Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/VPs3gtVM7VjQX7lb62YvPFxJbdM.roa
File: VPs3gtVM7VjQX7lb62YvPFxJbdM.roa (raw, json)
Hash identifier: IaELyEaK2K9MyWGFNsB9si/5dJsC5d9rQyHgAvRXzCY=
Subject key identifier: 54:FB:37:82:D5:4C:ED:58:D0:5F:B9:5B:EB:66:2F:3C:5C:49:6D:D3
Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial: 018CC26D2AD2319E414C34DC790EA081BCEA
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/VPs3gtVM7VjQX7lb62YvPFxJbdM.roa
Signing time: Mon 01 Jan 2024 00:29:43 +0000
ROA not before: Mon 01 Jan 2024 00:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57256
IP address blocks: 193.30.98.0/24 maxlen: 24
193.30.97.0/24 maxlen: 24
193.30.96.0/24 maxlen: 24
193.30.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2a:d2:31:9e:41:4c:34:dc:79:0e:a0:81:bc:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Validity
Not Before: Jan 1 00:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54fb3782d54ced58d05fb95beb662f3c5c496dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:3c:a3:52:69:ae:b5:16:e3:ed:af:9c:b3:
70:dc:85:6d:aa:1e:f9:17:64:da:c0:b7:8c:55:da:
6d:41:bc:b0:04:98:f1:54:a8:5c:78:bc:10:bc:2b:
c0:d1:fc:cf:46:04:eb:b6:4d:78:28:59:3f:8e:44:
1d:a1:b5:f4:1d:8c:68:25:ce:88:a1:9e:eb:d1:b0:
48:c2:21:ed:9a:57:25:45:b0:c4:96:eb:ee:0b:5b:
52:47:46:90:5b:be:77:53:82:87:45:c0:04:92:0c:
5a:9b:f4:a8:86:04:f5:cc:1e:61:ec:a7:45:5e:49:
33:b9:14:f8:ef:c8:ac:ea:46:65:69:f8:0a:6b:8e:
ae:d0:56:4e:94:21:39:79:89:f5:17:ee:54:8e:e9:
5c:13:56:24:01:a2:a0:ba:85:c5:87:5f:9b:13:0e:
82:18:76:ff:9d:6f:4e:a3:09:f0:a1:cb:d2:b0:6d:
8a:4e:5d:96:f5:a7:5b:47:3c:ec:74:22:86:47:2a:
6d:c0:98:9c:ac:cd:49:20:b6:69:74:19:40:c3:7d:
5a:41:02:c9:cf:63:12:71:12:1a:55:74:9f:ec:ab:
c2:c0:3c:21:1c:b6:02:fe:4c:68:63:53:ae:2a:c2:
d2:bc:d4:ae:4a:71:3b:54:af:ef:8b:a6:9b:43:aa:
55:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FB:37:82:D5:4C:ED:58:D0:5F:B9:5B:EB:66:2F:3C:5C:49:6D:D3
X509v3 Authority Key Identifier:
keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/VPs3gtVM7VjQX7lb62YvPFxJbdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.96.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:32:69:a0:85:27:0d:64:94:8f:4d:e4:2d:17:bd:80:c5:64:
88:45:0c:f8:6a:8a:7f:65:7c:c3:6d:b6:51:53:f3:8e:08:74:
fd:26:17:38:d9:68:63:d2:38:3e:af:d3:2f:bd:b8:ee:2a:55:
e1:94:b4:0b:59:2e:fb:96:00:ae:04:1d:50:39:2f:bf:80:7c:
62:8b:84:69:c9:49:d4:0e:4f:12:db:24:03:e6:bc:fe:49:13:
8c:2b:d1:c4:d3:bd:dd:fe:3f:ac:73:2c:c3:88:58:66:8d:68:
3e:0a:57:37:6b:a1:5d:f0:ec:2c:1f:a5:03:c6:c0:1a:e9:d5:
58:fd:d2:a5:56:a2:16:f6:bc:13:bb:7c:35:26:22:49:18:a2:
6c:f5:93:cf:6d:12:ca:47:47:c6:03:da:82:3e:17:d6:09:47:
2c:54:63:f2:df:4f:48:38:83:5c:bc:70:68:af:bf:07:07:94:
31:48:49:3d:05:f3:75:30:20:56:4f:84:24:d8:78:12:e5:07:
40:a9:55:e7:46:9a:90:73:05:b2:80:ea:68:23:9a:1e:1d:2e:
59:88:81:e2:34:5e:be:c6:04:35:90:f8:ab:dd:b7:8c:d0:3e:
0f:07:17:fe:24:74:6f:2f:c1:63:18:28:00:84:22:91:94:80:
c1:82:1d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:40 2025 by rpki-client