Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/vbflL1BiUAPuty2fCg0m-DP2nro.roa
File: vbflL1BiUAPuty2fCg0m-DP2nro.roa (raw, json)
Hash identifier: nOMHU4FFFkndDqSnUdWTHqomXIOJRdemr2UJqqwmdnI=
Subject key identifier: BD:B7:E5:2F:50:62:50:03:EE:B7:2D:9F:0A:0D:26:F8:33:F6:9E:BA
Certificate issuer: /CN=84a4aca020fb2bdc93a47266e87ec67cdc8857c5
Certificate serial: 018CC5DC30C3E3531C3287609FC98D12B73C
Authority key identifier: 84:A4:AC:A0:20:FB:2B:DC:93:A4:72:66:E8:7E:C6:7C:DC:88:57:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKSsoCD7K9yTpHJm6H7GfNyIV8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/vbflL1BiUAPuty2fCg0m-DP2nro.roa
Signing time: Mon 01 Jan 2024 16:29:51 +0000
ROA not before: Mon 01 Jan 2024 16:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50627
IP address blocks: 178.20.32.0/21 maxlen: 22
5.42.144.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:30:c3:e3:53:1c:32:87:60:9f:c9:8d:12:b7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a4aca020fb2bdc93a47266e87ec67cdc8857c5
Validity
Not Before: Jan 1 16:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdb7e52f50625003eeb72d9f0a0d26f833f69eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:13:24:52:60:b5:95:dc:74:d1:2d:92:fd:f4:
93:69:1f:db:b7:07:92:94:f2:9e:d6:b5:a2:53:fa:
8d:d7:78:79:65:0b:e5:ca:1d:de:f3:70:b3:bc:c5:
9c:02:df:a6:eb:72:e1:27:76:da:4a:0d:ce:ac:5b:
7a:23:c9:e0:10:f8:83:81:83:2e:5e:8c:41:64:e5:
24:e8:9a:5a:38:7b:9a:eb:36:a5:28:de:6e:cf:5d:
71:19:96:6a:d9:72:43:d9:0f:12:c3:1a:df:07:96:
fa:3e:f1:3b:65:e4:65:2e:77:75:50:a2:1f:37:eb:
62:fe:98:26:65:47:ea:e8:12:3b:af:0b:36:b5:3c:
40:02:6c:53:e8:be:13:f0:e4:0a:2b:6d:d1:5e:38:
86:dd:a4:f8:67:25:cd:36:62:fa:9e:7b:4e:ac:57:
b8:08:31:c5:e2:50:e3:0b:00:3d:bf:42:1e:ea:d3:
4e:09:69:a2:d4:d6:9e:eb:ba:82:55:91:e7:2d:eb:
e1:72:0d:cc:f4:51:ad:5d:15:ea:b8:14:68:7e:88:
e7:d9:b5:2c:fb:02:4e:49:ab:9e:20:cc:07:83:39:
38:d7:73:68:ad:48:3e:69:0a:b2:51:82:2c:2a:55:
50:87:c7:27:b9:f7:a4:aa:05:71:43:ad:24:98:57:
59:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B7:E5:2F:50:62:50:03:EE:B7:2D:9F:0A:0D:26:F8:33:F6:9E:BA
X509v3 Authority Key Identifier:
keyid:84:A4:AC:A0:20:FB:2B:DC:93:A4:72:66:E8:7E:C6:7C:DC:88:57:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKSsoCD7K9yTpHJm6H7GfNyIV8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/vbflL1BiUAPuty2fCg0m-DP2nro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/6bb227-5b36-4f2a-a1c5-9ef36d251517/1/hKSsoCD7K9yTpHJm6H7GfNyIV8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.144.0/21
178.20.32.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:84:a6:53:b4:9e:7b:b6:9c:53:23:2a:53:f0:e2:13:89:94:
ea:83:30:04:4d:32:56:da:bb:3c:10:f4:03:af:52:ca:27:10:
e4:e0:c4:d8:0c:96:1b:cf:ad:50:79:a6:66:88:7d:66:79:74:
06:77:5d:03:95:a3:1c:17:8e:f3:09:1e:f7:f6:81:68:43:7e:
4e:e4:8b:c4:01:cb:83:24:e0:7e:e2:c8:57:e4:f0:70:24:d0:
c5:3c:8e:e8:3f:93:c7:ba:3d:6d:2c:3e:d1:07:64:b6:37:f4:
0e:81:1d:00:86:c6:44:9c:ff:3d:ac:1e:9b:a5:f4:b0:79:7a:
8d:2e:22:73:63:7d:e9:dc:46:1c:6e:45:49:fc:ab:64:1d:13:
e3:e3:30:00:b9:cd:f1:d3:66:b3:f3:6c:68:56:50:e4:3a:ae:
06:10:09:7c:0c:fe:e1:73:f0:a7:ea:09:f6:23:5d:3e:fb:f5:
60:4b:4d:2a:f8:cf:7f:41:bd:3d:97:51:7a:05:ec:cb:1f:20:
10:1a:18:f9:58:14:cd:d9:7d:92:8a:1f:85:11:05:57:a1:86:
b4:13:5a:87:70:bf:27:7c:4a:a5:f2:85:f8:ab:b7:ff:e4:8b:
6e:8c:3b:02:8e:15:d7:db:f6:ef:a3:6e:5b:a8:63:68:50:ed:
12:1a:5c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:40:14 2025 by rpki-client