Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/Vlrs-AHalelyZUiBjivZ6qFQ-NU.roa
File: Vlrs-AHalelyZUiBjivZ6qFQ-NU.roa (raw, json)
Hash identifier: Nxt8wVhlJrw54UNiPIfaD022PfyhYqSOHrQ50kltGyk=
Subject key identifier: 56:5A:EC:F8:01:DA:95:E9:72:65:48:81:8E:2B:D9:EA:A1:50:F8:D5
Certificate issuer: /CN=3728f29cd37d775cd64b225205c3833c3e44d661
Certificate serial: 0191FC566F118EB2844E1667A1BF08C61E74
Authority key identifier: 37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/Vlrs-AHalelyZUiBjivZ6qFQ-NU.roa
Signing time: Mon 16 Sep 2024 19:36:48 +0000
ROA not before: Mon 16 Sep 2024 19:36:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25220
IP address blocks: 91.220.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fc:56:6f:11:8e:b2:84:4e:16:67:a1:bf:08:c6:1e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3728f29cd37d775cd64b225205c3833c3e44d661
Validity
Not Before: Sep 16 19:36:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=565aecf801da95e9726548818e2bd9eaa150f8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3b:b5:2e:77:dc:68:1a:7d:4f:4c:a5:49:65:
40:a6:8f:a0:d3:b8:4b:76:5a:d6:00:46:e0:3b:47:
c7:84:91:82:bf:f8:25:8a:48:60:a7:d4:0c:a5:94:
14:05:09:ea:8a:0a:d6:28:ac:de:82:8c:d6:32:8a:
d9:13:05:e2:17:59:20:e4:cb:77:e3:a7:25:5b:0b:
d8:97:f7:c5:dd:46:b6:d9:ad:70:f3:5f:07:3f:8c:
03:0f:01:cc:4c:52:39:5b:76:f2:a7:b1:a1:b6:4f:
25:e8:9f:c9:29:07:0b:53:8e:e4:8b:d7:1d:a8:26:
e6:58:28:ed:16:e9:38:e4:89:d1:64:90:9a:07:bc:
7b:06:99:b1:1d:f4:e7:3a:ed:65:88:f3:3a:bf:f0:
16:c3:b4:21:b2:78:20:4d:3f:2c:89:a3:d5:e6:28:
8e:7b:45:e9:a2:97:4d:e1:01:64:8e:60:b9:f0:38:
07:95:ef:50:f6:12:98:5a:f7:b3:6d:1a:77:d8:81:
15:84:76:a7:b2:9b:fc:e4:bb:f8:49:63:40:05:2b:
86:77:99:86:99:ff:de:15:00:6b:dc:75:ca:c0:55:
cb:97:1b:99:36:08:a7:ae:8d:55:41:27:4b:36:b4:
5b:7e:f8:09:06:f7:87:b0:04:0a:9b:d0:bf:60:b5:
87:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5A:EC:F8:01:DA:95:E9:72:65:48:81:8E:2B:D9:EA:A1:50:F8:D5
X509v3 Authority Key Identifier:
keyid:37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/Vlrs-AHalelyZUiBjivZ6qFQ-NU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.148.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:6d:06:46:ad:aa:42:f3:66:44:fa:f0:63:4a:72:e2:e2:f0:
c1:be:af:9b:01:b7:d1:2e:aa:20:3c:73:e8:0e:03:b5:81:1e:
dd:a3:4d:77:66:95:16:42:fb:43:4f:34:21:21:be:e0:77:7c:
39:eb:8c:7e:30:be:d4:3c:1f:e4:d4:b0:06:00:82:4a:fe:f4:
a3:18:92:ed:72:15:3f:58:12:3d:97:be:57:b0:09:59:54:08:
3d:03:e9:21:00:8c:78:1c:83:55:8b:76:98:df:6e:07:ed:0d:
d9:92:a3:cb:cf:cb:d0:04:f8:67:21:8a:3b:95:16:e0:0e:b7:
3e:26:58:83:61:bd:7b:cd:68:62:0d:00:9b:a4:16:a4:3e:42:
9d:ee:c7:4f:d9:87:a6:6b:84:c7:0e:34:d1:4e:85:1d:86:b2:
b2:a8:c6:d1:66:95:79:d1:d9:1b:2e:af:1e:9d:bd:09:e4:db:
7f:a7:77:40:d7:51:19:a3:50:36:7a:cb:3e:40:eb:b5:52:0a:
22:c7:2d:a3:19:d3:b4:e9:c5:64:5b:aa:41:39:ef:d3:94:b1:
27:3b:ee:42:5c:68:ea:0b:b3:4f:72:4f:ee:c3:10:30:b9:12:
8c:ba:bf:78:c9:b8:96:52:c8:e1:e6:8d:6f:94:6f:c3:5d:7c:
a4:d2:fe:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:29 2025 by rpki-client