Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/VVKk4tyY9fKLu7tCR43kD9Kl-K4.roa
File: VVKk4tyY9fKLu7tCR43kD9Kl-K4.roa (raw, json)
Hash identifier: PCEwGBPbgL2dK+nx2JKri5cXvneGnVhU3w+guGAelzE=
Subject key identifier: 55:52:A4:E2:DC:98:F5:F2:8B:BB:BB:42:47:8D:E4:0F:D2:A5:F8:AE
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC27E4F51EB9E1977C655DC11FE403
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/VVKk4tyY9fKLu7tCR43kD9Kl-K4.roa
Signing time: Wed 01 Jan 2025 17:48:58 +0000
ROA not before: Wed 01 Jan 2025 17:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398465
IP address blocks: 194.180.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Mar 2025 09:53:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:27:e4:f5:1e:b9:e1:97:7c:65:5d:c1:1f:e4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5552a4e2dc98f5f28bbbbb42478de40fd2a5f8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c4:87:74:7e:78:e9:e4:30:d0:f9:8c:e6:2b:
9c:f5:8c:4d:f1:52:dc:8e:b1:11:93:14:ca:b4:ac:
9b:5c:ce:e8:43:23:b5:00:be:dd:ec:40:53:8f:fd:
34:78:b4:d0:71:a9:8d:94:20:e2:84:d1:8b:a3:36:
ea:b2:bc:c3:39:9c:9c:1f:10:26:ea:25:a0:3d:81:
2d:72:2c:35:9f:ff:3a:db:25:6e:5b:b1:ef:e9:d9:
35:cf:16:fc:f1:54:11:41:55:e2:3f:64:13:f1:c3:
66:b5:81:91:90:c3:fe:4b:8f:c5:4d:e8:dc:41:3e:
c6:b4:c9:27:08:d3:f8:ab:37:45:91:8f:61:c5:e2:
b8:5a:aa:fe:0d:3e:81:04:ae:c6:7b:36:79:a7:da:
c7:b8:cf:cd:96:76:25:9a:dd:fb:91:37:ab:16:f7:
ea:7f:4d:ad:ea:95:14:40:ef:f6:29:e4:21:0d:3d:
19:95:16:4f:c1:87:e1:f3:53:be:8a:b9:a2:32:96:
73:32:0d:85:9b:de:b5:ef:48:94:3c:15:29:21:c4:
67:ec:3f:72:d0:80:8e:c2:e9:06:06:cb:c0:b2:7d:
53:53:b2:4d:46:b5:67:02:cb:68:9e:a2:a2:9d:09:
5d:12:f7:76:93:a2:10:e2:89:04:f5:d1:19:4d:ca:
d4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:52:A4:E2:DC:98:F5:F2:8B:BB:BB:42:47:8D:E4:0F:D2:A5:F8:AE
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/VVKk4tyY9fKLu7tCR43kD9Kl-K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.238.0/24
Signature Algorithm: sha256WithRSAEncryption
af:28:82:7f:54:1b:3a:68:b2:cd:4f:dc:df:6e:00:0d:50:23:
41:fd:aa:f2:7c:40:e6:36:30:63:21:88:03:67:67:ca:cd:4c:
e9:a3:40:d7:5f:61:df:68:f3:ac:5d:51:3d:5d:27:48:47:50:
7e:73:d3:37:0a:74:5e:9a:18:21:2c:c5:1e:42:fa:47:68:90:
ba:6e:9c:ec:54:9f:db:8c:9e:f1:a9:9d:a3:de:3f:c4:b9:e7:
da:36:3d:54:ef:e5:e9:8d:4f:45:ce:bc:02:f1:8b:76:3b:1f:
fd:9f:12:9f:76:1b:b8:a2:e1:b4:fb:61:56:6d:db:2c:80:47:
f6:e7:a6:9d:96:41:82:a2:eb:8f:92:24:5e:60:54:e5:41:09:
00:4d:ea:1f:76:61:fa:5c:c6:7c:86:1e:98:02:24:5b:5a:11:
87:1d:c4:9c:67:92:ad:c9:aa:38:51:28:9c:1a:d2:21:e3:20:
f1:58:a6:03:6f:13:a4:c3:85:4d:b7:d1:22:63:24:6b:25:7f:
67:62:86:49:67:c3:64:c8:f5:f2:cd:c4:ba:01:83:c0:e6:4b:
30:97:ee:bb:cc:16:c1:ea:54:78:3d:d1:1c:56:8f:de:f5:6d:
1a:34:5e:da:fc:19:91:d6:e8:85:70:08:a9:d8:d7:67:71:c3:
69:e8:50:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:00:33 2025 by rpki-client