Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/VQMaGGLKRed3TeOP2jjxU9-JJ0I.roa
File: VQMaGGLKRed3TeOP2jjxU9-JJ0I.roa (raw, json)
Hash identifier: DozZZe+osIfn7/wiMBfMhIeTOXgnonX86v0pQ0Sg8CY=
Subject key identifier: 55:03:1A:18:62:CA:45:E7:77:4D:E3:8F:DA:38:F1:53:DF:89:27:42
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 01916F183450A27A1A23F7FE6B74835F2153
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/VQMaGGLKRed3TeOP2jjxU9-JJ0I.roa
Signing time: Tue 20 Aug 2024 09:22:22 +0000
ROA not before: Tue 20 Aug 2024 09:22:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 393942
IP address blocks: 195.96.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6f:18:34:50:a2:7a:1a:23:f7:fe:6b:74:83:5f:21:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Aug 20 09:22:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55031a1862ca45e7774de38fda38f153df892742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:57:1a:49:7d:89:9f:b2:36:5f:0b:4b:ef:
b1:63:72:f9:97:0f:2a:a3:f4:52:a5:63:8e:19:01:
3b:97:c3:3c:e8:ba:53:9c:0e:4d:3f:68:ee:7b:e5:
23:93:be:a9:55:cf:b0:a8:66:fd:eb:03:08:d4:72:
75:20:38:8b:f5:7f:06:47:55:ec:f3:46:25:e4:b0:
09:e6:30:73:2f:8c:e5:c0:04:a6:fc:a9:e9:db:c1:
09:f8:44:89:9c:c3:1d:71:7b:52:ce:68:0b:6e:ad:
bf:16:0e:21:f9:9c:c1:da:ef:56:99:f4:9f:1a:33:
c0:73:38:ca:0a:46:d2:08:40:66:16:c4:23:24:6c:
e7:72:30:4a:91:69:e8:20:29:fb:50:50:0a:b5:ec:
3a:5c:71:87:52:ba:82:c0:3d:0b:4f:bb:b6:ba:c0:
20:1c:b8:08:38:1d:b5:72:80:f2:71:f1:d0:b0:c6:
dd:55:68:0c:46:23:fc:be:3a:ea:69:ed:22:e4:e8:
9b:22:12:55:c3:97:f2:19:0d:6a:fb:01:ad:a3:8b:
38:1b:15:3b:27:82:0d:34:9d:b2:94:58:c3:23:14:
0b:06:af:f8:9e:8c:41:19:9f:60:ef:b6:0d:c1:43:
78:08:34:ba:0b:d0:6e:ab:84:1f:12:76:60:0e:0b:
db:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:03:1A:18:62:CA:45:E7:77:4D:E3:8F:DA:38:F1:53:DF:89:27:42
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/VQMaGGLKRed3TeOP2jjxU9-JJ0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.132.0/24
Signature Algorithm: sha256WithRSAEncryption
67:f0:b9:06:43:85:7d:04:c9:f6:9f:15:e9:2b:a1:1a:b4:72:
41:40:79:f2:c8:3a:3e:18:66:ad:26:0f:6a:e4:c7:f1:79:30:
09:fc:aa:dd:46:06:f6:65:91:93:50:b1:06:ff:e2:f5:2d:d4:
86:ed:31:ee:90:ad:cd:70:6a:8e:79:f1:30:b7:44:5d:35:64:
e2:1b:e3:bc:62:db:3a:58:4a:d0:49:fe:b2:1a:21:c4:4e:ab:
b7:f5:76:c7:23:9f:6c:35:94:a2:0d:07:83:1f:f8:54:a8:95:
8b:88:04:45:0c:ca:72:62:45:f7:f8:8f:b8:db:ab:73:e8:21:
93:7c:8c:f0:cf:db:a9:3d:e8:d0:06:f4:c1:77:85:28:9d:98:
8c:40:2d:1d:e4:ba:3b:33:0c:3e:ae:1a:63:89:a3:b6:f9:ee:
67:ce:3d:8b:fc:2c:cf:a0:bd:b5:61:1c:0f:63:02:72:82:42:
3a:fa:b0:d2:25:65:4f:8b:c0:61:4e:ee:6c:58:40:9d:d1:82:
00:0b:6a:9e:32:20:e6:ca:62:5d:20:72:a8:a0:9b:33:c1:a8:
d1:70:8a:26:3c:74:5f:db:00:6f:6f:87:58:ae:c3:d5:18:5d:
8d:13:7e:b2:f3:32:cc:6f:ab:b8:99:07:d0:0b:88:d6:95:7f:
c8:e5:dc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:59:27 2025 by rpki-client