Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/VBMurawJsfgXDsKUmMBz6eF3ODg.roa
File: VBMurawJsfgXDsKUmMBz6eF3ODg.roa (raw, json)
Hash identifier: Ebu5Aj6S6fa0UBVS71cjds8Xb5S2BQUWZssRWGTAcKQ=
Subject key identifier: 54:13:2E:AD:AC:09:B1:F8:17:0E:C2:94:98:C0:73:E9:E1:77:38:38
Certificate issuer: /CN=3b363e09bd6942adab42415999f979990ab96682
Certificate serial: 018CC3B70C573800A7BCC85FE38F304CBAB9
Authority key identifier: 3B:36:3E:09:BD:69:42:AD:AB:42:41:59:99:F9:79:99:0A:B9:66:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/VBMurawJsfgXDsKUmMBz6eF3ODg.roa
Signing time: Mon 01 Jan 2024 06:30:02 +0000
ROA not before: Mon 01 Jan 2024 06:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211140
IP address blocks: 149.255.184.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:0c:57:38:00:a7:bc:c8:5f:e3:8f:30:4c:ba:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b363e09bd6942adab42415999f979990ab96682
Validity
Not Before: Jan 1 06:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54132eadac09b1f8170ec29498c073e9e1773838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3d:aa:bf:ce:07:79:18:b1:02:e7:54:4d:60:
cb:69:e7:34:92:f7:a6:4a:cb:e9:49:3b:ad:51:2b:
bb:a8:d8:0e:47:6c:de:b5:9b:a2:3e:19:cd:48:e6:
bc:2a:55:9b:97:42:10:7c:68:cd:53:72:53:5e:f5:
10:a5:41:3e:16:8e:33:dd:aa:2e:b1:bf:26:9d:bf:
db:e9:31:ab:64:cf:07:c2:5c:3b:c0:97:89:77:95:
74:6e:7f:00:37:ad:71:8b:90:93:40:98:0e:66:79:
4a:f2:e9:d9:95:4a:c9:f3:8a:d7:06:1d:8b:8a:cb:
b0:df:b0:dd:cc:2b:71:be:b8:de:52:d3:de:1c:63:
d8:c2:51:21:5f:22:78:ba:21:ba:99:f7:94:cf:dc:
a4:b8:26:cd:95:7e:d5:33:4b:97:f1:d0:53:fd:54:
b0:12:5f:6a:d5:33:31:73:f9:cc:37:13:78:88:8c:
a8:d8:0e:c9:1f:44:14:bb:bd:b1:c4:c5:9d:a7:a3:
97:94:d4:0a:ce:29:42:36:eb:60:3a:99:6b:b3:95:
a0:52:0a:83:08:95:34:3f:19:aa:15:d4:e5:0b:2a:
96:30:65:16:05:46:66:f8:0b:39:b0:96:7d:bf:97:
24:39:0f:1a:1b:94:4b:68:b8:da:43:a0:d2:05:68:
65:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:13:2E:AD:AC:09:B1:F8:17:0E:C2:94:98:C0:73:E9:E1:77:38:38
X509v3 Authority Key Identifier:
keyid:3B:36:3E:09:BD:69:42:AD:AB:42:41:59:99:F9:79:99:0A:B9:66:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/VBMurawJsfgXDsKUmMBz6eF3ODg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.255.184.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:fe:15:de:a0:6a:2e:59:a0:47:b2:c0:2a:6c:8c:81:68:69:
91:bc:46:38:ea:49:ca:e7:be:5a:d7:2b:4f:47:dc:ff:92:46:
5d:27:4e:45:b1:ac:30:bf:91:96:8b:34:fe:5e:bd:de:24:68:
3a:af:76:96:1e:ed:e9:cf:bf:34:7a:b7:aa:88:54:85:0f:5c:
4a:51:21:c5:62:8f:6f:42:97:28:96:04:aa:e8:5e:83:3b:c9:
10:7c:3a:7c:d0:e5:79:5f:78:62:b3:be:ca:1c:7b:e7:3d:2c:
a1:ef:51:de:5f:d4:a1:b3:c5:17:f8:41:ef:cd:52:38:0b:c3:
69:89:99:96:cb:95:99:63:4a:8c:88:64:b6:21:88:83:03:b7:
16:35:77:74:ab:c3:2d:e5:d9:86:a5:0f:93:87:23:bf:f2:24:
e3:4c:63:8d:5d:28:f2:f6:30:19:75:ec:7c:f4:e2:47:f3:47:
23:91:67:9e:8d:1f:17:ec:c8:f5:f8:7e:a9:78:c9:c1:3b:81:
4d:36:51:6b:a0:bd:76:f0:a3:07:ee:e1:d4:18:de:cf:5d:4d:
00:a3:8b:c3:3a:45:30:43:41:f9:7f:c6:72:81:63:66:74:e7:
27:ca:2b:3f:7e:99:5a:d8:71:26:b4:b4:89:f1:f4:55:bb:15:
19:21:25:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:08:26 2025 by rpki-client