Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vmgfxPiI86e5-m5QrLc50a02THA.roa
File: vmgfxPiI86e5-m5QrLc50a02THA.roa (raw, json)
Hash identifier: hzXgcyaAiVRyoIgvxx38pbKvpjRWPnIZVAOLhX6H/84=
Subject key identifier: BE:68:1F:C4:F8:88:F3:A7:B9:FA:6E:50:AC:B7:39:D1:AD:36:4C:70
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194C3FE3F196998EEA5E9C7574125848927
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vmgfxPiI86e5-m5QrLc50a02THA.roa
Signing time: Sun 02 Feb 2025 00:10:06 +0000
ROA not before: Sun 02 Feb 2025 00:10:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 5.253.64.0/24 maxlen: 24
45.12.253.0/24 maxlen: 24
83.219.98.0/24 maxlen: 24
87.120.68.0/23 maxlen: 24
87.121.60.0/24 maxlen: 24
93.123.74.0/23 maxlen: 24
147.78.102.0/24 maxlen: 24
178.215.227.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 09:38:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:fe:3f:19:69:98:ee:a5:e9:c7:57:41:25:84:89:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 2 00:10:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be681fc4f888f3a7b9fa6e50acb739d1ad364c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:a2:ee:37:01:b9:12:b5:c0:9b:36:9d:b9:
a3:f8:63:5d:85:ba:da:d3:78:4d:cd:f1:fc:3b:f6:
b4:99:30:ae:c6:c9:a1:db:a2:b7:20:8d:2b:96:2f:
ee:63:1c:a1:6b:35:09:29:54:e2:23:54:73:53:4f:
8e:68:dd:5a:75:e3:81:69:20:69:69:a9:d2:cb:e2:
64:77:62:a7:a4:f0:ea:1d:67:6d:14:a4:6f:c1:63:
b2:ea:79:9a:8a:29:aa:80:63:26:62:fd:d9:b0:e3:
a5:89:79:62:3b:40:1a:97:bd:8f:35:7b:0a:db:b8:
c9:c4:79:3b:6b:ac:10:ef:4c:b6:37:b6:8f:6c:f7:
62:e1:57:2d:a7:57:ef:94:77:9b:0c:da:1f:62:90:
54:9b:cc:e3:82:38:6d:a8:1a:45:9c:36:75:c0:18:
bf:71:21:59:c6:59:27:f3:28:bc:98:dc:a9:75:77:
3f:ed:41:c6:12:9f:01:64:f2:cc:1c:17:2e:ae:f8:
f1:b6:5a:31:25:ca:3b:2c:fd:53:3e:63:fb:3d:aa:
6d:0e:41:1c:6d:87:a5:2e:80:c3:df:2a:6b:bb:bf:
d4:b9:30:8d:c1:39:63:d4:b9:b5:82:77:15:64:78:
41:88:0b:fd:ce:b9:43:2a:5c:0c:ef:72:ed:1c:0c:
1f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:68:1F:C4:F8:88:F3:A7:B9:FA:6E:50:AC:B7:39:D1:AD:36:4C:70
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vmgfxPiI86e5-m5QrLc50a02THA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.64.0/24
45.12.253.0/24
83.219.98.0/24
87.120.68.0/23
87.121.60.0/24
93.123.74.0/23
147.78.102.0/24
178.215.227.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
50:55:b5:90:9a:c3:fc:15:91:bb:7d:58:fd:00:6a:7f:36:58:
11:3c:f2:6a:ae:78:4e:28:19:47:35:69:67:b6:75:f0:f6:99:
d3:b7:fc:ac:a1:71:df:17:72:4e:e4:81:e4:3e:31:e8:0a:b1:
bd:ee:c9:bc:39:39:8e:1a:60:cc:43:9d:31:ba:3c:22:30:c3:
20:49:0c:c6:3f:83:df:b8:db:be:ef:83:0d:57:fb:2d:cc:fc:
91:01:b8:a0:2b:b6:0e:6a:13:3f:21:56:0f:8c:a1:63:54:3b:
b5:18:43:4f:a7:b8:d7:19:2a:7b:bc:06:3e:c3:05:de:cd:96:
23:5c:7c:d5:a1:0e:14:6b:d5:74:02:3a:d1:23:4a:06:da:f8:
9a:a8:85:1a:8f:ff:6a:b4:37:8c:01:53:92:c6:22:80:3f:eb:
ee:d1:58:3b:55:04:ca:a9:be:d7:d2:08:ac:7b:44:ed:eb:11:
70:86:2a:79:e2:68:3c:fd:14:e1:a3:7e:07:b7:ad:ee:0d:22:
9a:c3:7e:96:fe:a9:e3:cb:37:6e:37:92:aa:f2:81:f4:50:dc:
ca:10:de:46:52:7e:3d:37:75:3d:2b:a1:e4:43:4b:54:06:52:
f7:3d:db:8a:1f:90:93:6a:88:42:30:72:a4:82:d0:d8:3a:96:
f2:97:cc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:41:31 2025 by rpki-client