Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/vINa56fCeVCDS4vUdZniQRFScnk.roa
File: vINa56fCeVCDS4vUdZniQRFScnk.roa (raw, json)
Hash identifier: OwhrDcsFYw40/6cM2acw4utCu4f6bHdMKEDQWjzNqYc=
Subject key identifier: BC:83:5A:E7:A7:C2:79:50:83:4B:8B:D4:75:99:E2:41:11:52:72:79
Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial: 0194B655D73B474D36AB5A32CB0B6F6C9675
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/vINa56fCeVCDS4vUdZniQRFScnk.roa
Signing time: Thu 30 Jan 2025 08:31:06 +0000
ROA not before: Thu 30 Jan 2025 08:31:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200738
IP address blocks: 45.129.20.0/24 maxlen: 24
45.129.21.0/24 maxlen: 24
45.129.22.0/24 maxlen: 24
45.129.23.0/24 maxlen: 24
77.83.124.0/22 maxlen: 22
92.114.56.0/22 maxlen: 22
93.114.240.0/22 maxlen: 22
109.230.216.0/23 maxlen: 23
109.230.222.0/24 maxlen: 24
134.255.215.0/24 maxlen: 24
176.100.208.0/22 maxlen: 22
176.100.212.0/22 maxlen: 22
176.100.224.0/20 maxlen: 20
176.100.224.0/24 maxlen: 24
176.100.225.0/24 maxlen: 24
185.97.168.0/22 maxlen: 22
185.159.252.0/22 maxlen: 22
185.170.147.0/24 maxlen: 24
188.215.8.0/22 maxlen: 22
193.26.148.0/22 maxlen: 22
193.31.36.0/22 maxlen: 22
193.35.14.0/23 maxlen: 23
193.35.26.0/23 maxlen: 23
2a06:6c0::/48 maxlen: 48
2a06:6c0:1::/48 maxlen: 48
2a06:6c0:2::/48 maxlen: 48
2a06:6c0:3::/48 maxlen: 48
2a06:6c0:11::/48 maxlen: 48
2a06:6c0:12::/48 maxlen: 48
2a06:6c0:22::/48 maxlen: 48
2a06:6c0:23::/48 maxlen: 48
2a06:6c0:24::/48 maxlen: 48
2a06:6c0:25::/48 maxlen: 48
2a06:6c0:26::/48 maxlen: 48
2a06:6c0:254::/48 maxlen: 48
2a06:6c0:255::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 26 Feb 2025 08:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b6:55:d7:3b:47:4d:36:ab:5a:32:cb:0b:6f:6c:96:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Validity
Not Before: Jan 30 08:31:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc835ae7a7c27950834b8bd47599e24111527279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f8:9f:f1:a2:4e:03:c8:f1:66:bb:45:79:0b:
c4:65:c7:c3:3a:d4:6a:d4:1d:e2:7c:64:6e:47:67:
e0:66:aa:51:65:5f:85:d4:d4:c0:76:5c:03:72:e6:
d0:58:8c:78:e1:c7:45:a1:dc:8d:f5:fb:3c:76:a3:
25:82:e9:f9:6c:ee:d0:91:31:b1:8b:1b:30:de:b6:
7b:52:ab:30:6f:2e:6f:71:7f:bd:1e:75:37:d4:95:
43:fc:72:41:ed:41:91:40:3d:11:2b:dd:93:07:2a:
bc:22:53:e0:cd:ba:6d:5c:fd:aa:f5:5f:1a:37:c4:
24:18:e1:08:b6:6c:dd:ca:25:85:60:b5:8c:5e:d1:
01:d8:fe:4c:ce:3b:52:32:8b:41:c2:b8:83:86:98:
6c:86:a0:32:92:ed:b3:67:c6:e1:fe:5e:f4:65:73:
17:99:d4:4a:64:84:6d:59:0f:c2:08:2b:e8:e1:8e:
3d:65:c5:3b:94:28:27:b1:e3:81:cd:55:53:a6:d9:
6e:4a:43:22:f5:ca:90:ee:d0:e1:95:af:ac:7e:e3:
74:05:fa:10:cd:65:df:3e:70:33:03:ba:57:61:3c:
4b:04:8a:0b:5b:87:63:d7:3f:6c:a3:62:cc:b4:6b:
0a:17:b2:6f:d5:d4:d5:30:e8:fc:28:87:ba:0d:39:
01:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:83:5A:E7:A7:C2:79:50:83:4B:8B:D4:75:99:E2:41:11:52:72:79
X509v3 Authority Key Identifier:
keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/vINa56fCeVCDS4vUdZniQRFScnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.20.0/22
77.83.124.0/22
92.114.56.0/22
93.114.240.0/22
109.230.216.0/23
109.230.222.0/24
134.255.215.0/24
176.100.208.0/21
176.100.224.0/20
185.97.168.0/22
185.159.252.0/22
185.170.147.0/24
188.215.8.0/22
193.26.148.0/22
193.31.36.0/22
193.35.14.0/23
193.35.26.0/23
IPv6:
2a06:6c0::/46
2a06:6c0:11::-2a06:6c0:12:ffff:ffff:ffff:ffff:ffff
2a06:6c0:22::-2a06:6c0:26:ffff:ffff:ffff:ffff:ffff
2a06:6c0:254::/47
Signature Algorithm: sha256WithRSAEncryption
84:93:4c:00:ce:fd:4c:3d:8c:d3:08:e8:10:4d:7b:27:a9:ff:
be:81:90:85:5e:63:ab:9f:cb:bf:f6:27:42:9b:62:14:e5:4c:
71:7f:f9:df:d8:97:b3:db:42:d8:57:8f:cc:a1:ba:1d:96:ae:
7a:13:a0:ee:50:89:7a:9a:4f:97:6b:a6:b3:a3:a9:38:14:b6:
0a:9d:a0:a5:d6:6a:7b:eb:56:1b:bf:4a:75:97:8c:db:43:45:
4c:29:cf:dd:ae:0b:2e:b2:2d:ef:71:fc:44:c7:46:0d:bb:3a:
3f:63:af:83:75:5e:c6:bc:16:32:84:aa:26:c1:29:34:a6:f3:
e5:4e:ec:79:19:fe:df:f9:c9:0b:12:a3:80:94:1d:34:61:d4:
9c:c6:ef:d6:75:62:a3:67:8c:c5:0e:a2:45:5e:66:f9:71:5e:
13:22:c6:12:03:ff:46:76:cb:cb:51:ca:80:58:c4:b4:66:9d:
83:3b:e7:4e:87:03:39:97:2e:d4:3b:b1:fb:6b:75:cf:39:1e:
f9:59:20:7f:43:32:89:54:19:ad:c7:38:ca:7b:25:b8:a7:35:
bd:de:06:73:68:7b:4e:83:cb:19:fe:b4:37:69:36:f9:e8:d3:
e4:a3:77:b8:fb:ff:c8:39:32:4e:9e:c5:69:7d:b1:2b:03:e9:
03:ce:52:2f
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAZS2Vdc7R002q1oyywtvbJZ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwOTRhNDI1NTk1ZTkyM2M0YjUzYjljMDAwYWE4ZjE5YWQ5
MjNmMjAwHhcNMjUwMTMwMDgzMTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzgzNWFlN2E3YzI3OTUwODM0YjhiZDQ3NTk5ZTI0MTExNTI3Mjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPif8aJOA8jxZrtFeQvEZcfDOtRq
1B3ifGRuR2fgZqpRZV+F1NTAdlwDcubQWIx44cdFodyN9fs8dqMlgun5bO7QkTGx
ixsw3rZ7Uqswby5vcX+9HnU31JVD/HJB7UGRQD0RK92TByq8IlPgzbptXP2q9V8a
N8QkGOEItmzdyiWFYLWMXtEB2P5MzjtSMotBwriDhphshqAyku2zZ8bh/l70ZXMX
mdRKZIRtWQ/CCCvo4Y49ZcU7lCgnseOBzVVTptluSkMi9cqQ7tDhla+sfuN0BfoQ
zWXfPnAzA7pXYTxLBIoLW4dj1z9so2LMtGsKF7Jv1dTVMOj8KIe6DTkBqQIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFLyDWuenwnlQg0uL1HWZ4kERUnJ5MB8GA1UdIwQY
MBaAFHCUpCVZXpI8S1O5wACqjxmtkj8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUt
Nzc3MzczZTYwNTVlLzEvdklOYTU2ZkNlVkNEUzR2VWRabmlRUkZTY25rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUtNzc3MzczZTYwNTVl
LzEvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHDBggrBgEFBQcBBwEB/wSBszCBsDBsBAIAATBmAwQCLYEU
AwQCTVN8AwQCXHI4AwQCXXLwAwQBbebYAwQAbebeAwQAhv/XAwQDsGTQAwQEsGTg
AwQCuWGoAwQCuZ/8AwQAuaqTAwQCvNcIAwQCwRqUAwQCwR8kAwQBwSMOAwQBwSMa
MEAEAgACMDoDBwIqBgbAAAAwEgMHACoGBsAAEQMHACoGBsAAEjASAwcBKgYGwAAi
AwcAKgYGwAAmAwcBKgYGwAJUMA0GCSqGSIb3DQEBCwUAA4IBAQCEk0wAzv1MPYzT
COgQTXsnqf++gZCFXmOrn8u/9idCm2IU5Uxxf/nf2Jez20LYV4/Mobodlq56E6Du
UIl6mk+Xa6azo6k4FLYKnaCl1mp761Ybv0p1l4zbQ0VMKc/drgsusi3vcfxEx0YN
uzo/Y6+DdV7GvBYyhKomwSk0pvPlTux5Gf7f+ckLEqOAlB00YdScxu/WdWKjZ4zF
DqJFXmb5cV4TIsYSA/9GdsvLUcqAWMS0Zp2DO+dOhwM5ly7UO7H7a3XPOR75WSB/
QzKJVBmtxzjKeyW4pzW93gZzaHtOg8sZ/rQ3aTb56NPko3e4+//IOTJOnsVpfbEr
A+kDzlIv
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:13:19 2025 by rpki-client