df:29:97:0f:6d:ce:fb:ea:0e:9f:c2:b7:e6:10:
93:8d:0f:0d:bd:38:3f:b9:7a:d6:28:4a:fe:f1:28:
a8:db:2c:30:59:b3:d1:a7:59:f9:52:52:b2:ec:c0:
7f:ba:a7:3b:aa:9a:47:6b:40:c3:af:00:fe:c2:86:
73:72:3a:c4:62:b5:c9:3a:a5:d3:f9:09:4f:f9:b4:
ec:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:89:0E:2F:05:EF:82:B1:FF:46:3D:13:9A:C2:51:F3:80:FB:A5:1F
X509v3 Authority Key Identifier:
keyid:E9:31:36:B4:45:FB:A1:CC:C1:F4:3C:43:59:0E:9B:D9:A5:AA:51:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TE2tEX7oczB9DxDWQ6b2aWqUYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/vYkOLwXvgrH_Rj0TmsJR84D7pR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.162.200.0/24
Signature Algorithm: sha256WithRSAEncryption
62:73:bb:3d:90:8e:7d:91:2a:76:83:91:65:78:15:f1:7e:23:
d1:91:c4:a8:f5:e3:44:93:fd:15:ba:53:e0:cc:85:c9:2a:a2:
8f:9e:d5:67:c6:f2:bb:61:68:31:89:5e:94:f5:ff:a3:c8:b5:
b9:57:0e:40:7c:25:a9:d4:a7:26:1d:48:5f:29:0a:4a:66:c3:
fd:54:73:58:da:5c:2d:b9:a3:e3:26:de:2d:2a:34:bf:e4:2d:
7e:11:ef:0f:36:48:5b:35:e6:62:ca:68:83:7f:ca:44:fe:83:
23:e5:83:80:47:54:c6:31:e4:0b:1b:58:d7:bc:44:ae:99:5d:
03:79:03:98:39:71:7d:b7:23:5d:58:22:33:7a:2e:64:9c:7e:
e6:b7:57:07:bf:4a:c5:7e:e6:a0:52:a1:31:8f:79:03:3f:a3:
d6:40:c1:34:f2:12:f6:e2:30:2e:8a:66:f4:e8:f6:54:d7:5d:
90:03:55:51:00:b0:89:23:d0:b5:be:38:89:d9:88:bf:6f:b3:
84:68:4c:de:08:fa:21:3b:8a:31:f4:6e:78:64:af:80:2e:68:
ea:7a:e7:52:2b:0c:a3:2e:bb:d3:66:69:43:67:dc:50:7b:0e:
a9:eb:96:f3:af:e1:25:46:54:08:0b:db:50:b3:8d:ed:47:55:
f9:bf:91:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:28 2025 by rpki-client