Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/VrLabo7KsDS5EKj56n7td2DoEks.roa
File: VrLabo7KsDS5EKj56n7td2DoEks.roa (raw, json)
Hash identifier: h9UiQ5OJowcBGcKJGwMdVpssGruJPGiKA1HLlJDpZ+c=
Subject key identifier: 56:B2:DA:6E:8E:CA:B0:34:B9:10:A8:F9:EA:7E:ED:77:60:E8:12:4B
Certificate issuer: /CN=44b1467c20481d11b67ff7bac6498959f718e1f5
Certificate serial: 01932AE0B5BDDEC27D8CA516D07397C40FB4
Authority key identifier: 44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/VrLabo7KsDS5EKj56n7td2DoEks.roa
Signing time: Thu 14 Nov 2024 13:33:09 +0000
ROA not before: Thu 14 Nov 2024 13:33:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42343
IP address blocks: 84.240.96.0/21 maxlen: 21
91.150.0.0/18 maxlen: 18
93.91.188.0/22 maxlen: 22
185.141.96.0/22 maxlen: 22
2a04:b080::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2a:e0:b5:bd:de:c2:7d:8c:a5:16:d0:73:97:c4:0f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b1467c20481d11b67ff7bac6498959f718e1f5
Validity
Not Before: Nov 14 13:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56b2da6e8ecab034b910a8f9ea7eed7760e8124b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ae:07:f6:d8:52:1a:e1:23:88:97:42:c5:77:
d4:b1:1f:51:01:ee:b1:26:dc:a5:40:b4:79:63:a3:
58:a9:44:f3:04:fa:9a:08:0f:ac:cc:7a:61:a7:4c:
7f:ac:8a:95:f8:13:7e:6c:d9:67:c1:31:42:6e:25:
b5:3a:29:cd:d1:23:b0:a8:b1:50:e9:04:d6:2c:66:
0e:fd:a8:f9:3a:e5:35:97:2b:bd:bd:bd:2b:ba:a6:
b1:20:03:7d:85:45:8c:a0:8a:36:1b:90:5c:d4:3d:
0b:54:5c:9c:2b:13:1b:fa:7e:81:0d:d2:e6:0a:42:
be:fc:eb:ce:c7:a0:0f:77:e3:80:53:38:13:78:7f:
64:c7:99:7b:18:c7:d6:39:df:eb:97:5e:2b:06:0e:
8c:6e:6f:f9:24:45:08:52:0f:71:6a:d0:49:34:1a:
56:de:19:15:f7:5b:58:25:6e:50:57:69:8c:4c:ab:
36:2a:82:0e:44:ff:06:da:6e:02:8b:d1:fa:e7:ed:
86:71:63:fd:ad:45:51:bf:3f:b5:fa:2f:aa:36:06:
61:b3:43:f6:8f:0b:67:f5:11:fd:a4:bc:c4:a9:73:
62:19:02:da:cb:f6:d3:e4:08:7a:fa:bc:38:b2:ff:
f9:67:6d:e8:8b:df:c9:2a:c4:66:9d:b3:49:b9:f7:
02:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B2:DA:6E:8E:CA:B0:34:B9:10:A8:F9:EA:7E:ED:77:60:E8:12:4B
X509v3 Authority Key Identifier:
keyid:44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/VrLabo7KsDS5EKj56n7td2DoEks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.240.96.0/21
91.150.0.0/18
93.91.188.0/22
185.141.96.0/22
IPv6:
2a04:b080::/29
Signature Algorithm: sha256WithRSAEncryption
24:a4:6b:04:c9:52:27:ac:b0:13:f1:be:d3:3a:66:f5:15:8e:
e0:b9:90:aa:ab:47:51:b1:0c:b8:2e:72:76:96:ea:c9:80:87:
eb:1a:e0:39:61:46:4a:d1:a3:54:7e:cb:fb:65:27:ab:a8:86:
30:fb:e3:33:c5:50:d2:49:bd:2f:10:eb:60:42:6c:53:1c:b5:
7d:7d:4c:fe:6b:ac:89:4a:9b:9d:88:d3:c0:9c:4e:c5:72:95:
14:10:7f:94:c9:58:d0:08:04:9c:df:5a:32:40:02:8e:7d:8c:
c7:bc:9a:74:6c:7a:b4:3f:02:0b:01:77:69:a1:4c:52:7e:2a:
85:d4:8e:3b:e3:68:4b:f2:e0:8e:88:a3:fc:e8:ec:72:32:55:
ff:14:51:ec:6e:6a:ad:90:06:fc:88:0c:ab:09:b0:cd:7e:85:
1a:0b:cf:2b:fa:ab:51:5d:c5:ae:1e:4a:25:75:fd:a5:80:68:
92:c5:e6:3b:80:d2:75:56:22:fd:de:aa:ad:c2:5a:ce:71:9a:
bf:7b:66:60:46:ed:20:82:0c:cf:b0:67:02:e9:c3:6f:94:70:
50:7c:02:9c:8b:ae:f5:95:a1:db:e8:11:2d:09:ed:79:dc:af:
70:7b:2f:8f:59:03:95:88:e1:bc:ae:a5:60:06:2e:37:78:10:
29:57:48:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:43:03 2025 by rpki-client