Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/CV8WSa3IrNK_912ur_3XvLRMCZA.roa
File: CV8WSa3IrNK_912ur_3XvLRMCZA.roa (raw, json)
Hash identifier: cVuxdmA5hl2YXQhv6Pfhs9NUSbae5F7T7XowyyELBoM=
Subject key identifier: 09:5F:16:49:AD:C8:AC:D2:BF:F7:5D:AE:AF:FD:D7:BC:B4:4C:09:90
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 018EC7098195122FFBF7E8A40358C08FFC6D
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/CV8WSa3IrNK_912ur_3XvLRMCZA.roa
Signing time: Wed 10 Apr 2024 08:04:32 +0000
ROA not before: Wed 10 Apr 2024 08:04:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215179
IP address blocks: 93.92.199.0/24 maxlen: 24
94.125.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 11:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c7:09:81:95:12:2f:fb:f7:e8:a4:03:58:c0:8f:fc:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Apr 10 08:04:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=095f1649adc8acd2bff75daeaffdd7bcb44c0990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:12:ba:f9:a8:8f:4b:a8:7d:7c:e2:b7:40:6a:
13:51:c9:0b:9f:bd:9d:d4:d4:63:68:aa:4a:cd:da:
ab:2a:e7:2a:de:7b:74:0b:48:b3:ae:aa:ef:b9:6a:
78:29:67:75:23:93:03:5f:b2:13:96:07:59:c5:fc:
6e:38:98:b3:2d:23:09:b5:92:90:f2:3b:04:86:f2:
1f:66:ee:09:35:ac:fd:19:83:36:56:c2:57:c1:b9:
71:f3:2f:e2:e2:8f:d1:87:c3:dd:a2:6e:8d:13:07:
1a:bb:a8:81:11:a0:18:7e:f5:2c:fe:cf:44:66:1e:
bf:90:1d:fd:23:f7:75:2b:c5:c1:6e:86:64:6f:57:
69:f3:9e:da:bb:25:dc:40:89:ba:51:53:7f:2a:c4:
33:a3:bf:d5:b5:7b:a7:66:70:cf:f0:6e:df:ba:43:
19:aa:53:9b:4a:f2:6e:86:5c:89:ed:87:bd:c8:38:
57:32:ae:54:c4:da:1f:59:46:0a:68:16:65:0f:4a:
17:7b:56:d3:32:de:25:9b:5a:9a:cd:e7:60:f3:1e:
52:5f:16:1e:88:e9:93:bb:29:52:61:12:51:c9:89:
dc:2d:df:7c:6c:24:70:00:8b:4e:63:9c:72:6e:34:
b0:f7:13:01:23:00:e9:35:90:bb:00:cb:3d:60:49:
29:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5F:16:49:AD:C8:AC:D2:BF:F7:5D:AE:AF:FD:D7:BC:B4:4C:09:90
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/CV8WSa3IrNK_912ur_3XvLRMCZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.199.0/24
94.125.14.0/24
Signature Algorithm: sha256WithRSAEncryption
72:bd:0c:18:a4:80:18:06:49:7f:c6:ea:bc:f1:4c:14:ba:d6:
7b:e2:5d:ce:4d:63:47:5d:45:5f:34:d3:e7:84:e0:31:5a:a8:
ac:33:72:f7:4d:ca:01:33:1e:05:45:c9:52:88:8d:ef:c4:d4:
ef:5f:f2:11:56:ca:6d:a3:ac:44:2c:62:70:ed:36:6a:45:18:
37:94:0f:a1:e5:26:60:79:1d:07:84:da:63:3d:22:82:32:6f:
4f:60:60:e9:0c:85:f9:49:bd:9c:59:94:55:a1:2a:64:d8:80:
45:4e:9e:32:ae:17:e5:0f:31:9e:8b:fc:91:b6:ef:c2:b2:55:
b4:57:e7:8e:f7:4f:50:dd:8e:55:03:f1:09:e5:37:44:95:aa:
b5:28:68:4a:ac:d9:43:d8:fa:c3:1a:3b:04:28:d3:60:bb:bb:
44:66:0e:a5:5e:c9:81:b0:22:6f:23:f8:41:96:d3:f9:ed:f8:
05:93:23:a0:6d:1c:93:ae:77:e9:ba:3a:ee:3f:fb:c6:ee:4f:
78:f7:53:2c:40:d2:47:1c:ba:3b:30:72:0f:a7:ef:06:a2:1c:
cf:41:c7:9f:2b:50:f7:ec:b1:18:af:71:54:63:df:fa:cd:aa:
27:51:73:d6:8e:6b:ee:ab:18:e2:14:cd:57:05:75:0e:e4:e1:
4b:16:e7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:46:29 2025 by rpki-client