Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/VFFMdPJ2wLVEen3Dz5PahtkvfXE.roa
File: VFFMdPJ2wLVEen3Dz5PahtkvfXE.roa (raw, json)
Hash identifier: SSb5FXonbsqHT5i5IJGuX0QLxywuYHOnv+uu+xnpAnM=
Subject key identifier: 54:51:4C:74:F2:76:C0:B5:44:7A:7D:C3:CF:93:DA:86:D9:2F:7D:71
Certificate issuer: /CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Certificate serial: 0193D4363467B32E549CE7394EA401887092
Authority key identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/VFFMdPJ2wLVEen3Dz5PahtkvfXE.roa
Signing time: Tue 17 Dec 2024 10:42:22 +0000
ROA not before: Tue 17 Dec 2024 10:42:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44066
IP address blocks: 185.197.165.0/24 maxlen: 24
185.197.166.0/24 maxlen: 24
185.197.167.0/24 maxlen: 24
2a0a:7bc0::/32 maxlen: 32
2a0a:7bc7::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d4:36:34:67:b3:2e:54:9c:e7:39:4e:a4:01:88:70:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Validity
Not Before: Dec 17 10:42:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54514c74f276c0b5447a7dc3cf93da86d92f7d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0f:ae:06:43:6b:cb:ba:a3:40:b6:9b:3a:cb:
3e:6f:9b:93:71:6b:13:82:c8:81:75:f6:a8:44:ab:
be:1b:41:9b:c9:52:31:78:52:15:ba:d4:c2:5d:19:
af:70:c2:ce:91:37:2b:66:bc:de:9c:dc:dc:4c:1f:
f2:8a:3e:6c:84:e6:5d:7f:8d:68:0a:44:50:e8:4a:
84:31:48:4a:9d:d7:f4:7c:bc:e3:16:57:d5:4b:eb:
93:fc:23:57:da:f4:cc:e1:30:f6:ff:be:ef:2e:53:
61:50:68:e8:47:7c:dc:44:b7:d4:51:68:29:0c:6a:
18:05:ae:73:e4:d7:f8:90:c7:44:ec:6f:9c:7d:d5:
ec:52:a1:a8:0c:d3:4b:8b:1f:cc:d4:f9:8c:1a:74:
48:28:20:0a:f0:ee:7a:9c:09:6d:af:bd:c4:83:16:
17:7a:3e:54:ae:6a:a4:38:ed:36:23:a2:91:33:25:
ca:5c:0f:4c:cb:0b:27:8a:5d:df:fa:bb:6e:43:11:
a2:52:a7:6e:bc:6a:ba:7c:71:37:4a:ce:f1:5f:4e:
a6:ed:95:77:a9:d5:91:db:20:6e:e5:a6:90:ab:d6:
53:69:67:76:6f:2f:f6:c5:0d:cb:ce:c5:c7:63:3f:
9f:71:b3:50:46:5d:d7:48:1b:2f:06:71:86:3f:ea:
4a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:51:4C:74:F2:76:C0:B5:44:7A:7D:C3:CF:93:DA:86:D9:2F:7D:71
X509v3 Authority Key Identifier:
keyid:D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/VFFMdPJ2wLVEen3Dz5PahtkvfXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.165.0-185.197.167.255
IPv6:
2a0a:7bc0::/32
2a0a:7bc7::/32
Signature Algorithm: sha256WithRSAEncryption
81:05:3e:ce:c0:2d:4d:7e:64:b3:dd:c8:2b:61:79:19:c2:57:
76:fc:25:99:fe:7f:83:b7:ec:1b:91:4d:7c:6a:92:be:04:30:
e0:7a:44:2b:49:a4:1f:be:39:64:c7:fb:1b:77:c1:1c:6a:9d:
f5:4e:e3:43:83:9f:ae:7a:07:2a:9a:1c:13:8f:9d:b7:c5:e4:
e0:3b:9b:36:60:74:16:20:fd:f3:d9:59:ac:ca:02:18:c9:eb:
1d:74:d7:86:dd:0b:54:ee:9f:18:32:e6:b6:13:9f:19:ff:0f:
7a:32:97:e4:c2:0c:a8:2b:db:81:5b:ce:2a:ed:f2:8d:ac:62:
48:43:d0:64:dd:39:f6:78:43:d4:f2:c2:67:f9:13:8d:5e:3c:
af:29:a3:a2:46:71:d8:b8:74:f5:ea:4d:a1:e2:47:8f:57:87:
c5:58:34:82:9d:e5:12:15:a1:c0:ab:6c:fc:17:4e:5d:73:7b:
07:15:47:ea:7b:25:d8:a6:06:bf:58:44:e0:35:1d:5b:7d:b8:
d6:11:1f:01:7f:e9:e2:00:bf:23:f5:c5:48:49:ee:fb:31:fd:
9d:ff:63:c7:aa:75:19:8f:f1:42:24:48:ab:d7:0e:7c:a5:08:
a7:21:69:00:eb:1b:ab:3f:34:6f:de:e0:dd:98:93:ee:2d:02:
09:82:cc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:26:13 2025 by rpki-client