Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/Vps2Z7E6r-9RnhsQq17nUqjlHKU.roa
File: Vps2Z7E6r-9RnhsQq17nUqjlHKU.roa (raw, json)
Hash identifier: Bxt61Cuh8X05++ilIvc7K2XmfltxSsDX0051Sfymips=
Subject key identifier: 56:9B:36:67:B1:3A:AF:EF:51:9E:1B:10:AB:5E:E7:52:A8:E5:1C:A5
Certificate issuer: /CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Certificate serial: 0194BCF824D50EE509F219B094B5D68ED8E8
Authority key identifier: 93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/Vps2Z7E6r-9RnhsQq17nUqjlHKU.roa
Signing time: Fri 31 Jan 2025 15:26:06 +0000
ROA not before: Fri 31 Jan 2025 15:26:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214438
IP address blocks: 62.169.158.0/23 maxlen: 24
185.216.20.0/24 maxlen: 24
185.216.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Feb 2025 12:11:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:f8:24:d5:0e:e5:09:f2:19:b0:94:b5:d6:8e:d8:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Validity
Not Before: Jan 31 15:26:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=569b3667b13aafef519e1b10ab5ee752a8e51ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:59:9e:7c:21:69:e1:fa:50:65:f3:59:22:
e0:9a:9d:13:9a:10:24:04:19:37:e9:c6:b6:c8:69:
f1:99:4f:71:05:10:99:55:5d:a8:3f:5f:45:d5:d3:
fa:a8:36:bc:f8:b0:79:13:43:1c:54:10:b9:f1:84:
95:a4:b9:49:3f:9f:80:7c:af:00:1c:ef:47:0b:fd:
f0:b4:ca:ef:de:44:3e:4c:69:66:2a:14:15:0d:f9:
ab:fd:62:48:a1:f9:6b:41:fe:fb:b6:d8:e3:9d:05:
81:bf:b4:ab:2b:be:db:26:f5:55:73:59:f1:1d:4d:
36:df:c0:c4:8b:1b:f8:54:a8:12:33:4d:0d:de:74:
b9:5f:96:29:1e:3b:85:9e:04:15:a5:8e:c1:c6:49:
d9:a0:cc:e1:f8:b8:29:bf:69:d8:19:1f:39:08:43:
bd:95:c8:84:76:94:1a:a7:c7:b0:a9:d8:62:ba:2a:
dd:22:a7:8a:94:93:29:66:08:49:a2:a2:fc:55:bd:
96:60:89:ab:d2:c8:4c:07:fe:d0:6d:80:32:dc:27:
1b:11:41:7a:38:3f:c3:25:4a:96:28:f3:d5:08:3e:
45:b4:21:76:37:1e:9d:44:39:7b:e7:09:1e:b1:83:
6c:a2:3c:6f:c3:69:5c:6a:cf:8c:1f:13:1b:65:08:
2d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9B:36:67:B1:3A:AF:EF:51:9E:1B:10:AB:5E:E7:52:A8:E5:1C:A5
X509v3 Authority Key Identifier:
keyid:93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/Vps2Z7E6r-9RnhsQq17nUqjlHKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.158.0/23
185.216.20.0/23
Signature Algorithm: sha256WithRSAEncryption
24:63:3c:e2:a7:21:82:c6:ca:f7:15:a1:b6:41:f0:77:ad:21:
20:5a:64:91:55:c8:72:94:be:af:8c:44:34:56:69:bb:b1:9c:
53:87:10:c5:8b:a1:e7:db:09:22:dc:65:ee:76:b1:67:72:b1:
d1:a9:40:81:4e:92:8d:56:b1:22:49:2a:4c:78:a5:bf:1c:e6:
66:03:8f:99:47:fb:9b:1b:61:18:60:08:ba:02:a4:68:3e:c0:
26:f4:37:50:9c:c6:d5:5e:ac:fa:f9:cd:54:d8:c8:5d:be:c3:
62:e8:fe:71:a4:f0:b9:b8:41:d2:5d:87:1c:af:fd:70:c7:d6:
b4:1b:9f:d8:2e:23:cb:31:06:2e:d1:20:18:d7:db:2a:9e:28:
7f:b9:2c:5e:6c:b3:82:5f:98:ec:fd:a3:5d:9b:4b:ff:73:e2:
2b:96:8a:d4:ca:03:1f:39:dc:f8:ef:5f:bf:cc:ee:b3:ac:b0:
e9:06:ee:a7:03:77:15:fa:5b:d1:40:1d:19:63:b6:ea:8f:ce:
57:e7:a4:f2:b1:9f:79:7c:20:2e:7a:16:e1:41:96:0b:3a:ef:
a3:bf:5c:22:ca:3b:61:b9:04:8a:bb:a4:d0:0b:15:d2:76:a3:
b1:d8:54:c6:4b:82:c9:45:b9:64:00:b5:84:24:20:a6:94:8b:
f5:b7:43:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:07:34 2025 by rpki-client