Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/VMA-XHwGQLdsHMcNAoKq8EilnOo.roa
File: VMA-XHwGQLdsHMcNAoKq8EilnOo.roa (raw, json)
Hash identifier: a8TVBUfgXiHfEq4y10faB1vuT+X8WjSvRvPxZ+BtRqE=
Subject key identifier: 54:C0:3E:5C:7C:06:40:B7:6C:1C:C7:0D:02:82:AA:F0:48:A5:9C:EA
Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial: 018DD38DE5065F99E8314F9420BBEB46A6E1
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/VMA-XHwGQLdsHMcNAoKq8EilnOo.roa
Signing time: Fri 23 Feb 2024 01:21:48 +0000
ROA not before: Fri 23 Feb 2024 01:21:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 5.183.240.0/23 maxlen: 23
5.183.242.0/23 maxlen: 23
45.14.80.0/24 maxlen: 24
45.14.81.0/24 maxlen: 24
45.86.24.0/22 maxlen: 22
92.119.24.0/23 maxlen: 23
92.119.26.0/23 maxlen: 23
171.22.60.0/24 maxlen: 24
171.22.62.0/23 maxlen: 23
185.45.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Feb 2024 13:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d3:8d:e5:06:5f:99:e8:31:4f:94:20:bb:eb:46:a6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Validity
Not Before: Feb 23 01:21:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54c03e5c7c0640b76c1cc70d0282aaf048a59cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:48:ba:c2:63:9c:25:67:9d:c7:12:fb:94:14:
0e:68:a2:b1:71:f7:6c:3b:a3:82:c7:58:c8:a8:e6:
68:7a:e6:24:69:ce:09:9b:25:00:dc:56:d8:06:72:
d4:05:d9:d2:07:70:fe:df:4d:d0:03:7f:e7:9d:80:
f7:68:04:88:8e:c5:6f:87:c9:ae:69:0a:48:e4:0f:
b0:57:41:f1:80:89:05:ed:7a:e7:3b:98:53:69:0f:
51:77:03:a2:b2:81:8a:cb:62:5d:28:b2:42:0b:00:
63:16:7f:57:0b:f3:c6:3a:72:a8:b9:0b:1b:91:d4:
95:e3:d7:0b:a9:9f:14:bb:33:1b:6e:72:c6:78:97:
6e:de:85:a8:2d:d0:2d:c7:94:95:a6:73:39:4c:f7:
85:ea:4c:0f:cd:85:15:97:4f:26:a8:b6:75:4e:22:
20:1c:e5:0c:a1:a7:16:09:c1:86:96:7a:b5:b7:27:
e4:31:14:92:c6:6a:68:8c:23:5e:c5:90:b6:e6:65:
1c:89:e7:29:7a:e2:21:89:6a:4b:38:11:e5:c4:be:
4a:35:17:97:b4:a3:d8:01:63:8d:26:03:ed:c7:2b:
3e:7c:a1:97:b5:ba:ae:72:98:5a:0d:28:30:b3:9a:
ec:6e:7a:97:1b:0a:a5:23:35:83:54:ed:f3:2d:44:
14:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C0:3E:5C:7C:06:40:B7:6C:1C:C7:0D:02:82:AA:F0:48:A5:9C:EA
X509v3 Authority Key Identifier:
keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/VMA-XHwGQLdsHMcNAoKq8EilnOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.240.0/22
45.14.80.0/23
45.86.24.0/22
92.119.24.0/22
171.22.60.0/24
171.22.62.0/23
185.45.94.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:53:19:a2:5a:0f:0f:66:49:10:fe:07:62:e8:d0:48:b7:bb:
78:64:bb:70:38:94:40:65:3e:9f:c7:50:f7:05:d7:2d:2b:25:
2a:a6:bd:9c:eb:e8:92:02:9f:a9:a0:41:6d:9a:f6:29:c7:8e:
f7:c6:e7:fe:e9:10:21:57:b4:0a:4e:35:69:fd:3d:36:e0:e1:
9c:4e:ea:8b:11:ee:88:ae:35:aa:32:9d:1d:18:b9:73:dd:33:
1d:bf:eb:af:d2:98:2e:af:df:81:2e:a8:58:a0:6d:03:4b:0c:
0d:f7:dd:5d:6d:63:76:70:bf:fd:01:22:98:4a:32:4b:6c:43:
37:50:3e:6c:6a:f4:dd:42:fa:d4:2b:2a:5e:c6:59:21:e8:e5:
89:0d:31:35:84:89:c6:30:0c:fa:54:6f:7d:af:15:84:f5:22:
32:29:91:56:c7:7e:f7:fb:7e:f5:16:c2:86:04:5a:63:54:b3:
11:3c:67:b0:8a:41:04:81:a0:b1:3f:9a:69:d9:40:da:d3:e8:
32:5a:c5:d7:bc:47:fa:03:eb:19:a9:33:c4:e8:37:19:96:68:
50:1a:5e:de:33:9c:32:8d:d2:35:f6:f5:f8:d3:f0:b6:9d:59:
28:b1:b4:cf:a8:27:69:09:8c:97:dd:1a:8e:4b:3b:47:85:79:
97:81:9a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 25 16:24:47 2024 by rpki-client on console-fra.rpki-client.org