Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VUFTOAhZJuP3CTonLzX2C8gQE7E.roa
File: VUFTOAhZJuP3CTonLzX2C8gQE7E.roa (raw, json)
Hash identifier: 9TbTLLNt75jDoRgJy2SqbY3u/P0X+qDw1T6VX18UTVo=
Subject key identifier: 55:41:53:38:08:59:26:E3:F7:09:3A:27:2F:35:F6:0B:C8:10:13:B1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192BE7FC94059C23E9D287638BFFEFFE877
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VUFTOAhZJuP3CTonLzX2C8gQE7E.roa
Signing time: Thu 24 Oct 2024 12:28:18 +0000
ROA not before: Thu 24 Oct 2024 12:28:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.14.164.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.90.88.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
45.151.89.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
84.54.48.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.93.0/24 maxlen: 24
87.121.45.0/24 maxlen: 24
87.121.124.0/23 maxlen: 24
87.121.162.0/24 maxlen: 24
91.92.240.0/20 maxlen: 32
92.119.196.0/23 maxlen: 24
94.154.160.0/23 maxlen: 24
94.154.162.0/23 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.64.0/21 maxlen: 32
141.98.1.0/24 maxlen: 24
147.78.100.0/24 maxlen: 24
171.22.72.0/22 maxlen: 24
185.216.84.0/22 maxlen: 24
185.218.84.0/22 maxlen: 24
193.222.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 11:13:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:be:7f:c9:40:59:c2:3e:9d:28:76:38:bf:fe:ff:e8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 24 12:28:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55415338085926e3f7093a272f35f60bc81013b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:06:e1:74:78:e2:33:3f:a4:a7:a2:06:8f:dd:
9d:da:88:f2:ed:c9:40:b4:8a:a7:4f:62:95:20:aa:
d0:33:83:45:ce:75:3f:85:f1:7a:98:f8:d2:68:9b:
c9:01:5b:4f:4d:a5:80:9d:44:6f:fb:5d:0b:5c:30:
15:75:94:99:5e:89:51:79:cd:68:e7:ca:2d:e8:df:
09:5b:4e:93:bd:a1:c0:95:71:41:98:e5:9c:b5:b4:
19:a6:2e:6b:f1:ca:2c:74:aa:c5:ea:ef:cb:68:21:
d6:72:b1:ad:9e:7e:17:9f:60:72:71:42:dc:ba:53:
10:d6:ba:87:c9:44:05:cb:1d:cb:0c:c8:f5:5a:6e:
23:8c:fb:34:dd:31:01:3d:b6:d5:e1:e2:23:35:17:
64:94:b0:89:40:c9:81:54:92:5d:30:98:3d:c1:ca:
f9:62:88:09:78:93:9b:af:00:80:8d:6c:2e:fa:4b:
66:c5:55:5a:cd:f7:b9:2f:94:dc:de:7d:db:ae:dd:
49:0d:52:ec:63:1e:c5:ef:5f:69:9e:9a:e3:21:cd:
94:d1:bc:f0:9b:e3:79:81:4f:bb:67:82:79:ea:19:
30:5b:39:64:ec:67:0f:dd:d2:9d:14:50:dc:e6:62:
0f:55:34:22:32:61:fe:96:81:9a:ca:bc:8a:c5:8d:
0c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:41:53:38:08:59:26:E3:F7:09:3A:27:2F:35:F6:0B:C8:10:13:B1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VUFTOAhZJuP3CTonLzX2C8gQE7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.164.0/24
45.66.228.0/24
45.90.88.0/24
45.139.106.0/24
45.141.158.0/24
45.151.89.0/24
45.151.91.0/24
83.219.97.0/24
84.54.48.0/24
87.120.87.0/24
87.120.93.0/24
87.121.45.0/24
87.121.124.0/23
87.121.162.0/24
91.92.240.0/20
92.119.196.0/23
94.154.160.0/22
94.156.11.0/24
94.156.64.0/21
141.98.1.0/24
147.78.100.0/24
171.22.72.0/22
185.216.84.0/22
185.218.84.0/22
193.222.96.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:c3:7d:a0:d3:cb:94:e1:3c:81:cb:f4:76:42:ba:22:1a:1a:
6f:2b:46:c5:7f:c0:ca:69:d4:2c:da:b1:07:da:6f:64:bf:3c:
b9:11:3a:1f:6e:1d:71:61:88:12:15:5a:c5:18:00:f0:1d:1b:
83:6a:c6:53:ca:f8:99:70:68:96:7d:13:a5:ba:55:7e:77:c5:
13:3e:a3:43:37:8e:9c:f2:79:b7:b6:37:79:c8:30:70:d4:d3:
db:d8:b0:2a:67:8f:f4:83:7a:dc:47:53:01:9f:c9:38:9f:1a:
fc:cf:36:98:de:0f:92:50:ba:71:39:79:e7:a2:d0:3d:b4:b5:
e6:66:a1:9f:a5:21:c6:0d:50:70:d1:14:68:0f:4f:64:ef:f5:
5b:18:38:73:d8:4e:de:c6:8f:96:dc:bf:bb:03:9c:5d:2b:25:
fb:14:1c:60:8b:13:9c:2b:a6:1e:50:8a:69:c0:03:21:00:bf:
11:ba:f7:35:39:4b:61:cf:b4:51:5a:89:06:f1:ad:d6:97:69:
51:07:b7:64:0a:1c:e3:cc:0c:47:06:ed:1a:86:02:51:cf:9b:
7b:2a:a8:57:5d:dd:b3:95:62:b9:84:d7:62:43:95:aa:75:5c:
54:87:22:b6:92:0a:2e:b7:6c:8b:06:49:bd:eb:21:20:4e:75:
82:9f:a5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 13:02:35 2024 by rpki-client on console-fra.rpki-client.org