Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/rn110meMUPMLgiNhEQbipG_Vizk.roa
File: rn110meMUPMLgiNhEQbipG_Vizk.roa (raw, json)
Hash identifier: MR2FYTRrVdMwm6eSeHRG7xL9oEtdvOpxfoSfzH5+k40=
Subject key identifier: AE:7D:75:D2:67:8C:50:F3:0B:82:23:61:11:06:E2:A4:6F:D5:8B:39
Certificate issuer: /CN=855be74d09d9b05251dad2c9696793c04b40f241
Certificate serial: 018D8056E7E98B631531F7F96594ECB7A0A6
Authority key identifier: 85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/rn110meMUPMLgiNhEQbipG_Vizk.roa
Signing time: Tue 06 Feb 2024 21:33:15 +0000
ROA not before: Tue 06 Feb 2024 21:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210570
IP address blocks: 176.126.127.0/24 maxlen: 24
2a12:7c0:affe::/48 maxlen: 48
2a12:7c1:affe::/48 maxlen: 48
2a12:7c6:c001::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 11:39:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:80:56:e7:e9:8b:63:15:31:f7:f9:65:94:ec:b7:a0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855be74d09d9b05251dad2c9696793c04b40f241
Validity
Not Before: Feb 6 21:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae7d75d2678c50f30b8223611106e2a46fd58b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dc:4d:82:df:f6:63:19:68:2b:23:1f:0c:17:
78:82:66:e6:43:c5:cd:68:be:4a:58:c0:0c:aa:15:
8a:a5:08:80:c0:72:b1:c4:b2:4a:3a:07:dc:7d:c1:
12:ff:52:af:95:4e:d1:07:44:1e:ef:cd:5d:46:f8:
5f:4c:10:41:5f:ad:b4:90:e8:f1:71:db:50:8c:78:
51:63:2b:79:ed:d5:13:da:56:3b:e1:93:0c:54:f0:
62:8c:54:4b:90:9d:f7:26:89:a3:97:7e:b3:82:c2:
90:ef:0a:b4:71:22:ba:f7:cc:24:ab:a2:92:04:04:
dd:d5:7f:0e:52:10:cb:4e:0a:1b:4e:fc:b2:4c:03:
71:d5:e4:3b:e0:5c:a3:17:9e:86:df:28:71:a2:de:
57:ee:3b:4d:9a:53:66:05:c7:60:48:4c:9a:84:60:
b7:4d:2d:08:e4:c2:3d:2d:f3:43:02:2f:9f:7d:5b:
c9:2d:96:18:4e:35:c9:9d:3d:6b:72:82:6e:eb:3c:
34:5b:53:ee:47:c8:77:bf:9f:88:bd:00:d7:58:0d:
78:e2:59:ad:f6:36:6d:ad:dd:ae:c6:28:a3:9a:e8:
2f:b1:1a:75:a5:f8:cc:4e:fd:50:3c:48:4f:c0:fc:
47:8b:cf:cd:d0:ac:d0:9b:0f:0d:18:d3:c9:e6:8a:
94:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7D:75:D2:67:8C:50:F3:0B:82:23:61:11:06:E2:A4:6F:D5:8B:39
X509v3 Authority Key Identifier:
keyid:85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/rn110meMUPMLgiNhEQbipG_Vizk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.127.0/24
IPv6:
2a12:7c0:affe::/48
2a12:7c1:affe::/48
2a12:7c6:c001::/48
Signature Algorithm: sha256WithRSAEncryption
14:cc:11:e5:f4:4a:9c:a0:04:ef:ce:bc:b3:0d:28:cd:3b:6f:
d5:8b:03:ae:9e:02:04:fd:a8:f2:23:e6:ca:7b:e9:b3:a5:25:
90:fa:20:56:57:51:ec:91:53:66:6a:ff:09:bc:2f:0c:e7:87:
9e:bf:a5:8f:4c:f0:86:9b:b1:a9:cc:cd:67:4e:f9:5a:3d:f5:
16:6f:09:48:a5:cb:4a:a3:69:d7:ba:f3:58:ee:4a:71:06:55:
e4:3c:32:a9:52:67:5b:a5:e9:2c:94:86:dd:a7:cb:41:8a:53:
8f:fa:15:62:87:c3:6e:44:fc:c6:9b:46:77:36:24:93:b6:4a:
c3:2a:3b:f3:61:0b:d3:b0:94:0d:40:a1:d6:3a:b0:bb:c7:15:
5c:96:ad:0a:08:88:92:53:26:55:b9:de:a8:47:e6:4a:4a:0f:
7a:4f:d6:01:c6:f4:fc:ee:23:68:54:cb:fe:2a:f4:96:a6:20:
5e:3a:17:92:39:93:24:4e:21:b4:1f:f3:36:4f:df:73:d6:b0:
8c:c5:d6:43:f7:fa:5e:0e:bd:aa:bb:9c:46:00:59:51:fa:5f:
ee:ba:a6:51:bb:8c:27:e8:fb:48:df:d6:4c:7e:0a:df:f1:31:
98:fa:5e:20:81:0d:2f:89:f9:d2:20:81:d1:71:5b:2a:8f:ad:
ab:ed:d5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:16:02 2025 by rpki-client