Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/VmkZKfnmCYPVgxVFEIrnXzZr0rk.roa
File: VmkZKfnmCYPVgxVFEIrnXzZr0rk.roa (raw, json)
Hash identifier: cJ64jAwnBPYzrF42h5zmz1hbJyvWFRuW+w7kL5BdKaw=
Subject key identifier: 56:69:19:29:F9:E6:09:83:D5:83:15:45:10:8A:E7:5F:36:6B:D2:B9
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01941731390B190C48EE1FBBFD43AA15E3D9
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/VmkZKfnmCYPVgxVFEIrnXzZr0rk.roa
Signing time: Mon 30 Dec 2024 10:51:29 +0000
ROA not before: Mon 30 Dec 2024 10:51:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12552
IP address blocks: 170.62.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:17:31:39:0b:19:0c:48:ee:1f:bb:fd:43:aa:15:e3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Dec 30 10:51:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56691929f9e60983d5831545108ae75f366bd2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:88:b3:4e:8a:fa:92:ca:fb:c4:7b:9c:3a:
45:2b:bb:54:3f:75:13:5e:a2:b5:37:cc:0d:96:6d:
c6:e6:72:37:6a:97:3b:37:1f:e9:58:73:37:50:d4:
9c:a9:20:40:26:8e:2a:2b:7c:2d:cb:8f:4c:9d:f7:
a5:f1:7a:f9:8c:fa:d0:ae:a1:38:dd:a1:43:68:c1:
e5:69:86:d9:8b:ca:fd:0a:2c:aa:0d:a8:99:49:c2:
aa:c6:c0:e2:66:aa:09:e7:e6:f3:d1:82:1e:46:aa:
aa:ae:fa:18:12:1e:29:bc:89:02:06:bc:ce:7f:29:
42:1f:72:fe:f0:fd:5f:46:9b:9e:76:0c:53:79:17:
d6:1e:c8:5e:cf:5b:b6:c3:9d:8d:f5:12:2c:6b:d4:
b9:07:08:b4:45:5e:25:bb:19:3b:b8:97:0a:76:2f:
e4:4b:13:65:a5:a0:29:61:6f:b9:1c:63:70:ae:58:
dd:d3:0f:16:ec:13:b8:b3:c5:8f:e8:3a:2f:3c:77:
f7:f0:72:e3:87:37:cf:4b:c2:3d:da:81:16:a1:47:
83:e9:06:f6:d5:e7:73:a9:d7:ba:7a:4c:1b:89:6a:
fc:49:f6:19:51:f7:34:f2:70:c4:35:64:50:5d:19:
1b:ac:52:c1:b8:38:17:8d:a2:d8:83:29:73:28:a8:
66:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:69:19:29:F9:E6:09:83:D5:83:15:45:10:8A:E7:5F:36:6B:D2:B9
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/VmkZKfnmCYPVgxVFEIrnXzZr0rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.62.104.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:a7:74:ce:a0:6c:93:0f:24:84:89:a7:aa:18:5e:8f:9b:13:
fd:15:63:1a:28:1e:0b:0b:5e:f4:19:9e:9c:04:5b:c7:bb:2b:
9c:9a:7e:01:ac:e6:19:dd:41:18:2b:dc:20:aa:c1:ed:21:81:
7f:32:d4:5e:89:14:f0:17:25:c7:cd:ed:93:57:d7:75:09:81:
22:7a:41:9c:b8:91:ce:b9:b6:b6:ce:f0:89:af:f2:4f:36:78:
09:71:bd:51:78:09:b6:d1:67:4b:85:99:74:54:55:80:4f:3d:
6c:56:25:cc:9f:26:10:5a:30:22:10:42:8c:2d:cf:4a:d4:12:
28:6b:a6:ae:8d:d2:db:71:c6:80:b5:87:91:d9:e6:8b:5e:29:
81:78:f0:b0:80:e8:02:ac:d7:34:cf:98:6a:70:f1:c3:68:a8:
43:c7:06:fc:7e:5d:11:76:77:22:72:30:02:b5:6e:1e:3c:60:
4e:30:c4:08:da:8b:30:5a:32:a1:4b:bb:67:0a:89:e6:94:d5:
67:d5:e1:30:74:90:7a:70:ac:67:1b:00:26:d2:82:6a:6c:c7:
ac:1b:a1:1a:f3:48:05:e8:da:c2:0e:8d:49:ff:96:64:a1:7d:
97:94:b9:03:f6:8e:26:72:59:61:65:36:72:b5:33:41:7c:e4:
13:77:1b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:29:22 2025 by rpki-client