Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/VV_1ukguvSuNjkGpMh1g7YMQsJI.roa
File: VV_1ukguvSuNjkGpMh1g7YMQsJI.roa (raw, json)
Hash identifier: 7krSUahKdNWIp8teZw6GF3aYFH1n1qqbMA7abE7V/Bc=
Subject key identifier: 55:5F:F5:BA:48:2E:BD:2B:8D:8E:41:A9:32:1D:60:ED:83:10:B0:92
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 01911249FE567FC72284366E551B8AB7039B
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/VV_1ukguvSuNjkGpMh1g7YMQsJI.roa
Signing time: Fri 02 Aug 2024 08:52:04 +0000
ROA not before: Fri 02 Aug 2024 08:52:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 5.35.192.0/21 maxlen: 24
85.204.160.0/22 maxlen: 24
88.135.96.0/20 maxlen: 24
89.39.172.0/23 maxlen: 24
94.26.64.0/23 maxlen: 24
94.26.110.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Sep 2024 23:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:12:49:fe:56:7f:c7:22:84:36:6e:55:1b:8a:b7:03:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Aug 2 08:52:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=555ff5ba482ebd2b8d8e41a9321d60ed8310b092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fc:80:f1:ae:83:1e:07:29:b0:1e:94:de:69:
03:cc:b7:88:8c:7c:df:33:a2:90:f7:6f:a1:f7:c9:
b3:4a:cd:05:2e:12:81:88:0c:89:1a:c6:a5:57:88:
8d:d4:9c:cf:9b:58:02:97:54:58:2c:4d:66:9e:b1:
a5:d5:cf:0f:1b:e4:d2:cf:ec:3c:ec:ae:1d:9f:58:
f6:e0:ad:ca:9e:5c:a8:cb:e4:8f:31:45:21:c2:5c:
d6:eb:35:82:db:ef:97:be:7a:5c:d4:f0:eb:fb:ec:
d0:cc:7a:10:6d:2b:26:70:92:dc:35:75:c5:e3:a8:
aa:24:e2:b0:fb:41:23:9f:9d:5d:13:70:5a:33:d4:
25:fa:3c:9d:6d:1f:a1:61:a0:c0:19:1f:ee:a8:ea:
de:da:68:56:a2:18:60:eb:06:09:ed:ac:40:cc:75:
42:00:bf:8f:27:10:11:ec:48:21:51:bf:6d:2e:2d:
e8:62:01:53:54:db:96:f1:c3:a0:03:56:d3:d8:4d:
ef:a8:ad:ef:41:d6:49:1a:04:4a:bb:58:57:6b:a0:
b2:e6:38:e9:c7:9b:91:03:6c:c0:02:b8:be:80:eb:
d4:66:46:67:f4:7d:90:1f:3d:16:a5:49:95:d1:c6:
b6:c4:cf:a9:fd:04:f9:e8:7d:d5:83:95:26:63:dc:
b1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5F:F5:BA:48:2E:BD:2B:8D:8E:41:A9:32:1D:60:ED:83:10:B0:92
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/VV_1ukguvSuNjkGpMh1g7YMQsJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
85.204.160.0/22
88.135.96.0/20
89.39.172.0/23
94.26.64.0/23
94.26.110.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:06:dc:1c:ee:3c:39:7c:56:3d:f6:db:83:2b:7f:5b:c1:2f:
8c:64:0a:21:da:d3:0b:26:61:ba:ee:bc:a7:16:e4:50:23:b2:
9a:86:b3:1b:87:8d:f7:68:25:35:3c:a8:a8:b8:e8:01:57:91:
7b:9f:eb:38:ac:b5:64:98:0b:61:e6:cc:7a:2a:7e:f4:56:e0:
7d:ad:c2:a4:c2:ca:7d:ba:fe:e0:84:3f:1d:de:8a:7a:c6:ef:
1a:49:c4:15:f8:d4:98:b0:e0:d8:57:13:05:37:33:fb:ab:ae:
7c:0d:0f:8c:0e:53:9d:d9:8a:f6:a1:22:13:29:54:17:c8:dc:
54:21:7a:75:df:31:91:8d:79:99:4f:b8:1d:fa:30:a1:6c:46:
83:9a:db:eb:cc:62:76:13:a1:f3:32:bd:89:64:86:e1:5e:7d:
9d:fb:9a:e5:2e:d7:dc:26:b2:fd:46:ad:cd:40:d8:13:03:2e:
e1:57:18:06:d6:ed:69:02:56:31:67:1f:c1:77:2d:bf:6b:a5:
ae:a7:a4:1a:ca:15:c9:1e:75:6c:de:cd:a3:ee:ea:ee:86:a6:
a1:b3:de:5b:12:fd:f9:c0:1e:24:70:0c:cd:02:18:a1:76:18:
08:f4:87:8d:95:c0:6c:0d:17:fc:40:89:53:fa:08:5e:39:5d:
59:02:ab:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:24 2025 by rpki-client