Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/vpmB5uxofGV9voGf1u33PSs0PFE.roa
File: vpmB5uxofGV9voGf1u33PSs0PFE.roa (raw, json)
Hash identifier: /RI7xbJHRGoQkccLubfNShh0gpEnFmo91a7sc0u/LJw=
Subject key identifier: BE:99:81:E6:EC:68:7C:65:7D:BE:81:9F:D6:ED:F7:3D:2B:34:3C:51
Certificate issuer: /CN=8174861ddef06a073523c9939168d5b7169d6875
Certificate serial: 018CC5DC2F621B8E58019307F4A56F45EB20
Authority key identifier: 81:74:86:1D:DE:F0:6A:07:35:23:C9:93:91:68:D5:B7:16:9D:68:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXSGHd7wagc1I8mTkWjVtxadaHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/vpmB5uxofGV9voGf1u33PSs0PFE.roa
Signing time: Mon 01 Jan 2024 16:29:50 +0000
ROA not before: Mon 01 Jan 2024 16:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213241
IP address blocks: 84.38.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:2f:62:1b:8e:58:01:93:07:f4:a5:6f:45:eb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8174861ddef06a073523c9939168d5b7169d6875
Validity
Not Before: Jan 1 16:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be9981e6ec687c657dbe819fd6edf73d2b343c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bd:f4:95:dd:98:5b:9d:92:b9:76:6c:8c:9e:
ad:91:ab:89:bf:85:48:b4:aa:85:6a:80:84:a4:e2:
61:b1:2c:0e:07:a3:55:7c:6e:be:1b:39:11:30:c4:
6b:d0:3f:46:4c:80:8e:29:ed:45:44:5b:47:5d:31:
55:56:e1:28:62:c3:49:0e:74:f5:81:70:1d:3f:1d:
85:1b:45:88:ba:ab:a1:16:6c:2a:91:0d:53:a2:f6:
07:24:0f:8e:1d:64:e7:91:30:32:aa:57:d5:89:d3:
61:09:4d:b1:d6:8a:e6:ff:f9:9c:e4:df:b0:1e:3e:
1c:ee:4f:0f:c1:16:44:2a:7c:c2:01:b6:46:de:bd:
9d:e0:9d:ab:fb:3d:a5:32:a1:09:4e:6d:e6:05:cc:
80:12:8c:8b:d2:5f:7b:4d:43:4c:56:2b:67:ae:69:
54:65:36:eb:5f:2a:a8:6d:68:4c:ec:ce:40:c9:d0:
9c:c1:1a:69:eb:e8:19:4c:69:da:de:48:4c:86:04:
0b:05:4c:b7:09:d7:40:91:82:9c:65:9d:91:df:87:
41:27:a5:e7:d3:cc:a4:09:bd:7f:6c:80:5b:cf:53:
0e:bf:40:0a:2c:be:c2:f8:ca:95:8b:a9:17:fd:d3:
70:75:ed:50:01:9f:d4:e2:f2:97:01:44:a8:99:1e:
ac:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:99:81:E6:EC:68:7C:65:7D:BE:81:9F:D6:ED:F7:3D:2B:34:3C:51
X509v3 Authority Key Identifier:
keyid:81:74:86:1D:DE:F0:6A:07:35:23:C9:93:91:68:D5:B7:16:9D:68:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXSGHd7wagc1I8mTkWjVtxadaHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/vpmB5uxofGV9voGf1u33PSs0PFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0bd15a-4c49-40fc-9192-b2a47ed416b2/1/gXSGHd7wagc1I8mTkWjVtxadaHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.249.0/24
Signature Algorithm: sha256WithRSAEncryption
be:cd:60:a5:af:9e:33:bf:e9:10:cc:ab:91:95:9c:58:ff:20:
d6:84:cc:03:9e:6f:26:57:9a:16:10:1e:6d:fa:b5:f3:19:8d:
11:7b:e0:d2:a9:68:7f:09:7f:98:c7:11:fd:0a:49:2a:75:c8:
19:43:48:1d:5e:cd:d2:16:9b:f1:f9:70:02:ed:35:f7:83:76:
61:af:b8:dc:ee:43:d8:e9:f4:28:d7:cd:0d:a9:9c:98:32:86:
2a:01:89:ac:62:d0:dd:e1:c6:b2:cb:e1:60:ef:a1:50:e5:e4:
74:f2:b7:a8:08:e0:2e:77:2d:e4:59:18:e0:42:40:72:1d:42:
33:a9:0c:fa:e6:8b:d2:e5:9a:72:c7:8b:f5:ff:40:f9:1d:3d:
f7:e4:1a:d5:88:3c:00:35:14:3a:47:45:90:74:01:07:00:0d:
03:d6:9f:68:0f:de:44:fc:75:53:e1:50:64:ea:1a:33:2b:13:
28:9c:f3:29:18:98:08:4c:32:fc:e4:10:f5:be:db:f3:cb:85:
56:2c:de:8f:a4:93:3e:10:07:40:b8:da:5d:9b:e6:a2:68:e7:
4c:a2:d1:c9:32:64:f0:1a:ff:b4:19:0a:81:52:4d:f4:cd:eb:
54:6c:f2:3b:80:73:dc:5d:d5:53:5a:35:7a:20:90:c2:88:cb:
3b:fe:d0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:14 2025 by rpki-client