Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/V4Mb40DgoK8OPn2DJuYjj7tpH5o.roa
File: V4Mb40DgoK8OPn2DJuYjj7tpH5o.roa (raw, json)
Hash identifier: fQyBWyGNSYW4q98v9niNUTpg00Po+YjgeRrEFpUod6M=
Subject key identifier: 57:83:1B:E3:40:E0:A0:AF:0E:3E:7D:83:26:E6:23:8F:BB:69:1F:9A
Certificate issuer: /CN=544194f8249773d3cd6fb654b239de769c42e864
Certificate serial: 019420D64A6123DF9FC683286E28E05205AE
Authority key identifier: 54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/V4Mb40DgoK8OPn2DJuYjj7tpH5o.roa
Signing time: Wed 01 Jan 2025 07:48:22 +0000
ROA not before: Wed 01 Jan 2025 07:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47869
IP address blocks: 2001:678:730::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 26 Mar 2025 12:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4a:61:23:df:9f:c6:83:28:6e:28:e0:52:05:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544194f8249773d3cd6fb654b239de769c42e864
Validity
Not Before: Jan 1 07:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57831be340e0a0af0e3e7d8326e6238fbb691f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:45:40:73:11:b8:df:fc:7d:52:16:44:36:d8:
55:f4:3b:2c:af:7c:ff:2a:e1:3a:d3:ae:2b:45:c1:
96:01:99:0b:47:8b:6c:ed:eb:53:c7:9e:ef:a3:72:
80:2a:5a:e4:fa:da:50:6e:5f:99:27:26:7a:cd:84:
9b:e2:6c:57:bf:ec:21:5b:03:e7:e8:fe:70:e0:9d:
cf:08:ad:43:69:87:37:b7:1b:42:6b:4a:64:2e:28:
89:1c:62:56:f8:f9:e0:11:6f:0c:41:1f:4a:9c:29:
ca:f7:d4:0b:8f:a0:59:95:d8:2a:52:89:68:b9:7e:
dc:c0:37:57:e4:d1:24:74:59:df:ba:90:5b:83:5a:
49:92:70:1c:ba:59:f9:65:b6:4e:8a:87:c6:8d:82:
87:59:ab:e6:17:ea:7c:af:5b:61:ac:d3:17:3a:46:
cd:c8:9f:d8:e1:c6:4a:2a:91:47:69:bf:e7:10:ed:
4a:80:1d:7d:6c:08:25:09:6b:86:df:fb:6c:2f:73:
d2:5c:6c:be:ca:48:4e:54:67:00:9c:10:eb:04:59:
c0:15:1c:85:0b:3b:80:05:27:67:c4:a5:2d:89:ce:
bc:9b:82:20:24:a8:68:6e:57:69:77:b4:f6:26:6d:
ea:7d:2a:95:a0:98:83:9a:5c:cc:7b:79:4c:87:02:
f0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:83:1B:E3:40:E0:A0:AF:0E:3E:7D:83:26:E6:23:8F:BB:69:1F:9A
X509v3 Authority Key Identifier:
keyid:54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/V4Mb40DgoK8OPn2DJuYjj7tpH5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:730::/48
Signature Algorithm: sha256WithRSAEncryption
8c:b2:a0:45:0b:6b:ea:6c:1c:53:69:33:10:20:a5:8e:57:aa:
3c:04:f4:b7:1c:21:ec:cd:26:85:12:2b:e3:62:a2:b6:98:1d:
98:1c:4c:cf:e6:c5:e4:ce:61:70:dd:79:f2:ae:16:f2:97:61:
99:c1:7e:bc:f6:3a:4e:f6:83:66:49:ce:84:b5:b8:46:f0:e5:
f4:6e:fb:56:c4:d7:23:6e:11:ee:e7:f1:2e:c6:6d:da:10:bd:
06:a8:89:8c:9b:31:ec:7b:66:6e:a9:f0:de:5a:c4:93:07:a6:
37:b7:02:a4:1c:8c:d4:74:1b:98:35:d1:e6:e6:1b:b6:3c:6b:
dc:76:98:ac:54:8a:28:5c:f0:63:8f:fe:3d:71:18:d3:23:8b:
21:48:3d:07:83:0c:e9:6d:b7:21:15:27:32:59:b1:1a:d2:51:
09:0f:ce:56:e9:14:e3:f6:1c:8e:8e:18:ee:aa:bd:a3:d9:9f:
4a:54:d1:44:eb:9c:a1:bf:60:50:5c:e6:c0:56:4a:fc:2a:ef:
b9:8a:d5:3f:c8:a7:7d:e6:a0:ac:b2:3f:53:06:33:b0:50:11:
ca:9e:4e:a8:50:04:cc:6f:58:2f:2c:d2:e7:d2:e8:c7:bd:ae:
8f:c3:23:ab:43:00:00:1b:b7:2c:c9:30:17:68:d4:00:b3:63:
3b:e1:cd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:04 2025 by rpki-client