Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/Vf4-A9TfJHyH3bFXiP31njq64zc.roa
File: Vf4-A9TfJHyH3bFXiP31njq64zc.roa (raw, json)
Hash identifier: SX/z8fFEDDoXbcTlYiUD0NeiJE5t8cBXjhSWNdRmkWw=
Subject key identifier: 55:FE:3E:03:D4:DF:24:7C:87:DD:B1:57:88:FD:F5:9E:3A:BA:E3:37
Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial: 0193BF069F329E630155663262A69FD4FCB7
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/Vf4-A9TfJHyH3bFXiP31njq64zc.roa
Signing time: Fri 13 Dec 2024 07:58:22 +0000
ROA not before: Fri 13 Dec 2024 07:58:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15731
IP address blocks: 185.167.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bf:06:9f:32:9e:63:01:55:66:32:62:a6:9f:d4:fc:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Validity
Not Before: Dec 13 07:58:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55fe3e03d4df247c87ddb15788fdf59e3abae337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:9c:46:0f:cd:2c:f8:49:93:44:f2:a0:ef:
ab:e8:14:a5:bf:6e:6b:de:9f:62:ae:0b:14:c8:90:
1d:b7:9f:4b:70:6e:d0:b0:8f:fd:c2:f2:78:35:d7:
ff:1f:b6:79:97:54:b7:0b:17:b0:4e:ba:73:8b:eb:
62:64:ef:6a:f3:77:62:7e:52:6e:f2:fe:d9:39:83:
1e:f2:68:bd:18:05:06:80:f2:d2:d2:1c:f3:d7:58:
e0:8f:f6:9f:94:32:21:8e:cf:46:93:8a:94:a0:3e:
c3:9e:d9:33:7e:fb:9d:38:de:b7:de:97:0a:4d:4c:
56:15:da:55:9d:0d:7d:08:a9:81:df:35:2d:8c:09:
9d:67:cd:cc:d9:3b:f4:a0:72:3f:87:f9:de:04:22:
59:d8:31:d8:4f:4b:5c:62:46:54:28:22:4c:80:9d:
f8:69:97:2a:ce:42:3b:ce:26:43:2a:ce:ad:13:7d:
17:88:55:9a:fa:6a:e1:4b:45:48:37:ef:54:e3:59:
f7:6a:a9:ce:2b:50:fd:bb:45:14:15:0a:96:35:07:
56:01:e7:cb:ee:41:3c:ee:3d:6d:33:f6:01:df:7c:
f2:f8:a9:75:86:bc:8f:7e:7c:53:8d:86:c3:1a:c8:
c7:57:b5:50:c5:12:30:8d:07:f9:06:d5:2a:89:7d:
8b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FE:3E:03:D4:DF:24:7C:87:DD:B1:57:88:FD:F5:9E:3A:BA:E3:37
X509v3 Authority Key Identifier:
keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/Vf4-A9TfJHyH3bFXiP31njq64zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.232.0/24
Signature Algorithm: sha256WithRSAEncryption
51:23:d2:4b:aa:03:58:ae:50:fb:d7:b8:a2:bb:b4:20:50:33:
43:cf:d0:cb:a1:f2:f5:7b:1a:8b:63:01:bc:e2:27:e6:c2:6f:
5e:33:60:55:d7:e1:b0:84:fc:d6:0c:5d:34:50:fc:8b:7e:49:
e2:d9:28:ac:05:78:6c:1f:01:53:53:d7:aa:94:f0:e6:b5:e6:
57:07:51:d1:ff:21:aa:72:f2:7f:1d:52:ff:0a:85:b0:c7:6d:
61:88:cd:11:e3:f7:25:9b:9b:ed:b2:c4:b1:95:53:f0:a8:a7:
58:d9:99:75:bb:8b:fc:58:bd:9b:bf:ea:d7:a6:fe:33:4e:0e:
68:04:de:a9:c4:91:b6:7b:e7:73:9e:e6:ea:4d:dd:95:de:11:
85:53:83:69:93:2a:c2:1d:2c:4c:37:17:c6:2a:fc:82:9e:87:
74:24:45:fa:28:2e:48:eb:e2:72:05:9b:b6:0b:82:88:38:0e:
98:be:63:c8:de:1f:a0:05:06:bb:d9:6c:eb:38:73:b1:61:c7:
79:85:09:00:d1:2f:c1:bb:cd:ad:ec:2c:51:f7:3e:5d:5d:eb:
91:62:7c:5b:ef:f3:95:4a:e4:9f:d5:ac:a3:0e:64:57:f9:00:
01:61:9a:e1:96:a4:2b:c9:0b:d0:a1:21:02:18:e4:10:cb:56:
8d:3f:29:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 04:22:13 2025 by rpki-client