Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/vutpR_4dXUR-hc5Q3elSDJHn_Pg.roa
File: vutpR_4dXUR-hc5Q3elSDJHn_Pg.roa (raw, json)
Hash identifier: e71kgRFRiSuQ+p1q/gEVkC3Jj8bCLiGnFQYRoCh4oxw=
Subject key identifier: BE:EB:69:47:FE:1D:5D:44:7E:85:CE:50:DD:E9:52:0C:91:E7:FC:F8
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018D21B42A16FC995FCA1B584BC54C70CB8D
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/vutpR_4dXUR-hc5Q3elSDJHn_Pg.roa
Signing time: Fri 19 Jan 2024 12:31:11 +0000
ROA not before: Fri 19 Jan 2024 12:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203963
IP address blocks: 37.49.144.0/24 maxlen: 24
37.49.148.0/24 maxlen: 24
37.49.149.0/24 maxlen: 24
37.49.150.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.164.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.182.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
109.203.163.0/24 maxlen: 24
176.46.144.0/24 maxlen: 24
176.46.149.0/24 maxlen: 24
176.46.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Jan 2024 05:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:21:b4:2a:16:fc:99:5f:ca:1b:58:4b:c5:4c:70:cb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 19 12:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=beeb6947fe1d5d447e85ce50dde9520c91e7fcf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4f:a0:4b:86:8f:e2:18:d3:3f:75:c2:43:87:
18:2f:38:d8:2f:5a:96:87:80:1f:95:0a:f5:db:f7:
1c:cb:4d:26:09:1a:ff:47:e1:36:0e:1a:33:34:01:
3c:8c:4f:f3:a4:44:d7:bc:b6:d8:ad:e8:64:c9:0b:
9c:1c:1f:8b:b0:42:a6:f6:be:49:9f:4b:93:66:6f:
ea:0a:0a:af:ca:ff:bb:9a:90:1c:32:a8:b8:92:82:
4b:9d:8f:12:41:45:b2:7f:70:98:44:37:8d:23:9a:
ee:9f:ed:c3:59:14:0e:fd:7c:82:de:0a:5c:bb:ff:
85:5c:7e:9f:56:f1:a9:bb:92:98:cd:cc:31:f3:bc:
51:8c:e1:42:0a:b5:e4:36:d9:3c:90:4a:03:f8:30:
39:e4:a3:9f:cc:11:f3:c4:f3:ce:1e:4f:6f:72:75:
e2:c1:d5:78:b1:9e:7d:ba:9e:fc:53:71:a8:f4:5c:
a9:b3:2c:c6:54:07:be:ed:c6:98:09:c8:e7:af:5f:
43:79:e9:2f:6c:13:5e:6a:91:dd:10:6a:05:48:d0:
3a:da:82:cf:43:09:11:fe:7b:b3:42:e6:a3:1f:53:
5f:84:a1:e4:5a:aa:9a:6d:b1:91:16:09:b4:20:75:
d4:29:81:eb:96:e3:98:09:d5:db:e9:32:30:88:10:
6b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EB:69:47:FE:1D:5D:44:7E:85:CE:50:DD:E9:52:0C:91:E7:FC:F8
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/vutpR_4dXUR-hc5Q3elSDJHn_Pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.144.0/24
37.49.148.0-37.49.150.255
94.74.140.0/24
94.74.164.0/24
94.74.169.0/24
94.74.171.0/24
94.74.182.0/24
94.74.191.0/24
109.203.163.0/24
176.46.144.0/24
176.46.149.0/24
176.46.152.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:22:d1:44:be:2a:37:90:38:cd:8f:80:e8:94:e3:ca:f5:d2:
89:5b:3f:4c:55:07:85:53:6d:34:cd:d1:6e:4a:7b:81:b2:aa:
68:58:9a:7b:f3:62:a1:53:70:83:0a:12:12:67:6e:7f:6c:4f:
84:b6:91:eb:0b:1d:38:22:cd:03:94:2f:87:1b:a8:67:18:51:
4e:d7:9b:28:bf:62:e8:20:60:be:b1:6b:83:b4:cd:b8:00:18:
0f:ce:a5:c2:7c:c0:39:8d:9b:8d:c9:b2:10:2e:43:98:85:49:
54:74:10:de:7f:a0:47:00:7c:3a:65:1e:61:8b:7f:7b:f3:b4:
0f:3e:75:de:d8:dd:2a:aa:0e:81:8c:33:59:d0:0b:c3:3d:50:
1a:85:d1:f2:ba:4b:a0:c6:c9:fc:fd:22:67:9e:44:99:8b:20:
9e:ea:2c:61:f4:ac:77:3d:11:59:e0:18:bc:a6:42:4e:49:c5:
10:61:79:27:cc:09:43:f5:57:d7:97:f5:e3:67:a4:6d:a8:3b:
bd:20:4d:9c:dd:12:8d:89:1f:9f:6d:ce:08:14:cc:d5:b8:b1:
c7:26:15:a7:9c:2b:79:a9:24:8a:8c:44:57:5a:85:31:8a:36:
15:a7:dd:93:b2:58:01:aa:aa:eb:e8:2a:19:ce:89:0b:2e:65:
24:66:26:be
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAY0htCoW/JlfyhtYS8VMcMuNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjQwMTE5MTIzMTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWViNjk0N2ZlMWQ1ZDQ0N2U4NWNlNTBkZGU5NTIwYzkxZTdmY2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE+gS4aP4hjTP3XCQ4cYLzjYL1qW
h4AflQr12/ccy00mCRr/R+E2DhozNAE8jE/zpETXvLbYrehkyQucHB+LsEKm9r5J
n0uTZm/qCgqvyv+7mpAcMqi4koJLnY8SQUWyf3CYRDeNI5run+3DWRQO/XyC3gpc
u/+FXH6fVvGpu5KYzcwx87xRjOFCCrXkNtk8kEoD+DA55KOfzBHzxPPOHk9vcnXi
wdV4sZ59up78U3Go9FypsyzGVAe+7caYCcjnr19DeekvbBNeapHdEGoFSNA62oLP
QwkR/nuzQuajH1NfhKHkWqqabbGRFgm0IHXUKYHrluOYCdXb6TIwiBBrCQIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFL7raUf+HV1EfoXOUN3pUgyR5/z4MB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvdnV0cFJfNGRYVVItaGM1UTNlbFNESkhuX1BnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQAJTGQMAwD
BAIlMZQDBAAlMZYDBABeSowDBABeSqQDBABeSqkDBABeSqsDBABeSrYDBABeSr8D
BABty6MDBACwLpADBACwLpUDBACwLpgwDQYJKoZIhvcNAQELBQADggEBAKoi0US+
KjeQOM2PgOiU48r10olbP0xVB4VTbTTN0W5Ke4GyqmhYmnvzYqFTcIMKEhJnbn9s
T4S2kesLHTgizQOUL4cbqGcYUU7Xmyi/YuggYL6xa4O0zbgAGA/OpcJ8wDmNm43J
shAuQ5iFSVR0EN5/oEcAfDplHmGLf3vztA8+dd7Y3SqqDoGMM1nQC8M9UBqF0fK6
S6DGyfz9ImeeRJmLIJ7qLGH0rHc9EVngGLymQk5JxRBheSfMCUP1V9eX9eNnpG2o
O70gTZzdEo2JH59tzggUzNW4sccmFaecK3mpJIqMRFdahTGKNhWn3ZOyWAGqquvo
KhnOiQsuZSRmJr4=
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:16 2025 by rpki-client