Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5b4b36-1ac9-4d29-a067-8320de44df8b/1/VPBgFgzELcyUJRoX5__0qdyEvEg.roa
File: VPBgFgzELcyUJRoX5__0qdyEvEg.roa (raw, json)
Hash identifier: Ur7tQ6PZdH4E9/yvhby+XhbkwzA7BO12gurYJ7/4oO4=
Subject key identifier: 54:F0:60:16:0C:C4:2D:CC:94:25:1A:17:E7:FF:F4:A9:DC:84:BC:48
Certificate issuer: /CN=71a3413d407d8adf8ab6be55706094efe9c3d5da
Certificate serial: 018CC56EBF180A0E0367F56B62CF74A28B31
Authority key identifier: 71:A3:41:3D:40:7D:8A:DF:8A:B6:BE:55:70:60:94:EF:E9:C3:D5:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caNBPUB9it-Ktr5VcGCU7-nD1do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5b4b36-1ac9-4d29-a067-8320de44df8b/1/VPBgFgzELcyUJRoX5__0qdyEvEg.roa
Signing time: Mon 01 Jan 2024 14:30:18 +0000
ROA not before: Mon 01 Jan 2024 14:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205774
IP address blocks: 91.208.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:bf:18:0a:0e:03:67:f5:6b:62:cf:74:a2:8b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a3413d407d8adf8ab6be55706094efe9c3d5da
Validity
Not Before: Jan 1 14:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54f060160cc42dcc94251a17e7fff4a9dc84bc48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:13:eb:68:82:5d:8b:35:d8:b5:9e:0f:d0:eb:
2e:81:0d:d5:ad:8b:6b:1c:a5:4d:87:d1:a7:7c:5c:
4f:18:41:ae:d0:96:a1:31:97:aa:51:73:83:a7:c9:
95:07:fa:3a:4e:7d:e6:2c:fc:0f:ae:a4:9f:c0:e9:
89:2b:7b:34:2f:9b:07:de:0e:29:12:95:56:6a:c7:
37:d2:36:2f:2b:22:4b:96:21:1a:22:36:e3:6c:fd:
93:e4:5c:4a:03:d2:09:e9:c4:52:60:1e:df:c2:bd:
13:64:91:52:ec:85:8c:83:42:62:ee:28:9b:b4:14:
22:be:cf:22:97:1f:62:79:50:97:19:a1:41:e5:19:
a7:d1:fc:d5:8f:c9:5f:9d:45:c7:da:7e:68:28:20:
9d:20:03:8c:f5:57:d1:e7:79:65:88:e0:16:34:3a:
35:91:e4:db:04:32:a1:4d:21:2a:25:de:e4:6f:91:
6b:8e:15:ea:06:af:a0:66:10:bf:3e:bf:1f:78:45:
0b:17:9f:b8:43:35:8f:64:68:70:ff:ab:a6:99:88:
a8:89:cd:c4:f3:f0:4d:34:ef:25:bb:49:90:88:fe:
c7:8a:9b:2d:2c:49:97:87:1d:2f:f1:e3:a1:0e:2a:
ab:9e:19:d4:6b:4a:4d:56:04:a6:f3:0a:b5:95:c3:
7d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F0:60:16:0C:C4:2D:CC:94:25:1A:17:E7:FF:F4:A9:DC:84:BC:48
X509v3 Authority Key Identifier:
keyid:71:A3:41:3D:40:7D:8A:DF:8A:B6:BE:55:70:60:94:EF:E9:C3:D5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caNBPUB9it-Ktr5VcGCU7-nD1do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5b4b36-1ac9-4d29-a067-8320de44df8b/1/VPBgFgzELcyUJRoX5__0qdyEvEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5b4b36-1ac9-4d29-a067-8320de44df8b/1/caNBPUB9it-Ktr5VcGCU7-nD1do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.100.0/24
Signature Algorithm: sha256WithRSAEncryption
36:39:bb:47:7b:27:08:35:24:11:27:5a:b7:c2:97:b7:78:58:
48:bc:52:6a:85:13:4b:22:9a:e2:42:4e:9c:75:fc:c7:0f:0a:
40:84:45:c8:52:d3:05:65:ba:04:61:63:df:72:c4:b1:6e:e7:
44:ef:7a:49:b7:0c:87:26:a2:70:33:48:e9:b9:10:6e:ff:02:
ba:aa:5a:f4:cb:5e:63:f8:fd:77:d3:e1:36:04:e5:9e:12:c9:
a5:c6:b2:14:66:8d:80:8a:1a:37:93:03:93:96:d8:b4:e7:1d:
5c:dd:f9:21:1b:95:96:e4:f9:eb:13:3d:c4:06:c2:da:e2:12:
b2:c5:93:4d:e7:6f:c9:c1:a3:b1:19:58:74:15:69:eb:4b:53:
98:d4:49:07:38:f7:b8:76:35:46:7a:9f:30:bd:ba:e5:f5:79:
2c:b6:a7:4b:90:14:6d:16:05:c2:88:97:97:75:28:cc:06:4e:
ff:0a:2f:dd:6d:aa:0d:67:53:ca:bf:dc:94:39:0a:ed:05:0b:
5e:5d:92:01:8f:27:fa:33:89:a2:93:93:f0:8d:c1:04:3f:6a:
30:f3:ea:1e:62:ae:b3:db:33:0b:92:29:82:dd:eb:ba:7d:4e:
b9:dc:2f:dc:32:a1:6f:92:d9:ac:4b:e0:59:cd:cc:58:a7:4f:
9c:98:29:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:24 2025 by rpki-client