Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/VWHRbqIy4bfIL78tnNOYHIfWvdE.roa
File: VWHRbqIy4bfIL78tnNOYHIfWvdE.roa (raw, json)
Hash identifier: TCeJgsSlDW+eStYSkIG5Nfk70oMr77Z8LtEtvfCCZew=
Subject key identifier: 55:61:D1:6E:A2:32:E1:B7:C8:2F:BF:2D:9C:D3:98:1C:87:D6:BD:D1
Certificate issuer: /CN=fc9f24ebef118b9165e52f61ca993bee43064ec2
Certificate serial: 018CC6B908250E6EC0AB83E6458076C2D48B
Authority key identifier: FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/VWHRbqIy4bfIL78tnNOYHIfWvdE.roa
Signing time: Mon 01 Jan 2024 20:31:04 +0000
ROA not before: Mon 01 Jan 2024 20:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2200
IP address blocks: 193.56.4.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:08:25:0e:6e:c0:ab:83:e6:45:80:76:c2:d4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9f24ebef118b9165e52f61ca993bee43064ec2
Validity
Not Before: Jan 1 20:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5561d16ea232e1b7c82fbf2d9cd3981c87d6bdd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2c:fa:c6:63:bc:10:99:88:57:12:8d:7d:e2:
4f:15:6a:61:46:be:98:2b:b1:9e:d2:05:ba:0a:60:
93:e2:c6:b9:86:69:c5:97:64:09:0a:a9:5e:33:64:
e4:06:ea:bd:72:c5:61:c3:23:cf:62:f7:77:6d:fa:
18:26:e1:52:63:b8:5d:f6:b5:90:4b:02:00:6e:8a:
bc:b3:38:a6:54:bf:45:c3:f5:65:99:49:f0:7f:5e:
ae:1e:33:9a:d8:92:bd:da:64:d1:8b:8f:d6:2f:8c:
c1:ac:3b:71:2a:1e:4a:06:22:da:37:65:ce:80:13:
3f:5d:88:77:2f:44:d3:0a:d5:48:cf:08:e0:e7:92:
b2:9a:ff:f6:10:22:11:75:05:7a:d9:59:e3:63:5a:
18:83:f5:7e:98:95:8a:8c:d7:9b:2e:7d:c2:59:ec:
84:f0:be:03:0a:57:e8:f6:9b:66:26:a3:15:cf:ce:
4f:17:3a:bd:2b:fd:61:c0:ef:c5:1a:a6:34:20:9c:
d4:c6:da:e7:d1:6d:4e:ae:d2:79:de:01:74:9b:26:
ff:ec:9d:24:7f:f5:3f:ac:5f:bf:4f:3e:6e:d7:83:
62:5a:52:db:b6:39:3e:43:40:d5:d3:76:a8:03:8d:
d9:77:37:bf:cd:79:9f:a6:80:37:ba:cb:40:31:41:
c7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:61:D1:6E:A2:32:E1:B7:C8:2F:BF:2D:9C:D3:98:1C:87:D6:BD:D1
X509v3 Authority Key Identifier:
keyid:FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/VWHRbqIy4bfIL78tnNOYHIfWvdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.4.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:98:a6:9b:83:70:83:e7:36:58:8b:ff:11:82:8a:b5:d0:5f:
ec:ca:76:bc:ed:99:cd:f0:e5:67:8d:42:81:da:d0:af:3a:05:
23:9f:46:84:be:67:38:43:75:ce:e9:7f:e1:5b:5d:8a:95:92:
2f:46:30:64:1d:42:f1:a0:b8:dd:21:f5:dd:27:3e:8f:e1:67:
95:ee:f2:98:fb:72:c0:65:a6:e1:49:70:2e:f8:31:4c:8a:cb:
df:04:0b:cb:ac:a1:62:e2:a1:0a:94:7d:06:62:ad:f1:68:57:
3b:3b:1e:d5:0b:60:c5:c5:f3:e8:f4:b8:6f:fe:22:81:a7:4f:
23:0f:18:83:c4:45:cc:20:df:0f:53:ce:f9:6b:24:d2:3a:45:
72:19:59:13:fb:7f:a9:d8:62:ee:a2:7c:c5:bb:2b:88:2b:ff:
3f:37:1d:f9:83:f2:8b:d2:fc:bc:95:95:8a:ff:3d:50:27:f5:
69:16:83:3c:9e:dc:4d:dd:aa:60:d1:f8:d5:5e:c3:55:a2:eb:
0a:dd:4b:04:f0:42:f0:23:1c:71:03:e9:f7:3a:1a:17:6c:fe:
27:61:3c:22:3c:38:df:5f:ed:29:b2:cf:d2:37:cb:d0:e5:58:
3a:6e:c0:4c:6f:dd:f0:2f:df:e0:37:8e:10:d1:7f:50:46:45:
92:d8:ab:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:16 2025 by rpki-client