Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/vgGlob2EWw7x2CTFvb4t2uSz4bM.roa
File: vgGlob2EWw7x2CTFvb4t2uSz4bM.roa (raw, json)
Hash identifier: FAuDbmmkoJhueEwogmbY+JWliESycxReZBsf8hbmiGQ=
Subject key identifier: BE:01:A5:A1:BD:84:5B:0E:F1:D8:24:C5:BD:BE:2D:DA:E4:B3:E1:B3
Certificate issuer: /CN=a6a8f3436fd83e8af610f216808996e90acac75d
Certificate serial: 0194F7DC12ACCA2274AB0D24D17376A0DC01
Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/vgGlob2EWw7x2CTFvb4t2uSz4bM.roa
Signing time: Wed 12 Feb 2025 01:53:02 +0000
ROA not before: Wed 12 Feb 2025 01:53:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 94.232.40.0/24 maxlen: 24
94.232.41.0/24 maxlen: 24
94.232.42.0/24 maxlen: 24
94.232.43.0/24 maxlen: 24
94.232.44.0/24 maxlen: 24
94.232.45.0/24 maxlen: 24
94.232.46.0/24 maxlen: 24
94.232.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Mar 2025 17:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f7:dc:12:ac:ca:22:74:ab:0d:24:d1:73:76:a0:dc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d
Validity
Not Before: Feb 12 01:53:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be01a5a1bd845b0ef1d824c5bdbe2ddae4b3e1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5a:6b:b3:54:03:27:15:a0:b3:99:91:9a:3f:
e9:d6:a6:31:fd:af:ee:0b:ff:a5:47:e3:59:db:3f:
95:e2:fa:f4:51:35:29:32:b0:8d:c6:5b:5c:47:d0:
50:23:f7:25:19:7e:32:bf:01:4f:f9:b9:47:b5:aa:
59:99:d4:07:52:33:78:f3:28:21:0a:ad:84:a9:02:
fa:63:bf:a7:73:cf:1c:3a:cc:6f:4c:49:c0:7b:64:
e9:da:52:32:3e:bf:2e:0d:eb:f9:3a:0b:80:fa:25:
29:63:d7:5b:39:d0:85:27:8d:ae:e3:68:8f:6e:d6:
f8:83:f5:d7:3e:ea:bd:b9:19:08:b1:7a:d7:84:b4:
f4:1b:68:fc:ac:28:d8:3e:4d:d4:69:b5:61:e8:36:
a3:39:f9:41:15:05:9f:06:84:74:f9:a8:3a:72:2c:
ae:3f:e4:a3:cb:3d:31:44:4c:29:55:e1:9f:35:e3:
b1:df:1a:30:4f:17:f4:de:d5:cf:3b:72:b6:6b:6d:
1c:13:a9:ec:78:27:c9:95:a3:03:3e:d1:9b:b4:36:
3d:a9:f3:f5:4c:64:b7:d5:13:a9:50:3c:dd:68:c8:
1c:26:a0:d0:e4:04:56:0b:3b:ab:21:8a:45:27:2a:
46:af:f8:ec:73:dc:a2:1c:5c:fd:c1:85:c5:be:3c:
52:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:01:A5:A1:BD:84:5B:0E:F1:D8:24:C5:BD:BE:2D:DA:E4:B3:E1:B3
X509v3 Authority Key Identifier:
keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/vgGlob2EWw7x2CTFvb4t2uSz4bM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.40.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:ac:66:16:f3:61:f3:75:69:af:4b:31:96:ff:71:b4:90:f4:
d6:29:04:16:0b:68:71:05:1d:3c:0f:37:2e:cc:33:b2:ae:c3:
de:b8:41:8a:54:47:f7:74:9e:37:65:25:f9:ac:a5:97:f0:45:
49:f9:f2:73:ad:56:93:13:61:a9:c7:4c:20:38:03:c1:be:ac:
3d:54:b1:c0:4f:72:6d:79:aa:e2:3f:6e:80:ed:75:1f:d5:83:
58:49:9f:d9:0e:39:25:d1:6d:66:5e:73:b3:b2:c2:7b:89:90:
5e:9f:7a:b5:07:ab:15:12:7e:7c:f1:54:ba:f5:90:4e:c6:ea:
69:d6:c0:cd:f4:8f:4c:e5:e3:1c:af:59:09:2f:3c:1c:bf:09:
f2:b1:af:02:00:ad:00:08:c2:5d:15:c6:9a:e7:f4:ba:39:6a:
0c:f7:1c:23:a5:d8:84:3c:f3:8a:81:db:80:2a:a7:b2:89:d4:
39:5c:b7:6f:81:14:c2:1e:95:87:0e:8f:08:d4:25:67:a1:de:
4b:8a:88:64:8f:1e:30:7e:be:6c:f8:c6:18:7a:f2:c0:08:d0:
06:d2:d5:83:e7:0a:b0:ea:0e:8f:8d:fa:42:01:c4:02:01:4c:
3a:8e:3e:3c:22:43:f9:52:79:ad:ff:70:2d:dd:64:3b:51:6e:
5b:ec:0a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:12:07 2025 by rpki-client