Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/VOJRD1L_QOGvopqPwpFAa_2tOEE.roa
File: VOJRD1L_QOGvopqPwpFAa_2tOEE.roa (raw, json)
Hash identifier: 0cGRHbvcYKJB1B7EqDKbn9fzLffBt3j52vWekP0JBMA=
Subject key identifier: 54:E2:51:0F:52:FF:40:E1:AF:A2:9A:8F:C2:91:40:6B:FD:AD:38:41
Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial: 0196F7855EBD6BA2981A6247AEF42EE244A1
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/VOJRD1L_QOGvopqPwpFAa_2tOEE.roa
Signing time: Thu 22 May 2025 10:23:54 +0000
ROA not before: Thu 22 May 2025 10:23:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 145.40.120.0/22 maxlen: 22
147.28.138.0/23 maxlen: 23
147.28.164.0/23 maxlen: 23
147.28.166.0/23 maxlen: 23
147.28.176.0/23 maxlen: 23
147.28.189.0/24 maxlen: 24
147.28.210.0/23 maxlen: 23
147.28.214.0/23 maxlen: 23
147.28.222.0/23 maxlen: 23
147.28.241.0/24 maxlen: 24
147.75.40.0/23 maxlen: 23
147.75.206.0/24 maxlen: 24
147.75.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 May 2025 10:42:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:85:5e:bd:6b:a2:98:1a:62:47:ae:f4:2e:e2:44:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
Validity
Not Before: May 22 10:23:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54e2510f52ff40e1afa29a8fc291406bfdad3841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:27:34:b9:2e:3e:ae:62:c8:62:ab:c4:c6:
7b:bf:29:67:88:bf:63:ca:ec:21:6c:95:b8:63:91:
02:ce:fe:1f:43:68:9f:f9:48:e4:c6:d0:fd:df:67:
a9:b9:a3:6d:95:fe:ed:41:ba:9b:60:33:1f:93:8b:
18:c0:c8:f6:3e:21:e8:d9:dc:d3:2f:b2:d2:62:5f:
cf:f0:18:10:f5:95:00:1a:73:10:c0:d4:67:1d:44:
d9:8d:f4:30:37:17:0a:ba:a1:3d:f8:45:0d:73:f7:
6c:06:8b:3a:76:d5:8a:f2:a9:ed:aa:94:57:c4:f9:
ae:89:09:44:d3:14:f2:64:cf:0e:97:fd:b4:d7:93:
9d:5a:4c:bd:45:0d:b6:40:c9:1d:b6:de:2e:a2:a1:
40:60:75:91:2c:2a:83:cb:1b:20:11:eb:ac:e2:01:
f3:3f:ac:d2:58:cd:11:ac:fa:7b:1b:9e:70:ba:ef:
b3:8c:72:c2:43:b0:c4:a5:98:16:23:0b:73:cc:6f:
8f:c4:54:d2:66:21:01:7b:0d:8a:01:af:2e:50:12:
32:0d:00:d8:23:08:6e:dc:91:3f:6e:1b:3b:bf:0c:
13:33:78:52:95:59:33:00:d7:95:e1:78:db:dc:d9:
a8:37:c0:d6:8a:f8:8e:bc:8c:03:2b:e7:91:01:c1:
2c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E2:51:0F:52:FF:40:E1:AF:A2:9A:8F:C2:91:40:6B:FD:AD:38:41
X509v3 Authority Key Identifier:
keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/VOJRD1L_QOGvopqPwpFAa_2tOEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.40.120.0/22
147.28.138.0/23
147.28.164.0/22
147.28.176.0/23
147.28.189.0/24
147.28.210.0/23
147.28.214.0/23
147.28.222.0/23
147.28.241.0/24
147.75.40.0/23
147.75.206.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:61:61:8b:aa:dc:5f:6a:f4:67:07:5f:b5:b2:40:53:7f:4d:
e8:49:c2:92:c9:94:1b:aa:c7:b3:1a:49:a7:8c:c8:60:ad:fb:
ec:e1:8c:6c:a0:cf:df:e1:3d:e1:56:cd:00:55:0f:22:28:e2:
22:2e:6d:e7:4d:c3:5a:4a:19:e6:d5:52:64:0e:ba:a9:10:79:
f1:08:40:64:97:14:55:73:c8:80:7e:f6:b9:81:0e:c0:fe:44:
a1:a4:f4:b2:4c:0c:2a:6f:d3:a5:29:d6:e7:f5:4d:c2:c3:4f:
81:11:e9:8a:59:57:d9:57:10:ad:d2:18:3c:18:e4:e5:86:72:
e3:91:d6:86:28:45:91:1b:8b:92:a2:ba:c5:b1:f3:8b:8a:5c:
8b:37:59:0c:ec:ad:af:81:a1:73:7a:12:b1:cc:63:96:59:5c:
15:fb:db:d2:38:be:71:90:b2:4b:47:d5:ff:fb:8b:b4:95:f9:
e4:d4:e7:1c:fb:53:1b:d0:32:1c:51:8f:6c:9f:a7:a0:03:30:
67:2a:25:47:e5:1c:7f:a9:7d:0d:9b:9d:12:6f:62:1d:ce:d9:
93:9c:b5:3f:6c:54:21:4a:1d:5d:5b:43:9a:84:b3:42:49:15:
54:c5:88:55:3e:98:b8:4e:87:e4:7e:3d:08:ad:de:45:0c:c7:
0c:6d:76:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:40:22 2025 by rpki-client