Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/VFJbC-Te3lb0jY7qYFqeVVoAuJM.roa
File: VFJbC-Te3lb0jY7qYFqeVVoAuJM.roa (raw, json)
Hash identifier: AazLQcx0dWAzQCRhUVQScoXzNVp3I0Ht0T+u67Xrz5o=
Subject key identifier: 54:52:5B:0B:E4:DE:DE:56:F4:8D:8E:EA:60:5A:9E:55:5A:00:B8:93
Certificate issuer: /CN=9d6b9774c94876c98321de3201b11b75a1358d19
Certificate serial: 018DE4CBA6D040183ABD490A5A4860B0DAA6
Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/VFJbC-Te3lb0jY7qYFqeVVoAuJM.roa
Signing time: Mon 26 Feb 2024 09:42:48 +0000
ROA not before: Mon 26 Feb 2024 09:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211462
IP address blocks: 193.32.87.0/24 maxlen: 24
2a0d:8140::/48 maxlen: 48
2a0d:8140:2fff::/48 maxlen: 48
2a0d:8141::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 22 Mar 2024 16:38:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e4:cb:a6:d0:40:18:3a:bd:49:0a:5a:48:60:b0:da:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19
Validity
Not Before: Feb 26 09:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54525b0be4dede56f48d8eea605a9e555a00b893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:af:02:75:09:a4:57:f5:19:1f:9e:d8:51:
d2:fe:9c:d7:9d:30:59:a8:73:a2:3f:be:15:7b:aa:
c4:b3:c4:12:fc:ed:ae:48:54:ef:49:83:2a:7d:5c:
30:b6:56:5c:79:37:e6:d6:65:51:0c:6c:d5:8a:73:
58:08:66:c3:2c:ec:07:60:11:9b:d2:63:3a:b1:52:
d7:24:6c:52:aa:4f:18:5f:55:d3:dd:c1:bb:47:87:
ce:24:fc:dc:9a:4c:0f:01:84:e7:27:4b:36:9c:f4:
24:be:2a:96:7e:02:a5:02:64:4c:58:c2:13:ae:9d:
8d:45:13:02:0d:59:52:29:69:f8:b8:75:42:fd:6c:
8c:10:94:30:1d:b4:ad:e2:93:bc:6f:a7:4f:ab:fb:
ce:f2:fd:29:e2:50:26:44:d9:0a:ec:69:a0:20:1d:
9a:f6:e0:3b:95:3c:84:2a:0f:5d:ba:fa:b2:5b:49:
47:68:ac:88:51:9c:ba:97:21:0a:9f:f0:c9:c3:18:
a7:6a:6c:77:cd:31:da:e2:db:2f:4c:01:6f:42:a3:
97:02:e4:4a:d3:f2:80:01:22:62:b3:60:34:67:56:
37:ee:f5:7e:ec:92:9f:fc:11:9a:28:38:6c:0c:de:
8d:90:df:ad:d2:f5:3e:be:03:e4:94:1c:14:79:62:
92:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:52:5B:0B:E4:DE:DE:56:F4:8D:8E:EA:60:5A:9E:55:5A:00:B8:93
X509v3 Authority Key Identifier:
keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/VFJbC-Te3lb0jY7qYFqeVVoAuJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.87.0/24
IPv6:
2a0d:8140::/48
2a0d:8140:2fff::/48
2a0d:8141::/48
Signature Algorithm: sha256WithRSAEncryption
cc:30:b7:96:5e:23:cb:d1:65:29:79:fb:b9:fd:56:a3:5b:32:
1f:1d:f3:0a:d3:e0:47:29:4e:54:0f:00:87:59:20:f2:ab:cd:
7b:2d:c3:50:4e:8d:1f:7f:4f:35:10:be:01:ef:1a:82:5f:e2:
f3:84:dc:3b:8b:37:a0:2d:9c:5d:28:37:c3:be:17:d4:ea:65:
51:b8:ae:47:2a:70:02:92:68:8c:ab:f1:f7:2c:b2:81:d3:32:
fb:26:ea:47:08:e1:83:29:d8:2a:eb:09:fe:94:31:b3:17:b1:
f4:de:90:cb:ac:8a:13:b7:82:5e:87:5a:5d:68:f3:bf:e7:e6:
a6:a0:2a:dc:ff:e7:3a:bf:7b:62:97:ee:3e:7e:5e:53:8f:c9:
d3:02:be:c6:00:13:85:75:8b:97:f0:18:bb:59:d7:89:66:13:
24:3f:be:20:b2:5d:65:35:a2:b8:25:89:87:82:a6:e9:9e:fe:
cf:ca:88:0f:7d:00:c6:20:84:d3:24:46:b7:cb:bb:77:64:71:
02:35:5f:a5:24:1d:51:8b:59:0e:dd:59:2a:59:d4:93:ca:f4:
73:55:8f:b3:fe:41:8a:65:42:4e:7d:63:77:a0:a7:fc:d6:5b:
3f:56:c6:0c:c3:73:f2:79:5c:54:c6:42:bd:4f:e1:16:f7:55:
a3:05:77:39
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAY3ky6bQQBg6vUkKWkhgsNqmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNmI5Nzc0Yzk0ODc2Yzk4MzIxZGUzMjAxYjExYjc1YTEz
NThkMTkwHhcNMjQwMjI2MDk0MjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDUyNWIwYmU0ZGVkZTU2ZjQ4ZDhlZWE2MDVhOWU1NTVhMDBiODkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuavAnUJpFf1GR+e2FHS/pzXnTBZ
qHOiP74Ve6rEs8QS/O2uSFTvSYMqfVwwtlZceTfm1mVRDGzVinNYCGbDLOwHYBGb
0mM6sVLXJGxSqk8YX1XT3cG7R4fOJPzcmkwPAYTnJ0s2nPQkviqWfgKlAmRMWMIT
rp2NRRMCDVlSKWn4uHVC/WyMEJQwHbSt4pO8b6dPq/vO8v0p4lAmRNkK7GmgIB2a
9uA7lTyEKg9duvqyW0lHaKyIUZy6lyEKn/DJwxinamx3zTHa4tsvTAFvQqOXAuRK
0/KAASJis2A0Z1Y37vV+7JKf/BGaKDhsDN6NkN+t0vU+vgPklBwUeWKSJQIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFFRSWwvk3t5W9I2O6mBanlVaALiTMB8GA1UdIwQY
MBaAFJ1rl3TJSHbJgyHeMgGxG3WhNY0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80MGNiOWMtYzQyNi00OGFiLTk5Njgt
YTU2YmRmYWRiODFlLzEvVkZKYkMtVGUzbGIwalk3cVlGcWVWVm9BdUpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS80MGNiOWMtYzQyNi00OGFiLTk5NjgtYTU2YmRmYWRiODFl
LzEvbld1WGRNbElkc21ESWQ0eUFiRWJkYUUxalJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQAwSBXMCEE
AgACMBsDBwAqDYFAAAADBwAqDYFAL/8DBwAqDYFBAAAwDQYJKoZIhvcNAQELBQAD
ggEBAMwwt5ZeI8vRZSl5+7n9VqNbMh8d8wrT4EcpTlQPAIdZIPKrzXstw1BOjR9/
TzUQvgHvGoJf4vOE3DuLN6AtnF0oN8O+F9TqZVG4rkcqcAKSaIyr8fcssoHTMvsm
6kcI4YMp2CrrCf6UMbMXsfTekMusihO3gl6HWl1o87/n5qagKtz/5zq/e2KX7j5+
XlOPydMCvsYAE4V1i5fwGLtZ14lmEyQ/viCyXWU1orgliYeCpume/s/KiA99AMYg
hNMkRrfLu3dkcQI1X6UkHVGLWQ7dWSpZ1JPK9HNVj7P+QYplQk59Y3egp/zWWz9W
xgzDc/J5XFTGQr1P4Rb3VaMFdzk=
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:49:36 2025 by rpki-client