Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/VT015Lcmw3jwQW4cjIZVYW-STdA.roa
File: VT015Lcmw3jwQW4cjIZVYW-STdA.roa (raw, json)
Hash identifier: PusIaWIhCquIl+Hs+4TwMnzteXm2NPqG3wevH+aPCgQ=
Subject key identifier: 55:3D:35:E4:B7:26:C3:78:F0:41:6E:1C:8C:86:55:61:6F:92:4D:D0
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 0192C2D736046D22A41662C92BB0BF7778B9
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/VT015Lcmw3jwQW4cjIZVYW-STdA.roa
Signing time: Fri 25 Oct 2024 08:42:16 +0000
ROA not before: Fri 25 Oct 2024 08:42:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 84.239.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Nov 2024 10:40:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c2:d7:36:04:6d:22:a4:16:62:c9:2b:b0:bf:77:78:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Oct 25 08:42:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=553d35e4b726c378f0416e1c8c8655616f924dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3e:06:7f:75:2c:4e:12:5d:1c:ed:74:ea:71:
59:22:2f:46:d1:31:2c:f6:66:b7:80:56:a5:e8:1d:
40:fa:19:6a:a0:c2:39:e9:8f:77:2a:e3:1e:10:b4:
68:50:a8:68:48:c0:d2:eb:cf:c0:61:48:2e:22:fb:
05:d9:ff:01:73:13:76:01:20:e5:7a:be:2e:2a:39:
60:80:50:41:88:12:49:2f:24:6c:7b:55:92:9f:3e:
a4:fb:69:da:b3:2e:e2:b5:b6:92:f7:cb:40:f5:d7:
d2:27:57:ff:ce:52:3d:08:1b:25:3f:6e:a3:6f:2a:
1f:4b:9b:88:56:2a:a7:61:ea:a9:f7:23:97:16:b5:
60:cc:c3:f2:fa:58:8e:39:13:1e:de:44:27:dc:a6:
7f:0e:51:d0:76:c6:02:7a:ab:b0:98:6b:93:a4:2e:
b5:ec:bc:60:5d:15:4a:8a:03:0c:33:74:02:00:5f:
4b:89:9a:03:16:d8:dc:a3:17:66:03:55:17:6a:c9:
52:91:3c:2e:27:c8:51:7f:37:e6:d0:95:69:e1:11:
fa:2d:88:25:6f:63:1c:a9:f8:c8:7b:78:ed:05:01:
c5:ee:5c:2e:ba:36:28:15:05:0c:89:5d:37:df:cb:
49:25:a0:44:13:dc:d1:97:2a:4e:27:4e:8f:42:25:
47:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3D:35:E4:B7:26:C3:78:F0:41:6E:1C:8C:86:55:61:6F:92:4D:D0
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/VT015Lcmw3jwQW4cjIZVYW-STdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.60.0/24
Signature Algorithm: sha256WithRSAEncryption
13:bb:1c:00:ad:e6:5f:87:2c:c6:5f:b4:fa:56:bc:af:ad:07:
a8:0b:17:59:0f:63:38:ef:4c:af:ef:b6:d3:93:4d:f9:5d:fb:
09:db:52:3b:58:de:07:cc:61:62:d0:9a:4d:12:21:71:e5:44:
2a:ad:f7:db:bb:94:ec:d4:1c:07:fd:1e:a1:e9:4a:c9:c6:c0:
2a:68:34:ee:f3:75:8d:95:1e:43:e6:6f:94:07:4a:66:a8:99:
4a:6c:f0:4f:f2:12:79:a4:b5:5c:90:5c:15:5a:f5:a9:96:2c:
dc:c2:14:cb:48:95:a6:6a:78:4f:eb:4e:59:21:7c:d2:8c:af:
06:50:16:d6:9d:e6:67:0a:59:26:27:02:8a:ed:a4:f2:1f:0b:
35:03:2f:83:de:81:be:f6:96:93:e6:fe:8e:9e:49:82:5b:5e:
c0:f9:fd:a4:ba:b9:84:bc:28:4f:37:69:87:94:92:e7:97:f2:
6c:c2:0d:20:85:c4:e9:f6:63:47:53:ed:7f:57:e3:e7:89:14:
db:2e:a4:cb:24:d3:49:f6:ab:ab:60:10:45:5f:75:42:12:33:
2f:ff:09:bd:b5:29:70:b9:ff:b9:b1:14:f1:16:ae:85:81:39:
f3:71:cf:95:60:09:24:01:d5:15:52:75:aa:5d:3d:b2:b9:e3:
33:59:b0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:16 2025 by rpki-client