Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/vplA0hb2K4WDjZH4Cz3U2LAbV6w.roa
File: vplA0hb2K4WDjZH4Cz3U2LAbV6w.roa (raw, json)
Hash identifier: Oqgi75SooVa4lc9LpPh9P56/zTdUuyyqf2MK2WgazSs=
Subject key identifier: BE:99:40:D2:16:F6:2B:85:83:8D:91:F8:0B:3D:D4:D8:B0:1B:57:AC
Certificate issuer: /CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
Certificate serial: 01924780FD6C6F7F9BF451CB0BE638C4A088
Authority key identifier: E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/vplA0hb2K4WDjZH4Cz3U2LAbV6w.roa
Signing time: Tue 01 Oct 2024 09:54:48 +0000
ROA not before: Tue 01 Oct 2024 09:54:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12445
IP address blocks: 82.115.160.0/19 maxlen: 19
82.115.176.0/23 maxlen: 23
82.115.176.0/24 maxlen: 24
82.115.188.0/24 maxlen: 24
82.115.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:47:80:fd:6c:6f:7f:9b:f4:51:cb:0b:e6:38:c4:a0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
Validity
Not Before: Oct 1 09:54:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be9940d216f62b85838d91f80b3dd4d8b01b57ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:0d:f4:23:75:92:04:98:86:54:43:2a:12:
dd:f7:a5:fd:58:1f:c1:bf:56:33:2e:c3:06:8b:78:
a7:57:15:ff:e0:60:5d:3a:d4:32:e3:3a:fc:f4:a7:
ae:3f:8b:b9:a9:dd:60:f4:e3:8f:04:3d:0c:57:39:
43:9d:60:21:89:90:a2:c2:af:fa:1e:5a:51:cc:bf:
25:37:07:51:58:ae:40:01:eb:86:61:74:43:ca:2c:
86:7e:61:8b:48:81:20:1f:35:ba:dd:22:13:69:69:
98:65:02:fb:01:71:b9:c4:7c:a4:d0:f2:e6:26:79:
d5:8e:30:dc:06:0e:4a:53:93:0b:19:ea:18:3b:98:
fc:6f:16:ac:6a:3a:11:19:40:6c:e8:09:63:47:11:
b1:a3:9d:e1:18:ed:95:25:6c:dd:7a:7a:29:38:53:
53:bb:42:d9:7d:e4:9c:a6:d4:46:06:a0:61:e2:87:
06:58:90:c8:d6:3f:61:11:ac:5d:26:ce:79:af:9e:
32:b2:74:57:4a:80:30:4f:2b:7a:11:f6:31:23:96:
f5:46:62:c3:d8:89:0b:ed:0a:50:6d:c5:14:5a:5f:
ac:be:f1:4b:7a:9c:2e:83:42:79:52:eb:43:6f:0f:
0e:e3:65:5d:62:31:d6:60:1d:4c:ab:f9:60:e8:ad:
66:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:99:40:D2:16:F6:2B:85:83:8D:91:F8:0B:3D:D4:D8:B0:1B:57:AC
X509v3 Authority Key Identifier:
keyid:E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/vplA0hb2K4WDjZH4Cz3U2LAbV6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.160.0/19
Signature Algorithm: sha256WithRSAEncryption
36:a1:57:c5:ce:aa:cd:f1:c2:01:8d:1d:06:0b:76:9b:b1:0c:
d1:fe:b9:c3:59:b2:51:a0:ff:d9:26:7d:e6:e0:99:43:f0:1d:
36:6d:e1:f4:1e:d7:3d:62:ca:21:49:d3:6c:5f:f6:40:b2:f3:
b7:34:32:8b:ad:43:6a:17:2e:1a:c7:2c:ea:f6:0d:80:05:8e:
58:f4:25:b2:78:66:bc:16:a1:cc:86:7d:51:db:ce:5f:df:21:
48:1f:5f:f1:f5:dd:d8:92:e4:b7:86:f7:dc:35:c4:e3:8f:9c:
80:57:ea:13:6d:fb:7b:e3:f4:95:16:d1:94:fa:c3:79:a9:d8:
e6:a7:77:a1:e7:e5:cd:2f:4a:4f:32:97:c3:96:4e:d5:ac:6f:
1f:3f:cd:53:68:5d:42:dd:49:ec:04:10:21:3e:22:cb:b0:f7:
19:97:81:74:2a:45:66:54:f8:79:bd:be:cf:af:33:a3:c9:26:
7e:0b:ec:fa:64:90:90:82:84:7e:24:c0:cd:b7:21:7b:f2:52:
2a:74:48:56:2a:c5:83:54:f0:57:0e:d8:24:28:93:4b:4b:0f:
ab:80:71:76:70:6b:e5:fa:b0:3e:57:da:88:6e:10:2a:80:54:
f6:74:9f:f0:7b:b6:d2:d0:91:8a:86:70:a1:60:05:e2:56:60:
d5:ae:66:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:31:44 2025 by rpki-client