Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/vtcD7PEyYDlnPffxaQ2tGj042WQ.roa
File: vtcD7PEyYDlnPffxaQ2tGj042WQ.roa (raw, json)
Hash identifier: RFM61U8Z/6bKToez8AGij0s8BWObTonPtDIfj+a0QHE=
Subject key identifier: BE:D7:03:EC:F1:32:60:39:67:3D:F7:F1:69:0D:AD:1A:3D:38:D9:64
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 018CC8DCDDE82B650B78F61C5F762C7EA00A
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/vtcD7PEyYDlnPffxaQ2tGj042WQ.roa
Signing time: Tue 02 Jan 2024 06:29:27 +0000
ROA not before: Tue 02 Jan 2024 06:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205209
IP address blocks: 94.188.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 10:50:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:dd:e8:2b:65:0b:78:f6:1c:5f:76:2c:7e:a0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Jan 2 06:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bed703ecf1326039673df7f1690dad1a3d38d964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:24:9a:d7:51:5a:b8:40:ad:3b:de:9e:fd:ec:
93:7d:fc:70:be:b6:b2:97:df:aa:59:9d:4d:dd:1f:
40:17:41:c6:3e:d9:0c:3b:c6:4c:bc:20:d5:b5:83:
03:37:4a:13:99:ac:cd:a5:84:aa:97:2b:39:9e:96:
e8:ed:ba:24:3c:b9:5b:8b:89:78:41:15:a8:9c:23:
37:f9:c5:5d:44:ae:a2:a2:30:7e:2d:74:86:ad:90:
cb:25:f0:99:05:37:de:aa:db:01:bc:90:d3:b7:49:
12:8a:32:a6:ff:6c:fd:f4:58:84:d7:80:f8:2e:65:
20:a1:e2:4c:43:7a:cc:d0:11:d2:e1:30:9a:6b:d4:
12:4b:2f:d2:ba:86:f7:3c:25:be:e6:ba:4d:0a:e2:
35:45:95:fc:93:19:f6:f4:79:ab:8d:db:61:04:95:
49:37:f5:f5:e2:ab:d8:09:5f:32:f1:e6:cd:49:c4:
0c:4e:46:e5:6b:cd:5d:33:69:be:fb:3c:d0:88:4e:
10:50:a0:9a:f3:1f:1e:52:58:45:7e:17:29:0e:fd:
1a:96:3f:90:90:6e:60:ca:89:41:ec:4e:a9:36:7c:
ca:d9:04:bd:6a:6f:b6:a0:4a:e4:fe:12:ff:f5:ec:
8b:82:53:92:54:df:57:8d:da:10:88:3a:cb:10:68:
14:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D7:03:EC:F1:32:60:39:67:3D:F7:F1:69:0D:AD:1A:3D:38:D9:64
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/vtcD7PEyYDlnPffxaQ2tGj042WQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.188.179.0/24
Signature Algorithm: sha256WithRSAEncryption
06:d2:de:17:42:a3:8c:7b:96:b9:23:7b:a0:21:35:5f:4c:89:
09:5c:8c:09:16:24:b4:1c:ed:9d:3f:07:45:86:11:b4:4c:7f:
4b:0b:76:a3:5d:00:04:f2:87:c6:e1:a0:6a:c6:1d:aa:aa:8a:
eb:85:78:de:39:ee:22:00:92:58:e2:d1:5f:50:8d:15:84:e0:
05:19:10:d2:2a:9d:15:59:4f:bf:1c:5d:bc:2f:bc:f5:03:81:
4e:e3:06:1a:f3:45:6b:91:0f:01:c9:15:9e:e6:1e:83:7a:10:
f1:bf:66:b1:d4:0e:14:e7:fb:1c:bf:20:b7:c1:14:10:e9:cb:
c1:08:0f:97:5a:dc:27:ec:e0:a4:98:21:c2:ef:97:a0:6d:f0:
fc:c0:2e:d1:58:ae:66:46:69:ab:b8:1e:2e:26:6d:4c:ac:0f:
f5:09:13:09:e5:72:69:fc:fe:7f:f9:c7:17:38:aa:33:c5:5c:
89:37:55:cc:5b:5e:ee:42:05:5c:32:46:e2:94:7e:ae:90:9c:
b2:05:73:31:82:26:61:c1:f9:48:62:09:bf:a9:ed:2b:6f:9c:
92:4b:b3:17:29:35:4a:47:b2:1e:ac:5f:e0:e1:a7:30:41:f3:
c4:80:ca:ed:43:01:de:cc:64:03:be:9f:24:c9:52:e7:75:e0:
7f:66:8b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:54 2025 by rpki-client