Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/Vmipr-X6gHN5Q1PB6CDobcADB6w.roa
File: Vmipr-X6gHN5Q1PB6CDobcADB6w.roa (raw, json)
Hash identifier: xDoEEAaLwgRhuP5a8eB+xSrlrmSYgfibGIcvpe6aoZc=
Subject key identifier: 56:68:A9:AF:E5:FA:80:73:79:43:53:C1:E8:20:E8:6D:C0:03:07:AC
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018CC9BBD031843ECEE7D74CBD575A635549
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/Vmipr-X6gHN5Q1PB6CDobcADB6w.roa
Signing time: Tue 02 Jan 2024 10:32:58 +0000
ROA not before: Tue 02 Jan 2024 10:32:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47324
IP address blocks: 195.56.124.0/24 maxlen: 24
195.56.125.0/24 maxlen: 24
91.120.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:d0:31:84:3e:ce:e7:d7:4c:bd:57:5a:63:55:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 10:32:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5668a9afe5fa8073794353c1e820e86dc00307ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:51:08:48:51:70:d6:2c:35:24:83:ac:79:24:
d8:50:9e:0d:77:5c:c4:68:94:55:ec:a2:59:3f:dc:
12:5a:54:0f:c6:10:2f:af:e3:dc:82:e2:74:6f:4f:
f1:0d:d1:8b:70:9d:ff:8d:17:eb:eb:aa:cb:c9:e0:
69:a9:6e:97:eb:5c:6b:c4:cf:7b:21:83:be:75:c7:
af:88:c0:d8:9a:9e:59:75:ef:a8:89:22:26:c5:e2:
2c:10:20:4a:8a:06:e4:c6:5f:55:5e:f0:4f:1f:3c:
43:9a:3a:2b:22:cd:c7:fc:e4:19:b3:41:16:c8:a4:
1b:cf:75:6f:87:1e:06:0a:66:52:c2:e1:e9:7d:da:
ed:22:3c:a6:56:4d:ae:6c:81:47:24:fb:12:ea:cc:
bf:f9:3e:16:37:94:b1:b5:e8:e5:5d:19:d6:25:e4:
c4:eb:96:c5:a5:b3:35:78:ef:89:52:7f:64:df:81:
2f:be:25:0a:53:30:ae:85:b6:54:a3:2e:65:4d:ca:
5f:92:cc:ba:47:21:2a:ec:21:a8:42:20:59:73:b4:
3e:f5:09:5e:cb:56:96:d5:06:63:fb:74:81:c5:9e:
09:c8:0d:d9:46:ed:e3:29:d8:c0:83:db:f5:2c:7a:
f7:8b:47:bb:44:cf:16:b3:96:64:3e:5c:4c:04:f2:
8a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:68:A9:AF:E5:FA:80:73:79:43:53:C1:E8:20:E8:6D:C0:03:07:AC
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/Vmipr-X6gHN5Q1PB6CDobcADB6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.120.33.0/24
195.56.124.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:d6:91:4a:9c:8d:a6:da:ad:2e:ad:52:96:3b:6c:77:27:33:
35:f6:ea:db:1a:03:fa:88:e2:c0:46:c9:0c:db:16:b3:d5:40:
19:40:a1:33:77:c9:1d:4c:f4:3f:14:e0:7a:85:8f:e6:ca:44:
be:81:17:a5:6f:0a:e8:3c:c2:33:f8:2b:98:ad:62:55:7a:3b:
97:52:f5:57:2f:19:88:7d:76:bf:0e:ff:ce:d3:33:2e:f3:da:
53:d5:d0:f9:87:db:b1:8a:68:00:53:01:9d:7a:ff:9a:a3:eb:
71:5b:a9:91:f3:c3:70:ac:a8:d0:db:0d:cc:3b:04:f5:90:3f:
1b:f2:96:e3:d4:eb:6e:73:7b:64:9e:36:d6:87:a5:82:8f:43:
01:2e:05:6e:d4:9c:fa:7f:11:a4:e9:59:a3:6e:6e:8f:2b:9d:
0e:2a:4c:14:b4:c9:3d:8e:d9:33:73:0c:7b:b6:31:17:45:c1:
52:32:4e:9a:1b:c1:80:32:9d:8a:9a:25:ec:78:38:8f:c5:21:
80:04:c7:00:b9:e6:c8:ee:49:6c:f1:aa:de:2a:ad:01:8d:74:
20:94:34:50:a2:79:b2:1a:67:28:04:03:61:77:6e:0b:c3:7c:
1e:b5:b3:02:36:d3:68:ab:76:71:c5:a8:d5:e8:3d:4d:8a:27:
5b:25:90:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:00:47 2025 by rpki-client