Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/VVhJAbODMnRyJ69daqlGle-P4Ww.roa
File: VVhJAbODMnRyJ69daqlGle-P4Ww.roa (raw, json)
Hash identifier: 5+AbV7HT6ENxsLo/2FGV4dIkn5/oEL4cj5GLlTPfAPM=
Subject key identifier: 55:58:49:01:B3:83:32:74:72:27:AF:5D:6A:A9:46:95:EF:8F:E1:6C
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018CC500CE62F7FD4EE0C71E4EDD678965FD
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/VVhJAbODMnRyJ69daqlGle-P4Ww.roa
Signing time: Mon 01 Jan 2024 12:30:13 +0000
ROA not before: Mon 01 Jan 2024 12:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206361
IP address blocks: 79.172.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 15:42:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:ce:62:f7:fd:4e:e0:c7:1e:4e:dd:67:89:65:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 1 12:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55584901b38332747227af5d6aa94695ef8fe16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ac:14:5f:2d:c7:99:9f:33:96:9d:7e:0a:70:
46:70:e3:32:46:a8:f1:49:a0:0b:9d:22:61:ee:5d:
02:02:d8:ba:f2:cc:ba:57:84:ef:d5:43:e8:70:7a:
ec:f6:ec:6b:19:01:c4:12:72:7c:74:a7:fb:c2:60:
39:0c:ca:d0:79:e0:0d:77:b5:f7:7f:1c:70:8b:0c:
42:a1:db:91:e2:00:03:86:e3:9a:91:fa:51:cd:0d:
db:14:98:9c:41:92:41:d0:06:d2:c3:68:4a:b8:fc:
e3:56:78:fe:c7:a3:77:65:45:40:93:42:f4:bd:7a:
b3:94:c1:5b:bd:53:42:22:2a:3c:f8:63:55:52:0e:
47:2b:6a:54:0d:90:72:e2:bc:8c:d3:e0:e7:42:87:
d6:ac:a2:d8:ad:79:25:79:5b:73:cf:d6:7e:6b:9f:
7e:4a:06:82:6a:4f:ca:06:6e:99:c5:0b:20:8d:5a:
30:7d:09:0a:31:5f:16:b6:13:e6:be:20:42:86:07:
5b:91:bc:ce:38:9c:28:a0:36:f4:62:ed:71:ec:18:
51:fe:4c:89:8f:06:4a:95:95:b1:77:ea:b2:d8:35:
49:2b:ec:11:e2:d3:1e:72:45:87:36:8c:24:fc:1a:
dd:d1:aa:7c:d1:30:00:55:0b:3d:14:49:13:bb:fe:
e3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:58:49:01:B3:83:32:74:72:27:AF:5D:6A:A9:46:95:EF:8F:E1:6C
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/VVhJAbODMnRyJ69daqlGle-P4Ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.251.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:23:41:f0:3a:72:14:ad:70:1c:5b:da:1a:0d:3d:c9:75:5f:
f0:57:46:cc:cc:69:31:da:cc:7b:e8:95:d8:05:69:32:22:62:
c1:a1:62:da:90:b3:f0:cd:13:5c:de:89:dd:e6:47:7a:a9:58:
03:89:31:a0:85:36:fa:06:04:6a:7d:6a:86:ea:73:b9:39:57:
4d:b0:ff:19:7c:e4:f7:49:c1:87:02:9e:e8:fc:c8:39:2d:e8:
c4:19:2c:b1:d8:59:62:17:f9:bd:60:ca:d6:f7:79:ec:da:c6:
90:f3:de:46:d5:b4:8c:67:00:e9:f6:1a:2e:0c:a5:3d:f1:77:
81:0c:cd:ed:f2:7a:ea:45:e1:57:52:4b:30:70:fa:25:da:2a:
ff:dc:68:36:26:5b:d3:7b:88:df:a7:76:f5:9b:95:08:23:de:
19:31:5b:42:5e:c6:9d:f7:f9:df:b5:76:44:0f:24:12:f9:f8:
2e:6a:69:ea:d9:1f:c2:15:52:de:6c:8f:90:09:99:8f:ef:3f:
2e:ed:f7:9d:14:34:2c:df:c1:ed:89:c3:37:ec:ea:a6:7a:95:
00:70:24:a3:1b:2a:d4:fb:60:4f:12:5e:ca:ca:54:af:5b:95:
f5:f7:a0:63:98:0c:4d:ea:3c:43:ef:c6:d8:7c:68:36:1a:36:
98:0a:70:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAM5i9/1O4MceTt1niWX9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjQwMTAxMTIzMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTU4NDkwMWIzODMzMjc0NzIyN2FmNWQ2YWE5NDY5NWVmOGZlMTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKwUXy3HmZ8zlp1+CnBGcOMyRqjx
SaALnSJh7l0CAti68sy6V4Tv1UPocHrs9uxrGQHEEnJ8dKf7wmA5DMrQeeANd7X3
fxxwiwxCoduR4gADhuOakfpRzQ3bFJicQZJB0AbSw2hKuPzjVnj+x6N3ZUVAk0L0
vXqzlMFbvVNCIio8+GNVUg5HK2pUDZBy4ryM0+DnQofWrKLYrXkleVtzz9Z+a59+
SgaCak/KBm6ZxQsgjVowfQkKMV8WthPmviBChgdbkbzOOJwooDb0Yu1x7BhR/kyJ
jwZKlZWxd+qy2DVJK+wR4tMeckWHNowk/Brd0ap80TAAVQs9FEkTu/7jjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFVYSQGzgzJ0cievXWqpRpXvj+FsMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvVlZoSkFiT0RNblJ5SjY5ZGFxbEdsZS1QNFd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT6z7MA0G
CSqGSIb3DQEBCwUAA4IBAQClI0HwOnIUrXAcW9oaDT3JdV/wV0bMzGkx2sx76JXY
BWkyImLBoWLakLPwzRNc3ond5kd6qVgDiTGghTb6BgRqfWqG6nO5OVdNsP8ZfOT3
ScGHAp7o/Mg5LejEGSyx2FliF/m9YMrW93ns2saQ895G1bSMZwDp9houDKU98XeB
DM3t8nrqReFXUkswcPol2ir/3Gg2JlvTe4jfp3b1m5UII94ZMVtCXsad9/nftXZE
DyQS+fguamnq2R/CFVLebI+QCZmP7z8u7fedFDQs38HticM37OqmepUAcCSjGyrU
+2BPEl7KylSvW5X196BjmAxN6jxD78bYfGg2GjaYCnBZ
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:57 2025 by rpki-client