Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/vmlhrpaT1S5NQ0l9O01ARmqu3FM.roa
File: vmlhrpaT1S5NQ0l9O01ARmqu3FM.roa (raw, json)
Hash identifier: 5V657P2KhT3MeSquMKXXJfup5Y7mLaAlX64bVLtzxUQ=
Subject key identifier: BE:69:61:AE:96:93:D5:2E:4D:43:49:7D:3B:4D:40:46:6A:AE:DC:53
Certificate issuer: /CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Certificate serial: 018CC3B70DA6D9F7483BD660BC675A9BB698
Authority key identifier: 8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/vmlhrpaT1S5NQ0l9O01ARmqu3FM.roa
Signing time: Mon 01 Jan 2024 06:30:02 +0000
ROA not before: Mon 01 Jan 2024 06:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60574
IP address blocks: 185.28.156.0/22 maxlen: 22
192.162.168.0/22 maxlen: 22
2a00:9e20::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:0d:a6:d9:f7:48:3b:d6:60:bc:67:5a:9b:b6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Validity
Not Before: Jan 1 06:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be6961ae9693d52e4d43497d3b4d40466aaedc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bd:73:68:74:ad:94:77:00:6e:c5:d0:c3:c8:
13:68:38:2c:e4:75:fd:18:27:8a:5d:1f:fc:9d:8e:
55:e4:ab:8a:31:ee:b5:d1:e3:87:6e:09:f9:f2:ae:
76:aa:fa:d6:24:27:d6:c0:29:ce:f2:7f:37:9c:d3:
64:68:e2:69:25:07:e8:00:08:bc:a8:ce:ff:f0:b3:
e3:bb:f9:8b:ef:18:c1:37:3e:c1:9d:02:3b:34:22:
a3:95:8e:96:a3:a8:b7:b0:86:ee:dc:c6:5a:5f:15:
6e:83:41:5a:8d:23:37:b5:10:b4:54:85:b1:22:46:
3a:9d:1c:1c:03:c2:da:40:17:41:8c:6c:03:29:77:
64:1c:f2:9c:18:a2:13:86:3c:77:48:20:74:e1:98:
ac:4d:10:92:22:2b:14:17:06:14:6b:b4:d6:4b:fe:
df:3f:c4:8e:83:87:43:4e:b8:f7:af:59:5d:df:a8:
a2:90:77:54:8a:45:53:25:35:e5:f4:00:5a:62:d6:
93:7e:e0:4d:25:c4:12:0f:3f:9b:7c:81:34:ac:6f:
5e:ca:0d:28:39:f1:b7:5e:09:50:19:45:54:73:5c:
aa:96:cd:9e:6b:db:ee:60:1e:d6:24:c8:83:a6:59:
b0:bf:59:c2:5b:5b:1f:38:4b:73:e7:e6:4c:76:d6:
4f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:69:61:AE:96:93:D5:2E:4D:43:49:7D:3B:4D:40:46:6A:AE:DC:53
X509v3 Authority Key Identifier:
keyid:8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/vmlhrpaT1S5NQ0l9O01ARmqu3FM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.156.0/22
192.162.168.0/22
IPv6:
2a00:9e20::/32
Signature Algorithm: sha256WithRSAEncryption
42:59:40:82:20:d1:3f:41:fd:4f:cb:b1:96:f3:4c:5d:0a:58:
0d:49:b8:38:b3:18:f1:8b:c4:db:5c:56:a9:87:72:ab:ea:9b:
96:ba:c5:c0:59:ab:9f:0a:d2:49:02:4c:fb:ca:fe:77:92:9f:
af:9d:0d:2f:aa:ba:f6:c9:15:ab:3d:3a:f7:29:b8:31:3e:a1:
10:0e:c0:d3:f6:45:7f:ca:4e:ce:50:66:29:f0:99:db:1c:6e:
e5:81:c3:fc:e6:ba:ad:62:ea:27:c9:5d:7e:c1:bc:4f:03:34:
61:2a:83:92:08:21:cc:01:c8:8a:da:df:1c:36:b1:b9:fb:9b:
5e:69:a9:16:d6:3d:60:01:ec:1e:a6:c5:f6:a8:73:1e:e4:7e:
28:50:e7:68:90:c3:c7:1a:0d:c7:78:79:f6:f5:58:f8:ce:99:
5b:45:37:39:91:f9:f7:f2:d6:76:14:d2:4c:a4:a7:2b:fa:36:
e6:32:e5:c9:5c:47:66:d4:9f:e4:75:92:8f:bf:d1:04:d3:47:
41:5e:dc:ae:ea:e3:df:62:8d:25:6d:8d:ed:b5:bd:dd:37:de:
b9:c8:ad:2f:56:52:ef:13:f0:e7:87:8a:c0:d0:4e:18:1f:c7:
8f:67:f2:af:58:80:4f:fc:de:8b:ee:9d:c5:72:1d:f8:18:40:
dd:30:9f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:39:10 2025 by rpki-client