Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/VHwUSzjtdJH62XOMvbiby-MbeCY.roa
File: VHwUSzjtdJH62XOMvbiby-MbeCY.roa (raw, json)
Hash identifier: M6QtZ0V7H0w7zEHoFyYD790mlr4K22p5llrRE1yIk6I=
Subject key identifier: 54:7C:14:4B:38:ED:74:91:FA:D9:73:8C:BD:B8:9B:CB:E3:1B:78:26
Certificate issuer: /CN=b436c0f0ec8bbedf0f60844dfe4fe939369a4b40
Certificate serial: 0193D559F9A207FA2D4D18A185C2FD89B2A1
Authority key identifier: B4:36:C0:F0:EC:8B:BE:DF:0F:60:84:4D:FE:4F:E9:39:36:9A:4B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/VHwUSzjtdJH62XOMvbiby-MbeCY.roa
Signing time: Tue 17 Dec 2024 16:01:03 +0000
ROA not before: Tue 17 Dec 2024 16:01:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50782
IP address blocks: 2.57.48.0/22 maxlen: 22
91.215.240.0/22 maxlen: 22
194.127.196.0/24 maxlen: 24
194.127.202.0/24 maxlen: 24
194.127.206.0/24 maxlen: 24
194.127.214.0/24 maxlen: 24
2a07:b6c0::/29 maxlen: 29
2a0d:6680::/29 maxlen: 29
2a0f:afc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 18 Dec 2024 23:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d5:59:f9:a2:07:fa:2d:4d:18:a1:85:c2:fd:89:b2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b436c0f0ec8bbedf0f60844dfe4fe939369a4b40
Validity
Not Before: Dec 17 16:01:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=547c144b38ed7491fad9738cbdb89bcbe31b7826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:83:c4:b3:f0:83:7c:3e:6f:2f:30:04:39:
11:df:94:59:f1:a2:5f:f4:c6:8c:0e:c2:98:71:cf:
7d:97:b8:ec:72:dc:61:7b:28:35:80:ae:dc:73:80:
04:0f:52:50:0f:ab:e7:5a:21:9f:9f:34:b8:ae:28:
4d:da:24:5e:85:0b:ed:32:7b:31:3e:ba:cb:56:79:
00:67:0c:1d:f6:43:54:e2:e2:d1:6c:1c:af:d4:98:
a3:70:90:ca:2b:4d:3c:c0:f9:ee:dd:87:19:fa:24:
55:f1:48:a3:7f:14:d0:39:1e:aa:0c:e0:94:be:12:
1a:4c:75:1c:f5:51:b5:c1:19:92:91:77:aa:61:6a:
60:5e:af:a1:3f:23:4f:96:ad:43:7a:75:8a:41:06:
1d:f9:5f:3c:0f:cb:43:70:1b:b1:6d:1e:2a:d8:44:
8d:63:7f:ea:64:79:c8:d2:1c:1b:85:c2:f2:a6:1d:
0e:a7:4d:4c:52:41:cd:a1:fa:b5:75:9e:17:fa:31:
87:65:f6:61:bb:03:67:ee:8f:0a:93:a5:c3:6a:9e:
c0:bf:c1:c2:6a:d4:90:b7:75:53:f8:6c:9b:97:2d:
57:3a:7b:21:70:88:bc:45:13:93:94:94:68:79:8e:
4e:2b:a9:7d:77:23:84:5e:6f:39:6f:75:13:23:69:
7f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7C:14:4B:38:ED:74:91:FA:D9:73:8C:BD:B8:9B:CB:E3:1B:78:26
X509v3 Authority Key Identifier:
keyid:B4:36:C0:F0:EC:8B:BE:DF:0F:60:84:4D:FE:4F:E9:39:36:9A:4B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/VHwUSzjtdJH62XOMvbiby-MbeCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.48.0/22
91.215.240.0/22
194.127.196.0/24
194.127.202.0/24
194.127.206.0/24
194.127.214.0/24
IPv6:
2a07:b6c0::/29
2a0d:6680::/29
2a0f:afc0::/29
Signature Algorithm: sha256WithRSAEncryption
0c:29:ba:94:8f:0c:e9:46:e8:2e:46:96:27:93:44:da:2d:4d:
24:7b:b2:f2:aa:df:29:e1:32:e0:04:ff:ae:6e:0d:85:c1:bb:
72:fd:f2:f0:38:24:10:6e:27:65:2c:8e:c5:08:7c:18:76:5c:
e9:7b:18:5a:e9:fa:12:03:3a:5e:e7:74:b4:7a:9b:89:0d:47:
e8:7a:47:2a:7b:e8:33:76:af:f5:d4:db:20:8e:d5:1d:bc:fe:
a6:0a:d9:a4:f9:fd:c1:18:9a:8d:87:82:ba:59:b3:57:97:25:
77:1f:02:dc:29:51:d0:dc:26:1c:91:91:d5:99:29:ea:72:f3:
9f:aa:fc:f8:fd:eb:6c:a3:e8:c8:77:e7:84:35:cc:2d:e5:51:
84:e7:6c:13:fb:d4:e1:c1:6b:05:e8:5e:3e:87:c1:49:e0:ea:
72:c1:df:43:28:b9:4c:06:11:76:ec:7b:f7:fe:f3:59:f1:58:
35:32:cc:32:f1:9f:ed:84:28:07:78:f7:87:04:e3:75:07:96:
79:22:7a:40:52:d4:43:62:9f:b7:ed:27:eb:59:03:34:8c:aa:
ef:51:2a:d5:ed:87:eb:be:dd:76:25:69:2e:e0:73:e7:af:49:
4e:1c:53:d6:b9:bb:48:f1:81:82:06:f6:6e:4c:e6:22:3b:44:
e4:29:71:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:13 2025 by rpki-client