Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/Vvz2y3_lO4uNIv_LNXrR5OQYJyU.roa
File: Vvz2y3_lO4uNIv_LNXrR5OQYJyU.roa (raw, json)
Hash identifier: UZWP/oTijYfsugprrsyQEk4HEZFHaDPdO4cpYcvXQqQ=
Subject key identifier: 56:FC:F6:CB:7F:E5:3B:8B:8D:22:FF:CB:35:7A:D1:E4:E4:18:27:25
Certificate issuer: /CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Certificate serial: 019611A331646481436B8055C9B9FB114655
Authority key identifier: B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/Vvz2y3_lO4uNIv_LNXrR5OQYJyU.roa
Signing time: Mon 07 Apr 2025 19:03:49 +0000
ROA not before: Mon 07 Apr 2025 19:03:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 79.110.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Apr 2025 08:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a3:31:64:64:81:43:6b:80:55:c9:b9:fb:11:46:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Validity
Not Before: Apr 7 19:03:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56fcf6cb7fe53b8b8d22ffcb357ad1e4e4182725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:21:99:d4:52:ab:0d:3f:25:3e:ea:60:04:b2:
bf:78:24:0e:62:38:d2:90:6e:3b:16:b4:f2:4d:1f:
b4:8c:8d:50:b8:0e:03:ae:7d:69:b9:ba:a3:fb:60:
bf:6e:db:9b:59:27:ed:6f:2b:a3:b9:a7:a2:a3:84:
55:48:0d:7e:7f:a0:a6:2c:f2:52:ab:eb:7f:ff:02:
2b:32:f3:68:d8:20:f5:20:3b:b7:08:69:90:c7:cf:
36:64:72:61:f2:e9:d9:f0:c5:e1:56:9c:c4:81:4c:
39:34:11:5b:9c:2d:4f:ff:97:43:7f:de:17:c2:e9:
fa:92:92:39:2e:31:1a:61:c3:55:5b:87:a0:49:09:
3d:4c:8f:15:02:e5:18:77:95:b1:92:40:63:68:3e:
60:f9:8d:7e:eb:dd:48:8a:66:2c:21:5c:3d:b9:07:
6d:3a:fb:c9:27:b6:cd:94:c1:86:5a:af:55:8a:0b:
a4:2c:4f:59:21:1a:3f:27:9f:bd:b1:32:aa:2a:6a:
05:81:1a:a7:34:3f:3a:47:90:a0:c7:ab:c9:bc:7d:
38:f4:0d:bd:e6:a9:97:05:4b:28:44:f5:af:79:86:
cd:0b:87:ad:86:99:f2:23:3c:f8:38:71:8c:c3:1d:
50:fe:3d:a3:9b:26:a4:e7:20:4c:26:6d:5f:49:2f:
08:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FC:F6:CB:7F:E5:3B:8B:8D:22:FF:CB:35:7A:D1:E4:E4:18:27:25
X509v3 Authority Key Identifier:
keyid:B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/Vvz2y3_lO4uNIv_LNXrR5OQYJyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.238.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:01:fd:34:28:f4:58:70:38:25:88:a2:66:ab:93:76:0f:5b:
f1:5f:0b:dc:f9:43:fd:1b:1a:dc:0d:40:2f:59:cd:33:2d:1c:
de:7a:98:9e:c5:29:f8:b2:a4:49:28:63:e7:78:ed:a9:25:6e:
ff:44:29:ff:68:72:66:fd:96:be:f7:79:ac:61:d6:9c:4a:2d:
31:dd:f9:97:43:be:b9:95:e6:d2:e7:64:3c:4c:4b:fb:b6:5b:
79:20:da:50:44:a6:ff:a9:b4:31:1a:14:50:c8:9a:cc:42:05:
2e:22:33:3c:9e:8b:ef:2a:d3:9f:35:65:91:b5:16:78:92:d6:
e3:22:76:5f:ce:21:a3:6c:7c:6a:96:57:3b:1c:d3:22:74:06:
7c:38:5a:15:68:ac:78:d4:9c:e3:1d:58:d7:47:4f:53:27:42:
97:e6:06:28:f4:71:b0:9b:e2:ce:03:13:f6:db:0f:26:3e:85:
8e:ee:ce:e1:56:52:46:94:5b:c0:11:fa:f3:39:04:bf:6e:1e:
5b:2f:81:10:ad:00:4b:95:46:68:75:94:c8:a0:c4:cd:c8:14:
2e:5f:81:0a:0e:ed:85:9b:f2:ca:b6:00:33:3c:b7:4c:88:55:
3b:95:c5:57:46:14:dd:ba:2b:1e:73:70:05:24:19:45:87:50:
f5:d4:fb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 12:21:10 2025 by rpki-client