Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/vfdj5EwDdaIJAZIXFSTXwJSrxEw.roa
File: vfdj5EwDdaIJAZIXFSTXwJSrxEw.roa (raw, json)
Hash identifier: pt0rTODkX65/JxbrIiShiut/K4dGYNkx7M0pVjmL3mw=
Subject key identifier: BD:F7:63:E4:4C:03:75:A2:09:01:92:17:15:24:D7:C0:94:AB:C4:4C
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 019006C1AD322E4CC7593970D0AB144753DB
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/vfdj5EwDdaIJAZIXFSTXwJSrxEw.roa
Signing time: Tue 11 Jun 2024 10:04:34 +0000
ROA not before: Tue 11 Jun 2024 10:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203020
IP address blocks: 5.154.174.0/24 maxlen: 24
45.95.24.0/22 maxlen: 32
45.144.88.0/22 maxlen: 24
45.149.28.0/22 maxlen: 24
45.153.157.0/24 maxlen: 24
45.153.158.0/23 maxlen: 32
45.156.224.0/22 maxlen: 32
80.246.30.0/24 maxlen: 32
86.105.183.0/24 maxlen: 32
87.239.255.0/24 maxlen: 32
89.35.249.0/24 maxlen: 32
89.40.24.0/24 maxlen: 32
89.44.205.0/24 maxlen: 32
91.228.216.0/24 maxlen: 24
94.46.206.0/24 maxlen: 32
185.36.254.0/24 maxlen: 32
185.96.162.0/24 maxlen: 32
185.108.104.0/24 maxlen: 32
185.108.105.0/24 maxlen: 32
185.147.140.0/22 maxlen: 32
185.152.36.0/22 maxlen: 32
185.152.248.0/22 maxlen: 32
185.153.151.0/24 maxlen: 32
185.160.44.0/22 maxlen: 32
185.166.84.0/24 maxlen: 32
185.184.228.0/24 maxlen: 32
185.188.61.0/24 maxlen: 24
185.201.188.0/24 maxlen: 24
185.217.64.0/22 maxlen: 22
185.242.217.0/24 maxlen: 24
188.119.154.0/24 maxlen: 32
193.36.89.0/24 maxlen: 32
195.47.194.0/24 maxlen: 32
2a01:4740::/32 maxlen: 32
2a05:28c0::/29 maxlen: 32
2a05:f4c0::/29 maxlen: 29
2a06:3040::/29 maxlen: 48
2a06:46c0::/29 maxlen: 32
2a06:4a00::/29 maxlen: 32
2a06:5000::/29 maxlen: 32
2a06:5700::/29 maxlen: 32
2a06:df80::/29 maxlen: 29
2a06:e480::/29 maxlen: 29
2a07:4780::/29 maxlen: 29
2a07:9c80::/29 maxlen: 29
2a07:f2c0::/29 maxlen: 29
2a0a:3080::/29 maxlen: 29
2a0b:3f40::/29 maxlen: 29
2a0c:d8c0::/29 maxlen: 29
2a0c:ec40::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 21 Jun 2024 14:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:c1:ad:32:2e:4c:c7:59:39:70:d0:ab:14:47:53:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jun 11 10:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdf763e44c0375a2090192171524d7c094abc44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:03:62:4d:bf:20:56:0c:de:d9:45:89:17:5a:
ef:b7:08:06:b4:54:c4:17:0a:e4:19:ca:22:21:f0:
59:b7:23:f3:9d:05:c0:ac:5e:8b:4d:b2:71:72:2f:
4e:04:1a:aa:3d:d8:0e:6c:44:eb:ba:49:52:93:e9:
83:1a:ed:90:38:c5:11:e9:88:d4:91:9c:56:67:85:
72:29:38:0a:3e:05:4b:94:26:53:61:67:22:9a:0c:
80:18:f9:ec:2a:ea:22:64:f2:93:5c:53:2f:1b:97:
d3:0a:d4:33:26:a0:52:56:60:d2:7a:b8:fb:b6:86:
cf:f6:d5:bf:31:df:2f:38:6d:c0:1e:35:53:b9:f6:
7c:1a:29:4c:ff:0f:68:1d:c8:20:37:11:99:a9:cd:
77:eb:10:b2:13:e7:da:06:14:98:c2:cd:88:2b:15:
54:f4:15:c0:78:12:53:ab:ff:38:97:d0:b8:f4:bb:
4d:c7:80:c2:45:9d:73:e7:e6:6f:17:01:91:80:56:
83:19:33:a8:bd:b1:55:ba:af:77:13:cd:22:68:00:
2b:e8:b1:c0:3b:08:f6:2b:e8:3e:c9:85:05:f7:2d:
6e:dc:c8:b6:83:50:18:98:53:2c:29:9c:c9:6e:10:
8d:2a:ad:5a:1f:e4:7c:6d:c3:a7:4a:8d:f2:a5:52:
f5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F7:63:E4:4C:03:75:A2:09:01:92:17:15:24:D7:C0:94:AB:C4:4C
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/vfdj5EwDdaIJAZIXFSTXwJSrxEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.174.0/24
45.95.24.0/22
45.144.88.0/22
45.149.28.0/22
45.153.157.0-45.153.159.255
45.156.224.0/22
80.246.30.0/24
86.105.183.0/24
87.239.255.0/24
89.35.249.0/24
89.40.24.0/24
89.44.205.0/24
91.228.216.0/24
94.46.206.0/24
185.36.254.0/24
185.96.162.0/24
185.108.104.0/23
185.147.140.0/22
185.152.36.0/22
185.152.248.0/22
185.153.151.0/24
185.160.44.0/22
185.166.84.0/24
185.184.228.0/24
185.188.61.0/24
185.201.188.0/24
185.217.64.0/22
185.242.217.0/24
188.119.154.0/24
193.36.89.0/24
195.47.194.0/24
IPv6:
2a01:4740::/32
2a05:28c0::/29
2a05:f4c0::/29
2a06:3040::/29
2a06:46c0::/29
2a06:4a00::/29
2a06:5000::/29
2a06:5700::/29
2a06:df80::/29
2a06:e480::/29
2a07:4780::/29
2a07:9c80::/29
2a07:f2c0::/29
2a0a:3080::/29
2a0b:3f40::/29
2a0c:d8c0::/29
2a0c:ec40::/29
Signature Algorithm: sha256WithRSAEncryption
02:fb:0e:2a:a3:c8:2a:2e:49:44:99:25:d4:57:29:dd:35:c3:
68:44:5e:e3:c2:af:0d:2f:91:18:94:04:c0:37:dd:35:ee:59:
d8:67:a5:e4:b4:7d:f7:13:3a:80:f9:99:60:1b:5a:8e:e8:06:
6a:ff:bf:79:c5:c5:0f:fc:76:a3:7a:ff:af:e4:54:22:94:e8:
21:2b:2e:57:55:cc:d3:8a:ec:a6:97:32:74:e9:b4:98:92:fe:
39:73:23:7b:60:bd:1a:6d:7c:93:20:41:2f:0a:62:dc:68:fd:
0c:23:a2:fa:b0:2b:d8:23:e3:09:d6:8b:3b:71:2d:a0:8b:93:
bc:8c:0f:46:83:8c:e3:c0:89:bf:df:9a:29:28:f9:89:04:84:
f7:a1:5d:1f:09:9a:51:02:3c:28:e5:29:30:3e:21:dd:84:c2:
f8:2d:4c:33:60:3d:00:9f:32:92:82:35:39:f8:e2:ab:21:b8:
97:e4:68:99:0b:e2:f5:f6:fb:95:83:05:03:5a:51:ce:16:70:
77:7a:f1:02:8e:f9:95:dc:ec:f4:bc:d1:0a:4e:ed:b7:77:81:
f1:e9:09:15:f2:93:f2:d5:ef:6a:ad:47:b8:11:f6:d5:72:5a:
47:5b:0b:62:24:be:0f:ce:51:cf:de:5f:4b:f5:96:8b:d6:57:
75:fb:1f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 18:16:55 2024 by rpki-client on console-ams.rpki-client.org