Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/VQ_306ZvXwLGkIwJZDhxtjQeeVo.roa
File: VQ_306ZvXwLGkIwJZDhxtjQeeVo.roa (raw, json)
Hash identifier: H7sV30Vi5zM0CCQTWfLbI8aYcpMD1WYzdB9N+8eGth8=
Subject key identifier: 55:0F:F7:D3:A6:6F:5F:02:C6:90:8C:09:64:38:71:B6:34:1E:79:5A
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018D6BB7FE8C1CDC29BA12C2845F8D31F0F5
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/VQ_306ZvXwLGkIwJZDhxtjQeeVo.roa
Signing time: Fri 02 Feb 2024 21:27:16 +0000
ROA not before: Fri 02 Feb 2024 21:27:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400696
IP address blocks: 45.84.214.0/24 maxlen: 24
45.94.29.0/24 maxlen: 24
45.94.30.0/24 maxlen: 24
45.130.142.0/24 maxlen: 24
2a0f:15c0::/32 maxlen: 48
2a0f:15c3::/32 maxlen: 32
2a0f:15c4::/32 maxlen: 32
2a0f:15c5::/32 maxlen: 32
2a0f:15c6::/32 maxlen: 32
2a0f:15c7::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 05 Mar 2024 17:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6b:b7:fe:8c:1c:dc:29:ba:12:c2:84:5f:8d:31:f0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Feb 2 21:27:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=550ff7d3a66f5f02c6908c09643871b6341e795a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:0c:d3:f9:d8:ed:b6:3e:69:65:14:7a:07:
d7:f8:94:0e:74:4a:3f:1f:82:9a:fd:0b:03:35:f6:
65:e6:60:5b:f4:d8:72:a2:af:f7:fe:7e:1a:24:f1:
a1:77:18:02:88:3a:5d:75:91:23:9d:fa:47:ce:f1:
f7:0a:2b:03:14:e3:3b:76:ed:24:f8:dd:38:1d:22:
c2:92:47:50:e8:c2:2d:56:b3:5a:82:25:18:8e:bd:
e0:d2:14:fc:d9:b0:6a:e4:d5:e2:11:4a:e0:9a:51:
bc:84:0e:d8:81:02:20:44:ae:e3:ff:75:fa:46:61:
fb:20:25:ea:2b:1d:37:f1:c5:41:9a:5d:0b:78:d1:
b8:a0:89:7c:94:90:bb:08:c0:51:b8:a7:4b:90:62:
87:6f:9e:d8:fa:b1:65:dc:08:d3:a9:e2:0a:d4:4a:
0f:95:e8:56:9c:60:27:28:fc:e5:66:07:b7:90:e7:
4e:e7:17:3b:62:c4:1a:89:16:1a:ae:a6:7c:b3:80:
93:70:75:9f:8d:d9:76:11:6a:ad:9c:04:36:89:a1:
41:ed:29:e5:39:bb:f3:37:75:65:9e:d2:bc:90:80:
e5:2b:50:b1:8d:c1:43:8e:ee:5e:9d:6f:b8:28:05:
f9:8a:34:4a:c5:27:0d:46:58:e6:02:60:ef:c8:ae:
41:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0F:F7:D3:A6:6F:5F:02:C6:90:8C:09:64:38:71:B6:34:1E:79:5A
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/VQ_306ZvXwLGkIwJZDhxtjQeeVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.214.0/24
45.94.29.0-45.94.30.255
45.130.142.0/24
IPv6:
2a0f:15c0::/32
2a0f:15c3::-2a0f:15c7:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
47:53:c6:a3:0b:c6:c2:13:48:8b:eb:5d:3e:7a:49:6c:6d:63:
ab:8e:69:04:6c:27:7d:49:d7:88:65:a6:cd:c8:76:db:1c:f6:
9d:b5:15:43:03:b7:98:e1:1e:91:97:67:86:42:ab:06:7e:0e:
b2:8d:0d:47:c9:e1:a0:c3:72:22:b2:7e:8b:5c:4d:05:da:c2:
f3:41:6f:ac:32:5d:53:99:15:fe:46:59:01:5b:1b:0c:14:d4:
d8:28:97:f3:a4:e8:63:e3:20:b2:ce:43:cc:e0:6e:82:e9:07:
d0:7f:92:c0:0a:41:6a:6b:4a:a1:97:ea:b0:b7:51:fc:4d:e8:
f8:49:56:19:21:01:6c:bb:16:12:43:4a:69:98:e6:34:43:28:
fb:f8:5f:54:62:98:4d:ac:ed:d3:63:ce:d0:73:1f:52:c6:34:
ac:15:7e:bb:c5:32:88:66:2c:30:a7:c4:e6:d6:9d:91:23:b5:
99:e3:89:11:ab:f3:0a:db:db:c7:c0:c7:de:dc:e2:cb:4d:38:
b4:7f:d9:3e:c2:f7:b3:2e:c3:39:a6:48:47:f0:dd:f2:d8:2c:
ef:86:e3:d0:0b:49:bc:69:5f:71:1e:0b:9a:70:eb:99:4f:2b:
96:54:30:17:45:21:0a:10:19:60:2f:1d:74:1d:26:5c:c8:9c:
e5:15:8d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 20:21:27 2024 by rpki-client on console-ams.rpki-client.org