Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Vpat4itDKZukZ7MfngBb7kMMqJc.roa
File: Vpat4itDKZukZ7MfngBb7kMMqJc.roa (raw, json)
Hash identifier: 6LV5mkOwaZoeKMmvGbwaWHGPqXY8JpT3PKYBjg3CeHc=
Subject key identifier: 56:96:AD:E2:2B:43:29:9B:A4:67:B3:1F:9E:00:5B:EE:43:0C:A8:97
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01938B65E1D43475C1B4C9F19FB5F21DFA19
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Vpat4itDKZukZ7MfngBb7kMMqJc.roa
Signing time: Tue 03 Dec 2024 07:22:10 +0000
ROA not before: Tue 03 Dec 2024 07:22:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60068
IP address blocks: 46.38.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8b:65:e1:d4:34:75:c1:b4:c9:f1:9f:b5:f2:1d:fa:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Dec 3 07:22:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5696ade22b43299ba467b31f9e005bee430ca897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:33:14:d7:eb:66:f0:da:45:81:2d:dd:9a:ce:
77:38:46:c6:5d:c6:89:29:23:2c:5f:84:7a:2a:12:
fb:e6:3f:2e:f3:7b:ac:d2:25:db:bc:31:ab:a8:e2:
0a:13:be:87:28:f1:4c:e2:e6:3e:12:72:05:76:f1:
7e:9d:82:13:24:2f:54:c3:b8:c9:3f:bc:00:a6:01:
f4:39:cd:c4:4a:8f:ee:78:10:fb:49:ba:d1:b5:b9:
93:dd:a1:6b:c1:69:fd:3e:3b:14:65:35:05:17:d7:
b0:2c:87:95:5a:48:27:c2:89:58:bf:21:b1:e3:ce:
07:a2:e9:bf:a3:48:82:0c:61:0d:eb:97:99:73:9a:
d2:df:08:f9:a1:07:67:19:68:a0:ce:61:1b:dc:23:
d1:b0:83:0a:7b:10:be:4a:14:44:a7:75:cf:fa:9e:
5d:55:b6:f5:d0:be:de:a5:33:6b:db:19:b1:c9:b6:
3c:96:5b:e0:d1:0b:76:cb:54:8b:bb:f0:21:7c:db:
92:d8:cc:0f:d1:99:79:54:94:1a:bd:28:7b:8f:0b:
a7:3f:88:5b:ac:8a:7a:af:ef:3a:0b:74:85:c3:b6:
d2:03:e8:a5:c5:79:75:af:99:c3:e4:11:b0:7e:c3:
0b:27:28:e7:04:43:13:c7:d9:11:ac:f1:84:54:ea:
08:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:96:AD:E2:2B:43:29:9B:A4:67:B3:1F:9E:00:5B:EE:43:0C:A8:97
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Vpat4itDKZukZ7MfngBb7kMMqJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.154.0/24
Signature Algorithm: sha256WithRSAEncryption
74:fa:cb:0b:9e:1d:a2:5d:3a:95:01:38:ef:31:9f:cb:cf:d9:
8d:03:14:2b:49:c3:ff:d1:11:5d:85:44:80:cc:f1:50:11:54:
59:0b:d5:9f:5b:9f:0f:02:e2:58:be:2a:c3:ee:c4:83:a2:04:
9d:1f:f9:ec:0e:86:2d:d4:a7:44:cc:34:11:0b:5c:0c:2a:78:
1f:fb:7d:6c:fe:fc:2f:0c:1c:72:ff:f7:55:b1:65:79:bc:c3:
15:a7:32:53:93:95:c8:11:c1:3c:b0:8f:3f:80:93:7e:d5:aa:
71:cd:26:03:a3:2c:f1:40:3b:d5:3c:f8:98:21:a2:2a:6c:41:
2c:62:c5:11:90:3e:fe:00:a6:31:ec:ec:8a:bd:e5:94:ed:e0:
09:1e:cf:6b:fc:b8:94:47:47:a6:0e:0d:f0:50:e7:6d:cc:59:
70:78:d5:0d:3a:05:bc:5c:8e:05:24:d4:eb:03:5e:1a:f9:e2:
04:e8:e8:d7:c8:7c:f6:e3:13:4a:e0:05:b3:92:71:8c:f2:36:
53:cb:97:59:cd:ff:89:d4:bd:19:51:d4:02:30:e4:f4:d5:8b:
99:72:f8:51:20:2a:64:ce:25:8c:3a:8c:cc:84:b8:0e:83:0f:
40:92:8d:35:1a:23:39:89:4c:78:53:51:63:cc:fe:ed:a8:f6:
af:e8:dd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:43:32 2025 by rpki-client