Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/p--VDEO4g6zdJNtoxM9VoihM19o.roa
File: p--VDEO4g6zdJNtoxM9VoihM19o.roa (raw, json)
Hash identifier: HDKKZm+dLpkm8kBXth8qljd9zGdAS+KOkzAVkdyxSTc=
Subject key identifier: A7:EF:95:0C:43:B8:83:AC:DD:24:DB:68:C4:CF:55:A2:28:4C:D7:DA
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019036BD4EA54CD5867C956B09006AE4E30F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/p--VDEO4g6zdJNtoxM9VoihM19o.roa
Signing time: Thu 20 Jun 2024 17:41:34 +0000
ROA not before: Thu 20 Jun 2024 17:41:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55286
IP address blocks: 5.181.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Jun 2024 16:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:36:bd:4e:a5:4c:d5:86:7c:95:6b:09:00:6a:e4:e3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 20 17:41:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7ef950c43b883acdd24db68c4cf55a2284cd7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:62:3a:f6:06:c9:09:b8:2a:09:83:5d:1d:fa:
9e:8d:6a:34:bd:42:b8:7f:42:46:67:59:d3:0a:40:
38:61:fd:4d:33:40:93:8e:c6:c8:c8:e0:c0:2e:9e:
ad:83:0a:0f:68:14:2d:9d:8e:20:21:89:24:4e:56:
20:8a:e4:c8:90:fc:e9:11:40:bf:43:7b:55:07:f1:
9b:49:09:9e:36:a9:9c:09:c0:26:39:bc:c3:76:d8:
be:b9:0a:9d:a8:e3:16:84:c6:e0:56:41:d8:b7:49:
0e:0d:26:61:f9:8c:74:52:0b:b4:02:f4:49:59:3d:
38:2a:7b:4a:52:8a:f0:50:c9:40:84:3c:c0:67:bc:
b8:a4:b0:79:61:73:b0:5d:38:8f:ed:9b:0c:f9:b0:
cd:10:4e:36:ca:c5:db:4b:25:81:db:44:e0:a7:32:
2c:b5:ca:80:8e:e5:77:b8:88:4d:97:10:ae:f0:4c:
30:5b:6c:c2:8f:c1:d0:25:9c:b1:be:77:a5:99:91:
28:53:de:bc:a8:fd:5f:7c:75:4a:fd:48:98:64:5d:
9c:4e:6b:23:68:5e:ea:87:1e:9e:12:7e:03:c7:2f:
ec:a5:8b:96:db:84:34:eb:2e:fe:74:0d:15:fc:9c:
b2:ff:2f:3e:23:b9:87:79:47:a5:41:85:3d:fe:6e:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EF:95:0C:43:B8:83:AC:DD:24:DB:68:C4:CF:55:A2:28:4C:D7:DA
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/p--VDEO4g6zdJNtoxM9VoihM19o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.182.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:47:a9:3e:24:34:ad:08:28:c1:49:42:6f:ae:84:15:bd:fb:
f3:6d:32:3e:9f:f8:24:5e:6c:88:a6:c0:91:cd:02:f0:98:ab:
1d:58:ff:76:4a:a6:59:66:5e:0e:66:4b:93:70:e6:78:26:eb:
ff:7f:4a:d5:66:f5:7b:06:d2:90:03:72:1e:c2:77:f7:92:26:
c2:b9:bb:26:ac:4a:cb:65:a4:b6:3e:e9:94:bf:0c:a0:a8:00:
07:6b:d2:c1:a5:84:90:15:36:80:55:89:4b:c5:3c:a2:eb:f0:
4e:96:45:a9:35:b3:ed:18:57:67:9c:c7:00:e7:60:73:82:5d:
12:09:b1:51:9e:df:49:0b:08:e8:3c:89:59:c1:48:7d:1d:b2:
5d:f0:fc:35:6f:52:a4:8e:73:d0:ed:42:ce:00:80:41:bf:9f:
98:68:9c:14:56:9d:59:af:a4:12:38:2e:00:35:25:16:e4:46:
03:10:f2:69:fb:4a:60:66:3b:09:8b:44:58:d7:13:e8:3b:a0:
a9:41:47:41:4d:ed:5c:8b:fa:40:6f:ab:55:08:16:c7:49:bf:
16:ae:6f:73:c5:df:ff:03:d2:a8:f0:b7:70:73:da:4b:46:a1:
90:96:70:d5:4b:5a:7b:d5:b9:cd:64:ae:b9:68:00:9d:a6:28:
f1:13:6b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:17 2025 by rpki-client