Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/vtuSiPc661Y4V_WTuYDfk27LMH8.roa
File: vtuSiPc661Y4V_WTuYDfk27LMH8.roa (raw, json)
Hash identifier: vUvEFYP1Bm9t4k6OqmaseYitsN8omNW2reswUF75h+o=
Subject key identifier: BE:DB:92:88:F7:3A:EB:56:38:57:F5:93:B9:80:DF:93:6E:CB:30:7F
Certificate issuer: /CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Certificate serial: 018CC86FBB200EEB6DD5F2433E030D430B12
Authority key identifier: D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/vtuSiPc661Y4V_WTuYDfk27LMH8.roa
Signing time: Tue 02 Jan 2024 04:30:14 +0000
ROA not before: Tue 02 Jan 2024 04:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213025
IP address blocks: 91.200.179.0/24 maxlen: 24
2a0a:d700::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:bb:20:0e:eb:6d:d5:f2:43:3e:03:0d:43:0b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Validity
Not Before: Jan 2 04:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bedb9288f73aeb563857f593b980df936ecb307f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5f:ab:53:48:ac:6b:37:3c:ff:68:40:33:a3:
13:f8:df:b3:a5:98:3f:62:b7:45:48:7b:53:f1:8c:
8c:15:0d:eb:1e:be:99:9c:9c:bd:2e:15:d3:d6:62:
66:1b:d3:62:6e:2c:a8:91:f8:3f:1b:80:ff:11:90:
78:97:50:71:b1:2b:d5:ee:df:dc:e2:3b:ff:1f:78:
b7:57:38:cb:08:75:bd:00:2c:5e:6a:8e:3b:b9:3d:
fb:e8:7e:ae:82:d1:99:a0:a4:96:e1:26:1b:63:dd:
df:83:56:55:f1:bc:de:68:57:45:ae:8d:ef:97:40:
dc:fa:31:de:c7:19:90:e2:fb:0a:5c:92:71:ab:dc:
5f:21:5c:4a:27:06:c5:42:f1:4f:f6:e1:1f:a8:16:
c5:fa:b7:90:df:08:62:ab:a7:d5:40:8a:37:b5:39:
32:32:06:07:09:68:0c:90:6e:fc:11:24:75:5f:3d:
35:1c:47:98:60:27:19:f6:6d:07:fd:ff:60:a1:0c:
ba:7d:12:89:6f:6e:79:d7:4b:0c:8d:5d:84:d2:87:
72:0c:bc:e8:f9:95:33:d1:62:ba:60:07:3b:f6:c5:
f6:eb:52:a3:cd:9e:3a:6c:25:bf:87:f5:15:9f:ba:
5d:3b:ba:20:32:90:39:9d:36:57:57:cf:25:bf:89:
cd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DB:92:88:F7:3A:EB:56:38:57:F5:93:B9:80:DF:93:6E:CB:30:7F
X509v3 Authority Key Identifier:
keyid:D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/vtuSiPc661Y4V_WTuYDfk27LMH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.179.0/24
IPv6:
2a0a:d700::/32
Signature Algorithm: sha256WithRSAEncryption
1c:c0:a6:ca:e4:de:de:9d:22:cf:c8:1f:78:38:9f:e8:4b:db:
c5:eb:41:ae:ce:0b:2c:0a:43:65:5a:5d:b3:c2:40:b7:ee:b9:
09:0d:8e:58:fb:00:e9:5b:9a:aa:62:86:ca:fa:e1:c2:b9:fa:
f8:0f:93:86:9a:6c:f7:a1:2b:7c:45:20:f7:e3:e4:80:44:23:
11:39:7c:81:08:c1:fb:2c:18:46:a1:85:8d:de:86:3c:c5:47:
4f:fd:dc:bc:a1:99:aa:96:a9:e3:f4:d9:37:16:0a:25:5f:39:
8e:da:f3:f1:36:45:b9:dd:85:f9:43:98:8a:7d:2f:f7:d0:fd:
87:89:0c:40:b6:69:17:52:3e:e5:a2:52:4b:12:a8:93:77:a9:
94:ba:42:89:35:6c:8a:7d:82:8d:ad:23:02:ee:02:63:b4:4b:
df:76:20:c6:60:40:90:8e:e0:66:d5:b8:98:2e:52:2a:a5:eb:
10:80:a6:98:fa:9c:66:d8:96:fb:c3:62:b2:83:80:5f:6d:21:
20:12:91:5a:e3:25:c1:b4:af:c5:07:c4:1e:74:ce:2c:36:30:
b2:07:f7:7a:36:58:c1:da:07:3b:b3:d6:68:2c:8b:dc:92:b0:
b4:82:8a:89:96:09:ab:a8:9d:0f:66:58:6a:04:14:26:38:67:
50:bd:7e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:15:31 2025 by rpki-client