Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/VVGaZzzbQj6Sfm0ovPyC_oLs-B0.roa
File: VVGaZzzbQj6Sfm0ovPyC_oLs-B0.roa (raw, json)
Hash identifier: VYjSvTasRZ6H/B8SjKR33CHEm9ZrkDISPWwSsnDl/dI=
Subject key identifier: 55:51:9A:67:3C:DB:42:3E:92:7E:6D:28:BC:FC:82:FE:82:EC:F8:1D
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018D87FB62D1408A465F09B536CAC2951386
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/VVGaZzzbQj6Sfm0ovPyC_oLs-B0.roa
Signing time: Thu 08 Feb 2024 09:10:15 +0000
ROA not before: Thu 08 Feb 2024 09:10:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197397
IP address blocks: 195.76.0.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:87:fb:62:d1:40:8a:46:5f:09:b5:36:ca:c2:95:13:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Feb 8 09:10:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55519a673cdb423e927e6d28bcfc82fe82ecf81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a6:f8:f6:90:68:b9:c6:dd:16:38:8e:43:bb:
b5:d4:45:bb:6d:45:8e:aa:0f:52:c4:3b:23:b9:6e:
09:78:fd:68:68:66:c5:d6:de:76:d8:f6:11:33:56:
5b:8f:e4:94:09:79:6b:11:53:52:66:25:d4:20:3d:
87:20:f8:2f:78:ea:c2:82:d0:33:81:83:2e:3a:d8:
ef:d3:c6:5c:53:c9:62:72:df:6d:28:95:c5:b6:7a:
78:c4:e8:4b:1a:92:e6:68:07:4b:3a:1d:aa:7a:b8:
e7:4f:6c:69:d2:b2:61:bb:46:9a:20:9f:6e:5b:db:
cf:d0:c4:2b:ca:97:c5:3e:7d:0a:48:d2:38:60:76:
e0:c6:be:1b:48:10:df:36:48:16:4d:5c:1a:be:6d:
b8:a0:88:a1:5c:59:a0:2d:9c:e3:7c:9f:73:e4:4f:
83:e5:c6:69:e6:fa:49:5b:04:5a:6a:97:f1:b2:8f:
5c:0d:38:1a:35:4a:b5:86:27:70:b3:2d:ad:d8:e7:
fa:fd:10:58:5e:40:c1:8c:07:15:03:8c:41:b7:af:
3a:8c:bd:36:19:eb:65:fb:8f:eb:5d:50:c8:88:8e:
7c:00:19:1b:19:61:fd:cb:c3:71:8c:12:31:85:5e:
d3:d8:79:aa:7b:0a:89:ef:df:88:17:e7:5f:67:bb:
89:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:51:9A:67:3C:DB:42:3E:92:7E:6D:28:BC:FC:82:FE:82:EC:F8:1D
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/VVGaZzzbQj6Sfm0ovPyC_oLs-B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.76.0.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:88:f0:98:e6:ce:02:0a:a5:fa:5f:9c:fe:2c:2a:2d:61:fe:
4d:16:2c:03:ac:03:21:cd:fe:09:20:ed:21:e7:30:8f:93:03:
24:bc:f9:b0:81:d2:aa:ef:ae:e0:77:10:76:45:57:e9:38:6f:
44:2c:f0:f5:47:85:9f:93:db:2f:59:1b:8b:c5:3a:61:85:6d:
62:30:e9:74:cf:ee:6d:cc:ac:0e:d5:88:d6:c1:b9:7c:68:8e:
e2:22:fa:7a:5f:56:fa:f6:c0:83:be:7a:f2:bd:68:af:fd:0c:
0a:e6:90:d7:d2:22:96:c2:bd:42:18:fa:93:c8:37:bc:c1:c4:
32:14:38:fe:b2:15:8b:b6:dd:93:4c:50:4b:f6:b4:1a:55:aa:
56:2a:a3:ad:3c:f3:a9:35:b3:f4:84:a5:4e:7c:c6:8a:75:14:
09:3f:1d:0e:20:dc:5d:25:1b:5e:4a:09:04:5c:b9:df:f2:9a:
15:e5:94:06:95:8b:09:45:45:e6:a8:dc:8b:43:ff:4e:2a:73:
e8:df:6f:11:30:24:9f:28:0e:89:38:91:98:e5:a2:24:95:87:
d9:b4:50:95:bd:2d:0c:7b:cc:5b:74:39:1f:26:09:2d:ab:08:
9c:90:09:20:0c:d7:a3:5b:75:cd:15:f0:41:36:38:5a:4c:a4:
0c:f5:8e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:34 2025 by rpki-client