Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/VRBiMUcGIjZArUV8CEg2-_ro-lQ.roa
File: VRBiMUcGIjZArUV8CEg2-_ro-lQ.roa (raw, json)
Hash identifier: JksgrgahJucQrBf5vovRgLLOLeAhcsoNy1qUx5Ejpzw=
Subject key identifier: 55:10:62:31:47:06:22:36:40:AD:45:7C:08:48:36:FB:FA:E8:FA:54
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0190071E24B1C789D8D1E17F6D4622342770
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/VRBiMUcGIjZArUV8CEg2-_ro-lQ.roa
Signing time: Tue 11 Jun 2024 11:45:34 +0000
ROA not before: Tue 11 Jun 2024 11:45:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3175
IP address blocks: 2a04:a5c0::/29 maxlen: 29
2a0e:c380::/29 maxlen: 29
2a11:4b41::/32 maxlen: 32
2a11:4b42::/32 maxlen: 32
2a11:4b43::/32 maxlen: 32
2a13:3c80::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 02 Sep 2024 10:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:07:1e:24:b1:c7:89:d8:d1:e1:7f:6d:46:22:34:27:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jun 11 11:45:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=551062314706223640ad457c084836fbfae8fa54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e2:87:a1:22:14:cb:0b:2e:bf:c4:43:65:6d:
aa:02:4e:11:32:0a:78:bd:86:ca:b8:8f:d6:1b:40:
be:ba:7e:14:ee:6d:a8:d2:e7:26:e7:94:f2:f2:f1:
f4:2c:c8:81:24:e2:ce:78:eb:df:49:63:39:b5:ea:
70:44:cb:31:09:29:58:62:e7:c4:f0:94:50:d6:5a:
23:83:66:37:1f:4a:68:bd:66:a0:1d:15:57:53:ee:
7d:a8:c3:2a:10:36:dc:fa:37:b0:0f:72:ee:7c:5d:
aa:c8:9f:90:e7:43:9c:fa:10:94:80:6b:f9:85:d8:
d5:2c:ad:6c:9a:40:9e:56:cc:08:47:27:db:29:1b:
e1:26:12:ce:c6:a4:84:2d:65:7d:c3:15:f4:1c:34:
42:69:84:0a:f7:27:0b:87:a9:48:7c:e9:85:b3:b0:
32:ca:2e:99:5f:a1:02:5f:ec:18:16:de:ee:84:3c:
a1:fa:5a:09:9e:7a:56:5c:87:07:84:85:9f:0c:92:
59:3b:93:0c:ea:d9:bd:69:3c:b8:5c:0c:d2:fd:7b:
89:a4:4e:08:59:7c:40:c8:36:b2:14:c0:a7:52:7b:
9c:b4:fd:c7:28:2a:e1:42:33:39:34:67:d8:f7:9b:
50:87:81:a7:75:4c:84:35:fa:9c:ff:63:cb:98:6f:
27:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:10:62:31:47:06:22:36:40:AD:45:7C:08:48:36:FB:FA:E8:FA:54
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/VRBiMUcGIjZArUV8CEg2-_ro-lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:a5c0::/29
2a0e:c380::/29
2a11:4b41::-2a11:4b43:ffff:ffff:ffff:ffff:ffff:ffff
2a13:3c80::/29
Signature Algorithm: sha256WithRSAEncryption
a9:71:78:a4:68:fd:4d:bf:97:fc:35:be:30:6e:8c:5b:3c:a6:
70:01:48:34:45:f8:63:0d:f6:be:cb:6d:87:29:99:ad:d9:fa:
fe:ef:65:6e:65:7c:45:bf:a4:c2:fd:eb:97:9e:4c:79:67:9a:
c6:10:73:31:9c:0d:c5:e8:c1:5d:9d:47:db:f5:88:0b:29:05:
94:14:f8:c1:1b:82:db:34:e1:aa:2e:9f:27:13:fe:1d:c2:da:
81:49:5f:55:69:fb:d2:73:5c:b4:21:5f:a4:51:15:96:5d:3a:
42:93:29:dd:15:5e:18:0c:ad:6e:69:59:cf:4b:1e:fd:92:ad:
9b:03:10:a5:45:89:0f:59:cc:76:b6:b2:65:95:9f:63:53:0b:
8b:76:ec:58:11:c4:bd:ea:7d:25:27:59:ce:f4:71:d3:c1:65:
ee:52:21:50:87:5c:b7:20:06:b9:26:38:61:db:f6:94:35:79:
06:88:28:85:16:33:df:8e:60:38:cc:a3:cc:23:68:a4:e3:49:
96:93:4c:88:f7:29:6f:35:29:d0:9b:06:b2:3f:a8:7b:e2:53:
f0:02:5b:b9:54:d5:79:4b:a4:f3:d9:4e:20:f8:9c:8d:88:2b:
52:74:13:be:33:59:da:2e:05:00:86:36:7d:5f:8a:08:62:d4:
aa:fa:62:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:44 2025 by rpki-client