Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/VoSLYj057Um_gPQ3XXZghNJjZSM.roa
File: VoSLYj057Um_gPQ3XXZghNJjZSM.roa (raw, json)
Hash identifier: A4t5JdBhYtzhInrIXevsuRewKD1vQ1wUS8nwHp1Wl4E=
Subject key identifier: 56:84:8B:62:3D:39:ED:49:BF:80:F4:37:5D:76:60:84:D2:63:65:23
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 019712751F9D5128E416543E8A0D0BCFA1AD
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/VoSLYj057Um_gPQ3XXZghNJjZSM.roa
Signing time: Tue 27 May 2025 15:55:55 +0000
ROA not before: Tue 27 May 2025 15:55:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48648
IP address blocks: 91.198.233.0/24 maxlen: 24
91.211.120.0/24 maxlen: 24
91.211.122.0/24 maxlen: 24
185.190.151.0/24 maxlen: 24
193.107.80.0/24 maxlen: 24
194.28.103.0/24 maxlen: 24
195.12.56.0/22 maxlen: 22
2a0a:2c0::/48 maxlen: 48
2a0a:2c0:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 May 2025 17:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:12:75:1f:9d:51:28:e4:16:54:3e:8a:0d:0b:cf:a1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: May 27 15:55:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56848b623d39ed49bf80f4375d766084d2636523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:a9:f0:a2:b9:51:e8:af:74:f2:28:0e:8c:
9c:df:80:b9:bc:0f:25:b8:98:f3:0c:a2:47:d4:d0:
2a:83:66:b9:d1:3a:09:1b:de:f9:ea:6f:ab:95:7a:
79:74:3e:9a:45:26:24:a8:5e:57:8d:43:08:83:2d:
3d:80:d8:a4:01:a3:98:bd:e1:7b:f1:b4:81:56:00:
c7:68:63:0c:06:49:e2:a5:27:7d:fa:26:09:07:1d:
3f:d0:78:19:9d:37:45:9c:61:0d:01:66:39:5e:9b:
81:90:70:0d:bc:56:e1:09:1c:1e:05:2e:4b:c6:4a:
18:a2:82:97:6c:c9:35:2a:5b:cc:a1:b1:74:7c:71:
7a:83:7a:ed:8b:9d:98:4d:86:6b:f5:4b:f7:03:d3:
ac:05:9a:51:15:6c:dd:f8:4d:d4:25:35:06:a3:70:
0d:d7:6b:eb:4e:c4:1b:ad:48:29:2b:d5:67:8d:1b:
7d:7e:18:94:de:3d:f9:88:93:27:4f:93:86:cf:98:
ec:cd:47:01:9b:c4:82:5b:1d:f5:98:ed:c7:72:bd:
37:d6:69:7e:ab:13:b1:c8:45:71:8f:d7:6e:8f:63:
a3:98:4c:fb:72:7e:0c:fe:18:90:b2:53:1a:8d:e3:
aa:00:3c:c4:09:65:ca:56:a2:be:ed:27:67:7d:90:
a6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:84:8B:62:3D:39:ED:49:BF:80:F4:37:5D:76:60:84:D2:63:65:23
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/VoSLYj057Um_gPQ3XXZghNJjZSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.233.0/24
91.211.120.0/24
91.211.122.0/24
185.190.151.0/24
193.107.80.0/24
194.28.103.0/24
195.12.56.0/22
IPv6:
2a0a:2c0::/48
2a0a:2c0:2::/48
Signature Algorithm: sha256WithRSAEncryption
1c:ff:6f:d7:43:ed:fa:0c:16:5c:31:65:aa:44:13:34:1f:f4:
06:63:fe:7f:57:93:46:e5:82:15:33:f5:c6:db:ae:08:99:14:
60:2e:d3:b4:f6:a7:cb:3d:93:fb:66:5b:4e:04:3f:f3:2e:7c:
07:37:86:56:f9:50:73:fd:e3:f0:94:b0:51:f4:1d:20:9d:30:
76:7b:8c:d2:f9:0f:55:a7:f7:29:6a:0d:94:00:b4:e2:b6:03:
a7:ea:3d:eb:41:3b:01:6d:bd:89:c9:36:0a:31:ab:a8:06:98:
e6:21:01:0f:29:b4:88:2a:db:b7:c3:8d:50:20:88:23:2e:6a:
48:be:48:49:86:ad:8d:9c:a3:f9:6b:c9:95:ec:8f:84:3b:af:
aa:38:2e:e2:8b:3b:1e:9e:34:fd:f1:ce:f2:12:06:f6:d5:20:
44:97:c5:9d:e5:93:23:50:b3:0c:78:e0:1b:f7:42:d2:fe:07:
8d:78:50:88:60:61:59:67:a2:9c:b6:64:04:08:8d:ca:b1:f9:
75:e4:b6:2a:9f:e2:f1:ad:05:c8:29:21:7c:2e:5f:37:fa:02:
db:95:d6:b7:a1:27:ad:0e:de:45:52:e8:30:48:f1:b5:02:60:
72:0b:8a:8e:fc:4b:99:c9:d8:9a:4c:2a:23:10:38:6b:4e:b9:
5c:5c:a1:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 12 04:44:49 2025 by rpki-client