Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/VzQGpaqCA8RHPUIAnCZv7EEONBg.roa
File: VzQGpaqCA8RHPUIAnCZv7EEONBg.roa (raw, json)
Hash identifier: xjmC3GNLD8FQvyw/0xoJzOmzfZWY3q1MX4QxuAJTEJQ=
Subject key identifier: 57:34:06:A5:AA:82:03:C4:47:3D:42:00:9C:26:6F:EC:41:0E:34:18
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 018CC64A75EA5693CC2A38B6D0618D9FEB86
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/VzQGpaqCA8RHPUIAnCZv7EEONBg.roa
Signing time: Mon 01 Jan 2024 18:30:17 +0000
ROA not before: Mon 01 Jan 2024 18:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35684
IP address blocks: 109.71.26.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:75:ea:56:93:cc:2a:38:b6:d0:61:8d:9f:eb:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Jan 1 18:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=573406a5aa8203c4473d42009c266fec410e3418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:4a:eb:1f:0e:46:03:2f:ce:52:f1:e5:90:
43:77:39:72:84:ab:3f:b8:7e:bc:63:ba:a0:72:cf:
9a:ff:64:25:8d:92:32:f1:34:24:72:45:c4:6d:89:
32:15:af:cf:aa:3a:f0:0c:65:da:d9:5b:c6:82:8b:
f0:5b:39:5e:d5:e1:89:2a:9f:61:6a:84:fb:4f:ac:
7c:bb:ae:6e:9b:7f:31:cc:eb:c6:53:31:4d:93:4e:
a5:72:b4:ac:fb:d9:08:ac:98:41:a4:b8:56:76:cd:
69:63:f4:cf:eb:cb:65:ad:f1:42:d8:fc:19:c5:a3:
3f:7b:fd:4b:a4:d8:c3:ce:fb:49:76:59:22:0c:98:
31:1c:1d:f4:1e:a8:ae:98:c9:56:ca:3c:2d:15:04:
f4:78:fd:22:38:cb:07:4b:2e:12:ff:ba:7d:18:07:
54:f4:64:60:30:92:3f:99:07:93:64:e5:c1:02:2c:
3c:67:98:af:c3:50:35:3f:cc:46:3f:79:f0:c6:98:
b6:be:80:0c:f2:de:e5:7a:10:2a:d9:64:a9:8a:b5:
91:ec:89:f4:67:c0:23:63:fe:41:39:cc:69:03:73:
f8:b8:ca:02:5f:a3:eb:4e:9c:f3:9b:dc:b7:57:55:
5d:9b:75:b3:b8:10:bf:fd:8f:a2:42:42:f5:83:8a:
56:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:34:06:A5:AA:82:03:C4:47:3D:42:00:9C:26:6F:EC:41:0E:34:18
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/VzQGpaqCA8RHPUIAnCZv7EEONBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.26.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:3e:6a:45:17:43:ec:db:f7:cf:b1:cd:d7:de:63:a8:57:8b:
ec:34:e1:33:f2:97:2f:27:69:ca:5f:75:7a:99:62:eb:b5:06:
6a:b1:ae:67:fb:79:5b:b5:7e:e2:5e:4c:39:81:97:d2:60:f6:
5d:da:88:2e:1c:0d:4d:9a:f8:09:5b:e8:27:15:90:5c:b5:1f:
27:c3:b1:b6:d4:78:60:66:c7:b6:3b:6d:fd:07:b6:05:86:45:
63:40:0e:10:40:48:92:7f:10:43:9e:c3:ea:79:99:68:81:79:
c9:f3:9f:de:52:22:29:6d:c2:0e:83:34:c6:1c:d2:f6:79:a3:
ff:9b:1a:17:06:3f:de:b3:0e:12:d9:6c:23:30:fc:04:5a:51:
6c:9b:a7:bd:81:5b:e1:26:bd:11:ae:7f:d7:e3:a8:34:d7:a5:
1c:d7:a3:eb:4b:9e:ef:bb:b3:02:cf:66:66:29:93:87:80:af:
e5:93:56:60:1c:b0:5d:cc:f9:44:c0:e1:9e:ae:ed:a5:01:44:
c5:9d:c6:13:2e:18:ba:a7:ff:c5:af:7c:1e:bf:93:36:cb:2c:
76:d0:59:2c:7a:36:94:12:d8:35:39:80:98:e5:4a:e8:f6:a4:
44:c4:3b:2c:89:86:35:fc:d3:e8:19:ab:de:05:47:bc:ad:50:
2a:ec:2d:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSnXqVpPMKji20GGNn+uGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNmRhODJkYmM3ZDdlMjgxOGY5NjY4MGI2NmVmY2VkYjEw
ODc5NDcwHhcNMjQwMTAxMTgzMDE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzM0MDZhNWFhODIwM2M0NDczZDQyMDA5YzI2NmZlYzQxMGUzNDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz5K6x8ORgMvzlLx5ZBDdzlyhKs/
uH68Y7qgcs+a/2QljZIy8TQkckXEbYkyFa/PqjrwDGXa2VvGgovwWzle1eGJKp9h
aoT7T6x8u65um38xzOvGUzFNk06lcrSs+9kIrJhBpLhWds1pY/TP68tlrfFC2PwZ
xaM/e/1LpNjDzvtJdlkiDJgxHB30HqiumMlWyjwtFQT0eP0iOMsHSy4S/7p9GAdU
9GRgMJI/mQeTZOXBAiw8Z5ivw1A1P8xGP3nwxpi2voAM8t7lehAq2WSpirWR7In0
Z8AjY/5BOcxpA3P4uMoCX6PrTpzzm9y3V1Vdm3WzuBC//Y+iQkL1g4pWGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFc0BqWqggPERz1CAJwmb+xBDjQYMB8GA1UdIwQY
MBaAFO1tqC28fX4oGPlmgLZu/O2xCHlHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zNTQ5ZmItZTNhMy00MTI0LWIzYjAt
NTk5NTc3ODdiMDE1LzEvVnpRR3BhcUNBOFJIUFVJQW5DWnY3RUVPTkJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8zNTQ5ZmItZTNhMy00MTI0LWIzYjAtNTk5NTc3ODdiMDE1
LzEvN1cyb0xieDlmaWdZLVdhQXRtNzg3YkVJZVVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbUcaMA0G
CSqGSIb3DQEBCwUAA4IBAQAqPmpFF0Ps2/fPsc3X3mOoV4vsNOEz8pcvJ2nKX3V6
mWLrtQZqsa5n+3lbtX7iXkw5gZfSYPZd2oguHA1NmvgJW+gnFZBctR8nw7G21Hhg
Zse2O239B7YFhkVjQA4QQEiSfxBDnsPqeZlogXnJ85/eUiIpbcIOgzTGHNL2eaP/
mxoXBj/esw4S2WwjMPwEWlFsm6e9gVvhJr0Rrn/X46g016Uc16PrS57vu7MCz2Zm
KZOHgK/lk1ZgHLBdzPlEwOGeru2lAUTFncYTLhi6p//Fr3wev5M2yyx20FksejaU
Etg1OYCY5Uro9qRExDssiYY1/NPoGaveBUe8rVAq7C2d
-----END CERTIFICATE-----
Generated at Tue Mar 11 05:04:09 2025 by rpki-client