Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/vp_rharqdbsN56a5gIQ1DG44_0A.roa
File: vp_rharqdbsN56a5gIQ1DG44_0A.roa (raw, json)
Hash identifier: A2YzzjcPrJiIH0s0a930vobds2JNW0nOtmOwrl0lHEY=
Subject key identifier: BE:9F:EB:85:AA:EA:75:BB:0D:E7:A6:B9:80:84:35:0C:6E:38:FF:40
Certificate issuer: /CN=276e13525244af0d2e640aba29b0f8236bc61e20
Certificate serial: 019365A851305842319A67446342D9FAD515
Authority key identifier: 27:6E:13:52:52:44:AF:0D:2E:64:0A:BA:29:B0:F8:23:6B:C6:1E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J24TUlJErw0uZAq6KbD4I2vGHiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/vp_rharqdbsN56a5gIQ1DG44_0A.roa
Signing time: Mon 25 Nov 2024 23:29:09 +0000
ROA not before: Mon 25 Nov 2024 23:29:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205358
IP address blocks: 193.17.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Nov 2024 18:55:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:a8:51:30:58:42:31:9a:67:44:63:42:d9:fa:d5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276e13525244af0d2e640aba29b0f8236bc61e20
Validity
Not Before: Nov 25 23:29:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be9feb85aaea75bb0de7a6b98084350c6e38ff40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f4:6e:c0:78:89:94:3d:19:f3:92:35:4e:c0:
90:01:3c:c3:5d:d3:1f:82:81:70:bc:19:0d:6f:5d:
d6:b4:87:09:d4:d4:79:a5:e9:34:0d:f7:55:d1:71:
6d:15:1c:35:19:04:34:86:8b:52:d5:e0:68:ad:24:
3a:6b:e7:b2:33:50:76:6a:b1:db:af:79:b2:eb:34:
34:f5:8c:94:ea:59:cf:98:d2:3b:71:6f:07:40:77:
65:7e:eb:37:8f:98:ae:6b:16:4a:40:4d:b3:92:84:
0b:b1:60:08:7c:5a:53:17:fd:e9:ad:ac:cd:8b:c3:
86:1c:ba:46:af:1c:bb:d7:22:74:a5:7e:36:54:15:
99:f2:17:5a:02:29:c8:57:1f:e0:9a:39:ef:93:d6:
ea:2c:70:90:31:1f:3d:a5:73:62:69:cb:0f:12:9f:
3b:41:3f:ef:41:93:07:be:fb:8a:95:31:ba:10:44:
c1:6a:af:74:dd:18:7d:7b:8b:24:6e:da:11:09:62:
24:17:76:f9:88:f5:83:c4:97:0a:71:f3:71:75:00:
b8:ab:42:5d:45:c5:df:5a:c7:69:b9:57:8f:b0:f4:
a7:16:b3:b1:b4:7b:e6:af:97:2e:3a:09:36:ae:1a:
e2:59:1f:84:73:b8:f6:04:e4:34:15:33:e6:68:cf:
67:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9F:EB:85:AA:EA:75:BB:0D:E7:A6:B9:80:84:35:0C:6E:38:FF:40
X509v3 Authority Key Identifier:
keyid:27:6E:13:52:52:44:AF:0D:2E:64:0A:BA:29:B0:F8:23:6B:C6:1E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J24TUlJErw0uZAq6KbD4I2vGHiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/vp_rharqdbsN56a5gIQ1DG44_0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3dd1ae-7b90-4b57-8a3c-4099f4aa9369/1/J24TUlJErw0uZAq6KbD4I2vGHiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.32.0/24
Signature Algorithm: sha256WithRSAEncryption
46:54:95:20:2f:72:2b:a2:e3:6a:95:b3:c0:f2:38:99:fd:97:
84:85:2b:ca:64:1c:fa:12:62:cc:b0:dc:7c:6c:fd:9f:37:b8:
68:60:f1:8e:d6:81:00:8b:05:e7:04:fc:54:3c:99:36:b9:0f:
24:1d:64:fa:d0:82:31:04:22:d3:70:74:30:63:72:7b:99:2a:
5e:32:f7:a6:65:6f:1e:7c:69:08:ba:fe:eb:af:44:20:6d:16:
45:bc:ef:f1:85:e7:49:18:9b:62:25:98:cb:b5:3b:8e:05:33:
65:9f:6e:e4:1f:bc:98:0c:2a:5a:de:50:fb:20:48:98:d3:de:
61:c5:bf:f5:ae:65:75:09:f5:dd:3f:7f:69:35:c6:a2:95:11:
57:63:5c:26:0a:bd:33:ed:02:be:0f:bf:18:ec:9c:28:da:d1:
3e:90:4c:c7:c0:1e:67:ac:1e:38:5e:5f:26:3b:03:cf:40:68:
9b:df:a7:21:4b:6b:eb:00:a0:9c:58:98:3c:4e:c2:5f:b2:d5:
13:47:5c:21:b5:0e:ee:72:f8:d3:a3:19:5d:9e:09:ab:63:99:
b3:97:a8:2d:37:38:d5:d3:4d:d2:18:bc:e9:ae:f0:38:61:10:
6c:40:ac:83:f2:96:52:1b:be:4b:3a:34:39:f3:87:2f:2a:c2:
0f:ce:e6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:46:23 2025 by rpki-client