Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/vgG18qLdhQlTvGeERzxinzT1YDg.roa
File: vgG18qLdhQlTvGeERzxinzT1YDg.roa (raw, json)
Hash identifier: TDcLuSLFc2sumidb+HYVcFaHztaptNPgdVJMc/S11cE=
Subject key identifier: BE:01:B5:F2:A2:DD:85:09:53:BC:67:84:47:3C:62:9F:34:F5:60:38
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 01958B12A64B62134BE2FCA0E4A7C24EB729
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/vgG18qLdhQlTvGeERzxinzT1YDg.roa
Signing time: Wed 12 Mar 2025 15:56:49 +0000
ROA not before: Wed 12 Mar 2025 15:56:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 2a09:af86::/32 maxlen: 32
2a0e:3f47::/32 maxlen: 32
2a0e:5886::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 28 Mar 2025 20:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:12:a6:4b:62:13:4b:e2:fc:a0:e4:a7:c2:4e:b7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Mar 12 15:56:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be01b5f2a2dd850953bc6784473c629f34f56038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:80:f6:57:45:12:50:a7:5d:f8:4b:04:d0:
2b:8b:00:7e:9c:e9:b8:76:e6:44:d4:00:4f:eb:07:
93:59:d2:0f:54:d9:58:e5:aa:1c:04:f1:f0:b7:fa:
90:2c:48:4b:b0:7f:86:3c:95:6b:c3:c2:d7:93:25:
7f:9c:65:7b:08:2d:c6:21:93:26:a4:3e:0a:d6:b2:
fd:34:ac:88:7d:a8:f9:f5:f9:24:71:07:36:72:57:
5f:e2:c8:f1:74:72:f9:a7:ca:8b:80:ee:2a:da:2f:
ff:24:c6:4b:de:f9:63:3d:63:b6:fd:ef:c6:55:df:
81:fb:0a:5e:ea:79:51:73:eb:c2:c4:e7:13:cc:4a:
0c:09:98:15:72:64:a4:66:a6:76:2a:c9:65:ca:d2:
f3:5a:4c:b8:1a:5d:74:07:5d:85:f1:45:c1:38:31:
ad:31:25:7f:b6:a4:33:a0:b4:d8:2a:91:9e:6d:90:
c8:ce:1f:fc:87:18:4e:b5:42:13:4e:6a:ce:be:d3:
f1:d2:b0:b2:d5:b8:37:42:85:31:67:91:cf:67:fb:
ad:f8:8e:dd:97:a6:88:7d:e7:1d:c1:56:6d:ea:fd:
9d:03:ea:25:15:76:dd:b6:12:40:75:1c:7b:15:f0:
e8:55:37:b6:bd:dc:54:37:8f:3e:7f:b7:0c:82:62:
3d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:01:B5:F2:A2:DD:85:09:53:BC:67:84:47:3C:62:9F:34:F5:60:38
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/vgG18qLdhQlTvGeERzxinzT1YDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:af86::/32
2a0e:3f47::/32
2a0e:5886::/32
Signature Algorithm: sha256WithRSAEncryption
8b:f1:71:51:ba:5b:60:e8:82:99:09:a5:9d:32:63:a4:ee:20:
f5:bc:eb:2b:cc:67:b0:a4:5d:52:19:89:ee:01:b8:56:90:94:
77:7d:68:2b:21:4e:2b:2a:96:a3:99:20:91:28:28:97:00:ef:
c1:c8:d7:e0:fa:b5:15:93:6f:25:a8:e9:de:2e:d0:c7:c5:ce:
da:98:76:86:8e:10:4d:5c:61:f9:1e:b6:75:29:3f:b4:33:83:
11:c3:c5:42:1d:18:68:53:3f:06:11:c6:a6:b6:83:c5:50:1d:
4a:bb:01:f8:0c:aa:f0:eb:e9:84:6e:73:44:e0:88:71:6d:12:
9c:72:19:a8:9e:8e:79:29:da:d3:e3:ca:d7:01:c2:a3:a4:55:
aa:f1:41:39:a5:f0:70:06:f6:69:c6:4a:61:cf:d2:e1:8c:3b:
17:3e:f8:0d:0b:01:fb:37:62:ca:af:0d:2e:f9:fb:98:14:8e:
0e:c9:04:97:d8:f3:d3:22:a3:75:7f:0f:67:b3:75:45:70:28:
af:f0:87:9c:11:c9:d0:de:a8:f5:b6:63:10:7d:6b:6b:25:ac:
1d:34:0d:54:36:d0:19:e3:5b:cf:91:ed:1e:d5:d5:69:4a:a2:
4f:03:6a:c5:6c:ad:60:ad:56:54:53:dd:42:d5:e0:62:d6:10:
77:f9:a3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:45 2025 by rpki-client