Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vvieGBE0DTsccL4V8b33yrZP5oY.roa
File: vvieGBE0DTsccL4V8b33yrZP5oY.roa (raw, json)
Hash identifier: 9S3dI8yyiVgJl//g1idDIYdZV/3a5+tKuA7Rshgyx0A=
Subject key identifier: BE:F8:9E:18:11:34:0D:3B:1C:70:BE:15:F1:BD:F7:CA:B6:4F:E6:86
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194C534D6A3985A8248DC472F0C164A61A2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vvieGBE0DTsccL4V8b33yrZP5oY.roa
Signing time: Sun 02 Feb 2025 05:49:21 +0000
ROA not before: Sun 02 Feb 2025 05:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.195.0/24 maxlen: 24
37.202.196.0/24 maxlen: 24
37.202.197.0/24 maxlen: 24
37.202.198.0/24 maxlen: 24
37.202.199.0/24 maxlen: 24
37.202.200.0/24 maxlen: 24
37.202.201.0/24 maxlen: 24
151.243.16.0/20 maxlen: 20
151.243.97.0/24 maxlen: 24
151.243.246.0/24 maxlen: 24
151.243.247.0/24 maxlen: 24
151.243.248.0/24 maxlen: 24
151.243.249.0/24 maxlen: 24
151.243.250.0/24 maxlen: 24
151.243.251.0/24 maxlen: 24
151.243.252.0/24 maxlen: 24
151.243.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Feb 2025 16:43:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:34:d6:a3:98:5a:82:48:dc:47:2f:0c:16:4a:61:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 2 05:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bef89e1811340d3b1c70be15f1bdf7cab64fe686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:68:87:06:f2:76:5e:d0:c0:e5:23:0c:83:c0:
5a:f2:c6:1c:66:10:da:3e:7a:f1:41:b4:71:db:ae:
b6:d7:17:8b:35:80:f4:ea:19:89:4e:3e:ca:88:d8:
cc:80:51:bc:1c:b7:84:1f:e3:c0:50:ed:c0:c6:07:
11:a4:f4:98:13:b6:b2:6f:59:51:6a:1c:37:2d:46:
88:f4:13:b1:9e:83:eb:19:00:4c:92:45:25:29:ed:
52:fb:b4:d3:94:fe:6f:bf:40:52:42:23:af:5e:36:
cd:3e:09:e4:77:b8:87:b2:cc:04:29:e2:a9:b2:a6:
2b:40:6f:94:11:05:a3:01:59:bc:c6:fc:dc:ea:45:
45:88:fe:ba:6a:f5:3d:37:7c:e2:91:72:65:e0:8e:
a9:92:95:e4:02:b7:df:00:a9:9f:f4:ae:50:b9:5f:
dc:00:20:68:4b:33:d8:33:ff:d2:cc:9e:3f:f1:bd:
53:f8:71:94:c9:df:7f:af:4f:fb:05:c0:81:85:78:
b7:46:f3:83:69:79:8d:46:d0:5f:d4:37:fe:c5:56:
b9:e5:21:b5:d4:15:81:10:53:b3:14:e2:5c:95:d2:
ce:f1:82:f8:da:b6:51:47:19:2d:29:99:1d:17:f0:
ab:1b:22:ea:01:47:fc:3d:8b:49:af:46:bf:73:74:
eb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F8:9E:18:11:34:0D:3B:1C:70:BE:15:F1:BD:F7:CA:B6:4F:E6:86
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vvieGBE0DTsccL4V8b33yrZP5oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.195.0-37.202.201.255
151.243.16.0/20
151.243.97.0/24
151.243.246.0-151.243.253.255
Signature Algorithm: sha256WithRSAEncryption
ac:9c:fc:93:9f:ca:5e:9f:c3:f7:c8:31:1e:5c:47:53:40:d7:
40:29:8e:06:cc:09:c3:c0:b0:a6:8d:b5:ec:01:ce:9d:b9:9e:
e4:ed:c5:ca:60:b2:43:42:dc:25:9d:bd:bc:ee:84:5f:61:c4:
55:46:7a:27:08:c8:af:af:8d:82:7a:f1:b1:09:ec:36:25:72:
01:ab:a7:78:f0:37:7c:44:3f:f3:b0:ad:4e:99:fb:36:b9:70:
fb:c2:49:16:f5:c6:59:93:fe:2a:bf:a5:e8:72:c5:aa:36:a4:
6f:41:9d:25:93:b7:60:9f:32:b5:ed:c1:b0:26:4c:e3:98:02:
9b:84:e6:e7:0c:db:3e:29:e6:e9:b5:0b:95:a4:30:26:64:9b:
60:f9:eb:38:c6:30:97:9a:7f:fa:b8:e2:4d:4e:0f:55:42:40:
43:10:ba:48:eb:58:44:8c:aa:c9:a4:45:6e:60:d6:59:f2:49:
a3:d0:52:0e:c8:a8:07:99:0e:4a:5e:89:69:f0:39:22:6f:73:
0f:99:8b:ae:fd:5c:62:e3:8f:46:da:f6:3b:70:25:47:86:bc:
e8:c0:04:ef:bd:e8:ac:88:ed:eb:50:c4:a3:44:18:64:31:46:
1e:b4:53:e6:8a:36:82:ca:72:70:66:a3:e0:da:17:41:02:59:
38:d5:57:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:14:22 2025 by rpki-client