Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/VLJIf2xfds9Id5DnXSya-vP26ng.roa
File: VLJIf2xfds9Id5DnXSya-vP26ng.roa (raw, json)
Hash identifier: b/yW7ouz/OtuNAzPAQTllJu/zlphlA6wqzAfcuE7Py4=
Subject key identifier: 54:B2:48:7F:6C:5F:76:CF:48:77:90:E7:5D:2C:9A:FA:F3:F6:EA:78
Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial: 018CCA2B5BDD1A2ED81F6CA550D044AA48A3
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/VLJIf2xfds9Id5DnXSya-vP26ng.roa
Signing time: Tue 02 Jan 2024 12:34:48 +0000
ROA not before: Tue 02 Jan 2024 12:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32323
IP address blocks: 176.121.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:5b:dd:1a:2e:d8:1f:6c:a5:50:d0:44:aa:48:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Validity
Not Before: Jan 2 12:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54b2487f6c5f76cf487790e75d2c9afaf3f6ea78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:43:56:f0:0f:89:0d:8e:a6:60:48:c7:7b:00:
16:2f:76:f5:0f:6c:13:4e:9f:94:91:a4:df:b3:95:
d8:03:1e:62:8c:b0:55:e3:02:0e:84:e5:6c:a1:a9:
c2:af:82:31:26:5d:7b:66:0c:62:54:db:06:f0:cc:
c9:b4:57:51:b1:b7:84:61:fa:4c:72:e7:53:f3:c8:
f3:c4:f1:1b:ea:8b:77:f5:8b:0b:42:1d:8e:70:fd:
a3:5f:3c:e0:81:66:90:8d:a8:40:41:f7:36:00:39:
e7:de:3c:de:17:3b:3c:27:c1:d9:a7:3f:e0:aa:4c:
35:e9:cd:63:fe:1d:a5:c8:7b:5d:49:dc:ae:2a:31:
c7:78:c9:ab:a6:9d:0e:2f:0e:10:7f:5c:71:59:92:
e6:92:2f:8c:93:45:95:d4:5d:82:45:2c:e1:78:ba:
b5:4c:fa:fc:05:09:f5:48:d6:9d:0c:f0:77:80:c3:
08:e5:d3:b1:cd:e0:57:ea:0a:5e:51:46:53:6a:fe:
f2:37:59:4a:74:21:c6:2b:0e:28:50:ee:c8:06:52:
9d:6a:e7:d2:ea:83:3c:09:e4:31:33:c2:59:32:97:
9e:73:4a:53:00:c7:75:f4:e7:0c:68:15:78:7d:4e:
bf:65:70:e2:52:85:aa:a6:db:22:1e:86:5d:ae:b0:
f6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B2:48:7F:6C:5F:76:CF:48:77:90:E7:5D:2C:9A:FA:F3:F6:EA:78
X509v3 Authority Key Identifier:
keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/VLJIf2xfds9Id5DnXSya-vP26ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.92.0/24
Signature Algorithm: sha256WithRSAEncryption
02:28:34:a0:d9:a2:49:b5:39:11:de:e7:68:d5:f8:01:1c:7e:
21:78:83:f6:9d:d6:e3:7b:a6:4a:67:86:5f:39:80:c4:a9:44:
1c:c7:0f:d8:a2:6b:8f:26:94:a4:e5:18:14:06:8d:0c:69:89:
ea:31:03:e6:0f:74:bb:cd:59:55:7f:22:25:47:00:c9:86:67:
5d:9f:24:a6:c4:ca:a8:95:5a:84:c1:4d:98:83:59:ef:7b:28:
da:e9:33:c3:06:6f:ec:b3:91:b1:c5:65:c2:ab:4d:7a:a6:d0:
e4:7d:01:b9:8c:9c:ec:3d:f9:85:3d:fb:d8:6e:02:dd:14:44:
d6:59:93:49:43:84:46:59:18:31:f3:7a:ec:93:24:c9:51:ec:
76:1d:c7:45:26:e2:fd:44:4e:45:03:a6:1b:c1:7e:f3:49:df:
2b:27:45:96:7d:dd:aa:7b:07:3a:f0:c8:c7:99:79:d6:5b:66:
3f:97:4c:ec:44:6e:3b:45:a7:ab:3e:47:14:f6:a1:97:5c:47:
c6:e5:cf:12:e6:b3:dd:8d:cf:62:e7:ed:53:41:fe:ea:b4:f0:
a7:d6:bf:ce:3e:3f:45:ff:69:6f:25:35:5d:e6:17:b4:c3:02:
fd:9e:d0:ee:e4:18:f5:cf:89:48:04:2c:0b:8e:5a:f6:53:bb:
d7:fa:60:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:25 2025 by rpki-client