Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/vLvhlEyQcEW9Lp_1npjCx3GZ0v0.roa
File: vLvhlEyQcEW9Lp_1npjCx3GZ0v0.roa (raw, json)
Hash identifier: mKdCH3hSmUv8d1YNHLWtwsT5UPr1vFjPCBhsOUrmAPU=
Subject key identifier: BC:BB:E1:94:4C:90:70:45:BD:2E:9F:F5:9E:98:C2:C7:71:99:D2:FD
Certificate issuer: /CN=b541558181f7863119bf4a1554c75dab1f6c5292
Certificate serial: 019198E04EDE438B7F7554033A148364332D
Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/vLvhlEyQcEW9Lp_1npjCx3GZ0v0.roa
Signing time: Wed 28 Aug 2024 12:05:22 +0000
ROA not before: Wed 28 Aug 2024 12:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 101
IP address blocks: 89.169.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:98:e0:4e:de:43:8b:7f:75:54:03:3a:14:83:64:33:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292
Validity
Not Before: Aug 28 12:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcbbe1944c907045bd2e9ff59e98c2c77199d2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2e:0d:53:43:e3:7e:4a:ea:d8:81:12:75:1b:
fb:08:56:ce:3c:1a:5c:ce:2c:38:b3:6f:4d:24:9e:
41:fd:7e:bf:e6:34:19:99:e8:22:3c:2a:36:97:7a:
e2:24:e2:31:cb:e9:03:37:b7:57:c1:b3:f9:5b:66:
0e:f0:9d:0c:78:2f:ce:b5:cc:c4:73:d8:32:c4:e0:
ab:6a:b4:c9:84:9c:b6:27:ca:46:c6:07:da:c5:60:
0c:72:af:e8:1a:3f:40:e6:a8:5c:89:e5:8f:eb:07:
36:a7:6e:2a:f1:b0:0a:be:96:30:79:c3:a1:64:c4:
58:85:6c:3a:f5:d8:11:0f:a7:9d:da:c8:53:ce:41:
dd:ce:06:f5:1b:1a:0b:00:bb:94:93:43:7b:76:9f:
b3:8f:82:4f:85:25:03:1c:12:fa:05:31:c8:1f:be:
d4:25:4d:97:7d:96:66:ff:1f:f9:0a:5a:ab:e4:16:
ee:ee:34:1f:c5:7f:5d:bf:a6:3e:16:1a:c9:7a:b0:
a1:a1:64:5d:2c:36:82:6a:4e:ff:99:3b:0c:07:85:
08:b9:4d:b3:7e:94:70:79:56:b3:2b:1f:da:a3:47:
8d:77:b6:65:e2:a3:7e:e2:e4:35:2f:2e:6e:19:46:
72:54:b7:d8:f1:d7:de:93:a6:e4:ad:c3:47:88:c3:
08:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BB:E1:94:4C:90:70:45:BD:2E:9F:F5:9E:98:C2:C7:71:99:D2:FD
X509v3 Authority Key Identifier:
keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/vLvhlEyQcEW9Lp_1npjCx3GZ0v0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.169.15.0/24
Signature Algorithm: sha256WithRSAEncryption
12:32:ee:56:52:f4:4c:9e:0b:11:c4:ad:c2:30:10:29:bc:41:
35:93:de:5e:05:4c:3c:93:39:3a:2f:84:bf:f9:e9:47:83:bf:
fa:2c:40:6b:5f:0e:a3:ae:1b:b5:d8:25:dc:94:41:ba:89:37:
73:70:b1:62:03:7e:c1:4a:6b:00:16:27:e3:4c:6d:d1:d3:0a:
19:24:04:4c:7e:18:c4:d0:c8:2d:6e:b5:ab:5e:53:34:7c:2b:
75:c3:c6:af:11:c4:af:8d:f2:f3:82:e6:e3:8d:fe:1e:2b:f4:
b1:8c:c2:9f:55:55:37:b1:8e:40:ec:fe:c6:55:79:97:2e:f6:
55:a0:b1:90:43:30:f8:b7:2d:65:b4:bf:46:09:e6:27:b3:c0:
5d:9d:1a:a3:a5:78:92:ad:d4:b0:81:78:e5:8b:8c:46:35:85:
7b:49:fa:ae:1b:e2:bc:89:e8:3b:59:d9:f7:90:71:dd:ba:a2:
32:c1:3e:bf:ca:48:88:57:07:f5:b6:1e:48:25:21:12:d2:74:
42:4e:e8:0e:72:f0:b0:d6:1c:7f:35:c8:4a:d5:56:dc:dd:10:
bd:21:39:21:d7:ab:0e:5e:1d:3a:cd:ee:f9:5e:16:57:63:7c:
b7:90:22:1e:eb:04:a0:1d:c6:bb:72:84:96:6f:68:f9:ca:7c:
7b:ff:41:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 08:07:17 2025 by rpki-client