Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/VLG35yVC9OGzlQ7bbcOd8cZziwc.roa
File: VLG35yVC9OGzlQ7bbcOd8cZziwc.roa (raw, json)
Hash identifier: 8VatQIyWCwBvV6lqLbr+dlM4ayDLl44tNS0UVOeL1Lo=
Subject key identifier: 54:B1:B7:E7:25:42:F4:E1:B3:95:0E:DB:6D:C3:9D:F1:C6:73:8B:07
Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial: 01910E431B96F463C7EA9F47B1C79026AF3C
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/VLG35yVC9OGzlQ7bbcOd8cZziwc.roa
Signing time: Thu 01 Aug 2024 14:06:04 +0000
ROA not before: Thu 01 Aug 2024 14:06:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56754
IP address blocks: 94.176.184.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 01 Aug 2024 15:14:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0e:43:1b:96:f4:63:c7:ea:9f:47:b1:c7:90:26:af:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
Validity
Not Before: Aug 1 14:06:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54b1b7e72542f4e1b3950edb6dc39df1c6738b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:66:e9:50:82:5e:2e:90:f0:c1:1a:d9:79:
6b:da:f7:21:21:de:6c:47:b3:a9:8c:96:7a:69:c3:
8b:d5:c6:92:bf:39:f9:08:0f:20:4a:1c:a5:65:d0:
47:11:0d:6d:36:81:b7:24:ad:4c:cf:cd:03:51:4d:
12:a7:a4:95:6d:46:65:5a:b5:03:d1:4c:cd:05:ad:
3f:f1:9d:7d:cb:8f:8b:b0:89:ae:14:6a:ec:9c:cf:
18:c9:c7:9a:8c:df:d2:b4:42:c0:04:87:c5:d4:1c:
1a:72:29:6f:1c:0a:8b:8f:f5:7c:aa:f5:d4:7a:dc:
e2:c0:a5:2e:11:dc:8b:a1:a3:70:79:dd:50:89:f0:
29:66:d1:cf:c3:62:5d:7e:16:e9:ee:83:c7:74:d4:
38:47:a7:bb:4e:05:26:64:58:cb:4d:2b:d7:31:9d:
87:f6:4b:67:4d:77:57:52:39:84:58:95:ef:97:e9:
d2:c5:df:95:76:8b:b9:4a:1f:e8:5f:3f:39:5b:d9:
4c:45:8c:e8:3e:41:48:3b:7b:d8:be:2a:24:17:49:
27:dd:7f:48:30:0a:44:25:d3:81:3e:38:5e:c3:cc:
e4:9c:5b:d9:38:a2:ca:01:c6:8f:ef:25:7e:87:89:
a7:23:f8:91:2a:c7:45:01:f3:56:87:db:53:e1:4f:
2c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B1:B7:E7:25:42:F4:E1:B3:95:0E:DB:6D:C3:9D:F1:C6:73:8B:07
X509v3 Authority Key Identifier:
keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/VLG35yVC9OGzlQ7bbcOd8cZziwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.184.0/23
Signature Algorithm: sha256WithRSAEncryption
46:24:52:00:6f:92:8e:65:2d:92:31:83:f3:0a:d3:23:34:80:
ef:c4:13:3f:43:3e:a9:78:e2:1b:d3:19:b1:52:af:af:2c:5a:
d6:b6:0b:9a:95:d5:2d:21:15:06:0f:08:29:08:26:d1:b4:72:
c7:e6:80:d8:51:68:35:fe:d6:1f:d0:56:51:a6:d1:8a:5f:1e:
6d:7d:81:12:c3:5c:79:b6:88:0f:51:e6:b5:29:7d:f2:cd:8f:
3c:88:95:e8:b2:a4:5f:0a:08:6a:af:bd:2f:c2:11:8b:2e:85:
1f:91:05:21:8f:62:7a:b1:25:c2:91:9c:30:9c:83:ff:d3:96:
ca:e0:67:a5:a8:b1:c7:56:fa:ef:bd:a0:f8:57:53:a2:2a:89:
aa:88:0a:d0:98:07:e1:9a:18:46:f2:01:e0:27:5e:8f:70:17:
85:a2:06:c4:99:52:da:2e:30:30:05:77:d4:f7:63:1e:28:00:
58:de:53:b2:09:56:fa:5e:60:f8:d3:c9:63:e8:1b:18:3b:bf:
cb:53:47:0a:17:93:97:2a:e4:c8:ee:85:19:6b:20:6c:4a:f8:
03:01:04:e5:59:e2:f9:ce:ef:66:3e:41:23:84:8d:8c:02:73:
30:00:39:05:25:c8:ae:ef:ab:64:d1:55:ad:02:49:b2:37:e7:
36:3b:d5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:46:09 2025 by rpki-client