Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/vBE40yP9CIbQSybKRBcGjxMw7_0.roa
File: vBE40yP9CIbQSybKRBcGjxMw7_0.roa (raw, json)
Hash identifier: d/YeuB2WXGEOQOUzSV3etdy09SUiCkYmZ0Am8ltEV9s=
Subject key identifier: BC:11:38:D3:23:FD:08:86:D0:4B:26:CA:44:17:06:8F:13:30:EF:FD
Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Certificate serial: 019421B21FA4019FE68E8D812FD6C60A21C4
Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/vBE40yP9CIbQSybKRBcGjxMw7_0.roa
Signing time: Wed 01 Jan 2025 11:48:29 +0000
ROA not before: Wed 01 Jan 2025 11:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213245
IP address blocks: 84.17.69.0/24 maxlen: 24
84.17.72.0/24 maxlen: 24
84.17.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 19:21:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:1f:a4:01:9f:e6:8e:8d:81:2f:d6:c6:0a:21:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Validity
Not Before: Jan 1 11:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc1138d323fd0886d04b26ca4417068f1330effd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:03:4f:26:b8:2e:b9:b7:85:80:e4:a3:f4:c2:
85:cf:5e:93:49:ef:1b:25:90:66:46:f3:18:ed:34:
ad:a6:6e:18:30:2e:2d:a3:7b:97:e5:d7:3d:b4:0c:
96:2b:aa:f8:0c:9a:b1:44:1a:32:47:c1:c9:3b:6b:
db:ed:12:7a:2f:c3:6d:ec:3d:0d:04:33:ac:59:7a:
10:1a:1d:57:7a:54:ce:08:dd:2e:a0:97:70:c9:32:
73:13:1a:31:d0:d0:0d:64:19:6b:6a:1b:da:87:4d:
8e:40:87:14:6e:be:12:e9:c8:b1:89:14:a7:7b:a6:
9e:fe:38:00:b0:56:8c:76:8c:bb:d5:f9:3a:4c:ab:
ae:fb:05:95:e1:cc:f3:06:5f:e6:01:e3:4c:af:6f:
1a:24:4c:8c:ef:9f:fb:0e:2c:b7:9d:bb:80:f5:b7:
df:53:d6:9a:77:dd:58:34:2b:81:9d:4a:7c:92:66:
86:27:fa:50:c6:52:55:55:8e:c3:b4:37:e2:a3:86:
9e:2f:3d:4a:c2:f3:d3:af:88:ec:b3:e3:ff:f5:81:
02:59:e7:91:4b:6e:10:eb:7a:0b:77:c7:34:24:88:
e5:95:84:2b:fc:10:29:ed:03:52:96:e4:fb:1b:12:
70:8e:44:5e:77:e8:c1:1c:6a:a7:58:18:b2:4c:80:
2a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:11:38:D3:23:FD:08:86:D0:4B:26:CA:44:17:06:8F:13:30:EF:FD
X509v3 Authority Key Identifier:
keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/vBE40yP9CIbQSybKRBcGjxMw7_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.17.69.0/24
84.17.72.0/24
84.17.88.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:75:5d:3d:e6:76:97:3b:9a:e9:25:d4:14:8b:a8:a2:4d:58:
f4:56:28:ae:ca:97:04:ed:36:ff:44:d5:ab:ad:06:89:62:b3:
67:ef:82:20:75:f6:42:40:68:a8:ea:9b:6e:55:76:e4:8e:07:
bc:55:23:9c:2e:de:39:a4:6d:93:37:96:ec:fa:fe:ec:09:e2:
7f:44:68:8d:03:b5:e0:33:32:86:ea:e2:c8:63:6b:22:d7:77:
64:cb:67:14:cc:da:84:cd:09:54:ad:92:3f:17:68:8e:00:d0:
79:2b:74:e8:ed:d7:6f:51:b0:30:63:5c:f5:f8:66:a8:17:0d:
ea:80:c1:d3:bb:73:99:2e:6a:a7:39:48:54:aa:d3:c3:d8:69:
60:82:0a:6d:62:09:e9:e8:fa:35:af:34:68:56:1e:37:ff:9f:
be:6a:eb:e7:96:ef:20:c1:e3:30:4b:8b:3f:8d:0e:ef:7b:95:
3e:6d:5d:ac:77:6c:20:94:8f:c6:e7:a6:9a:5d:72:b5:df:58:
67:a2:e2:36:a8:5e:11:17:93:1a:a1:35:79:0b:b3:3e:19:a2:
77:de:c2:a6:08:83:60:34:b8:a9:f9:b0:cb:0e:a1:05:e4:74:
1f:8a:1d:db:e6:0b:35:b1:38:71:76:24:68:0b:7b:8b:67:24:
9f:8d:5e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:11:21 2025 by rpki-client