Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/Vuza7v9K1_-dJ2KV4KL1rl2U7Oc.roa
File: Vuza7v9K1_-dJ2KV4KL1rl2U7Oc.roa (raw, json)
Hash identifier: IjFKMOGCFm4tw5w/umqOODCO0UbO4TNns0VuTYtN0oU=
Subject key identifier: 56:EC:DA:EE:FF:4A:D7:FF:9D:27:62:95:E0:A2:F5:AE:5D:94:EC:E7
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 019620395AFF7EC2C4D00804FE97B9515A8A
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/Vuza7v9K1_-dJ2KV4KL1rl2U7Oc.roa
Signing time: Thu 10 Apr 2025 15:02:31 +0000
ROA not before: Thu 10 Apr 2025 15:02:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33993
IP address blocks: 45.67.230.0/24 maxlen: 24
94.131.113.0/24 maxlen: 24
94.131.121.0/24 maxlen: 24
103.113.68.0/24 maxlen: 24
185.234.59.0/24 maxlen: 24
185.235.242.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Apr 2025 16:12:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:20:39:5a:ff:7e:c2:c4:d0:08:04:fe:97:b9:51:5a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Apr 10 15:02:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56ecdaeeff4ad7ff9d276295e0a2f5ae5d94ece7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:37:ff:b0:21:ac:75:39:20:bd:2c:39:7f:10:
63:5f:95:3d:37:6b:15:73:8d:08:a4:ee:e5:82:9a:
99:19:87:cd:ec:96:88:5f:57:f6:7b:8c:26:03:c7:
24:1d:43:8f:55:ad:ea:45:8c:12:29:81:a9:90:2a:
3d:7c:13:e8:52:64:11:17:8e:65:c8:66:09:19:58:
61:6a:bc:b7:10:f6:7a:21:31:5f:ad:64:dd:b1:8d:
d2:24:9b:ce:08:a6:37:4f:40:40:18:e2:e2:08:09:
81:8d:78:a6:4d:5f:d2:98:e7:3a:dc:e3:c4:e3:3b:
f8:e6:0b:7a:cf:a0:7c:65:14:70:73:df:b0:3f:ae:
8f:29:33:23:17:84:19:9e:fe:3c:bb:25:5b:8c:cf:
ec:71:39:0e:e3:b1:75:98:b6:31:9a:0a:37:16:62:
c4:54:91:ac:5a:c7:84:8c:f9:bc:d1:77:a2:67:82:
66:b7:84:79:ac:af:15:2c:92:86:47:46:73:58:56:
92:d2:f1:3b:e3:d6:45:96:f2:6a:61:7e:1d:b3:47:
fc:05:d6:10:50:6f:0d:27:ad:e4:51:c5:26:78:76:
6b:1a:ad:77:e7:6a:82:b9:5c:eb:f1:0b:0e:36:8c:
3d:ef:f3:ee:41:98:80:24:3c:ee:0d:c8:c9:dd:72:
5f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EC:DA:EE:FF:4A:D7:FF:9D:27:62:95:E0:A2:F5:AE:5D:94:EC:E7
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/Vuza7v9K1_-dJ2KV4KL1rl2U7Oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.230.0/24
94.131.113.0/24
94.131.121.0/24
103.113.68.0/24
185.234.59.0/24
185.235.242.0/24
185.250.149.0/24
Signature Algorithm: sha256WithRSAEncryption
02:f0:1b:20:f2:2c:13:5f:62:03:5a:01:f7:03:1d:4c:ca:ac:
cd:73:96:41:9e:08:01:9c:ba:4c:c5:25:db:33:eb:c4:db:94:
32:7e:40:0b:90:ee:70:b7:d3:95:5d:3f:09:f2:a9:60:b9:9d:
6d:7b:50:4b:b8:87:8a:30:b3:63:b6:cb:67:f2:f7:08:b6:39:
da:83:99:32:db:db:4a:ac:66:fe:75:07:6d:88:c4:c2:e0:da:
9d:49:08:97:12:3d:b2:c8:99:58:f8:cb:9c:73:28:1e:ba:20:
9b:72:9d:44:cd:4a:bb:68:64:33:59:b1:f7:0b:4c:79:c2:0f:
fe:e3:19:c3:ea:0c:72:85:b7:df:ed:e4:d0:94:ee:e2:b8:7f:
7a:b6:e2:fa:2d:64:1c:d4:58:21:b5:a0:2a:30:24:7f:a0:cb:
4c:2e:c2:6b:c8:77:c3:a1:42:b1:79:15:8a:ba:cf:99:c5:b3:
d9:c1:7b:ef:50:2a:49:d0:6a:61:aa:15:6d:c0:aa:93:15:c7:
ad:50:dc:03:35:94:90:90:45:63:a1:22:45:f0:82:ad:5d:9d:
29:66:5a:7e:fd:cc:c5:2f:fb:93:43:6d:f3:a7:8a:83:79:b1:
fc:e7:28:46:52:c0:f3:dd:bb:bc:08:c6:19:24:fb:7c:31:19:
89:81:02:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:09:05 2025 by rpki-client