Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/VkVg7VlqHrxP_Zpjr7eG0MLiyH0.roa
File: VkVg7VlqHrxP_Zpjr7eG0MLiyH0.roa (raw, json)
Hash identifier: a5Yg6eh+VZm4g6ueqHJ9XScpuKxucUM163qaOxgwbfo=
Subject key identifier: 56:45:60:ED:59:6A:1E:BC:4F:FD:9A:63:AF:B7:86:D0:C2:E2:C8:7D
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0193DA2DF0243FBA9DC6C59761F33E14060B
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/VkVg7VlqHrxP_Zpjr7eG0MLiyH0.roa
Signing time: Wed 18 Dec 2024 14:31:03 +0000
ROA not before: Wed 18 Dec 2024 14:31:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35277
IP address blocks: 5.8.45.0/24 maxlen: 24
5.8.46.0/24 maxlen: 24
5.8.47.0/24 maxlen: 24
5.101.44.0/24 maxlen: 24
5.101.45.0/24 maxlen: 24
5.101.46.0/24 maxlen: 24
5.188.50.0/24 maxlen: 24
5.188.201.0/24 maxlen: 24
5.188.202.0/24 maxlen: 24
5.189.216.0/24 maxlen: 24
5.189.217.0/24 maxlen: 24
5.189.218.0/24 maxlen: 24
5.189.252.0/24 maxlen: 24
5.189.253.0/24 maxlen: 24
5.189.255.0/24 maxlen: 24
91.243.40.0/24 maxlen: 24
91.243.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:da:2d:f0:24:3f:ba:9d:c6:c5:97:61:f3:3e:14:06:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Dec 18 14:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=564560ed596a1ebc4ffd9a63afb786d0c2e2c87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9f:1e:be:bc:15:ce:3f:e6:63:56:b9:6c:da:
8d:96:ab:92:b9:c6:40:f6:8a:0b:d6:98:66:84:a6:
dc:21:a1:63:0d:fe:c3:79:e5:6d:aa:3e:eb:80:ed:
70:77:87:e4:1b:e2:ed:d3:d2:da:71:b7:0e:da:cd:
2d:31:6c:a0:7a:98:f9:b8:75:39:a5:cb:74:b8:38:
a6:26:82:02:ce:63:92:df:97:3b:99:48:58:c5:15:
b0:87:74:d0:3d:2e:7e:15:99:68:91:90:45:b4:8d:
93:45:47:c0:e3:7a:0b:6e:ed:0f:7d:b5:2d:10:3d:
8a:be:9e:c4:99:61:95:7c:00:3e:51:fc:f4:95:f0:
9c:db:df:a7:bd:20:8c:11:a2:c7:fe:89:e1:89:59:
92:69:47:81:8e:71:6d:61:79:bb:65:79:46:e7:8a:
d4:cd:43:6f:38:3e:63:ee:60:f0:00:6a:32:b9:6f:
30:0d:41:ec:6b:6a:cf:e6:e7:eb:22:38:0b:fb:cf:
24:31:92:8a:ed:7f:2e:19:35:7d:41:ff:51:e5:dd:
5f:76:ae:32:68:42:98:48:66:99:eb:86:f5:e1:b7:
15:6b:88:fc:13:8b:1b:48:6b:97:c0:f4:ef:d2:8f:
f8:14:7b:be:d6:3d:01:ec:41:fa:08:f2:eb:d3:05:
61:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:45:60:ED:59:6A:1E:BC:4F:FD:9A:63:AF:B7:86:D0:C2:E2:C8:7D
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/VkVg7VlqHrxP_Zpjr7eG0MLiyH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.45.0-5.8.47.255
5.101.44.0-5.101.46.255
5.188.50.0/24
5.188.201.0-5.188.202.255
5.189.216.0-5.189.218.255
5.189.252.0/23
5.189.255.0/24
91.243.40.0/24
91.243.43.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:db:67:59:ea:6d:db:b4:e6:04:02:4f:b2:c5:61:33:ea:a8:
36:6d:5f:ff:cc:29:a5:22:8e:3b:61:94:81:bd:ac:cf:cc:66:
88:b9:a5:db:45:08:5a:d6:ab:df:83:a2:0c:c0:69:f4:a5:dc:
38:d4:d6:5c:12:13:8c:34:e3:a9:47:97:3b:5b:fc:c2:6e:19:
67:05:ab:e0:59:ef:78:c4:94:e3:92:00:96:60:73:cc:33:e0:
27:22:ff:d3:f5:d9:11:3e:2b:bc:c8:19:15:6f:6b:aa:cb:57:
3d:3e:f8:1d:85:44:22:aa:25:22:da:d7:b1:f9:6b:c5:e8:88:
9f:7d:10:1c:df:6c:4b:64:42:0d:bf:45:11:b7:c1:3f:8f:78:
61:00:70:ab:ea:39:77:77:1f:ed:7f:c0:4f:ea:0b:fb:06:b5:
0a:dc:d7:b2:b8:fe:71:cd:05:02:32:8d:5a:b6:6d:cd:58:95:
f4:4f:e9:4a:d8:2b:47:1d:81:f5:d0:b2:f3:5c:0b:df:07:4a:
5b:03:8b:32:1c:4f:db:4b:c0:44:f8:44:6f:e5:36:b0:41:7e:
de:a0:1b:11:dc:ce:35:cd:16:7a:da:1c:21:52:38:c4:e2:22:
2f:ee:08:4e:c4:79:4d:95:a7:1a:97:31:64:57:84:b2:00:69:
52:30:3f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:05:40 2025 by rpki-client