Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/VoP0xbXBXQ5pst1279tXEzKvIs0.roa
File: VoP0xbXBXQ5pst1279tXEzKvIs0.roa (raw, json)
Hash identifier: ZlamygXJraHEEOyFTXvgi0DWT1eFR8V7xFQ9jZCPVuM=
Subject key identifier: 56:83:F4:C5:B5:C1:5D:0E:69:B2:DD:76:EF:DB:57:13:32:AF:22:CD
Certificate issuer: /CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Certificate serial: 0186E5E61024AE871E3959B3BEEA23FDCF42
Authority key identifier: AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/VoP0xbXBXQ5pst1279tXEzKvIs0.roa
Signing time: Wed 15 Mar 2023 15:31:45 +0000
ROA not before: Wed 15 Mar 2023 15:31:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34960
IP address blocks: 194.126.145.0/24 maxlen: 24
194.126.144.0/23 maxlen: 23
194.126.144.0/24 maxlen: 24
185.122.48.0/22 maxlen: 22
185.122.48.0/24 maxlen: 24
5.149.4.0/24 maxlen: 24
5.149.3.0/24 maxlen: 24
5.149.2.0/24 maxlen: 24
5.149.1.0/24 maxlen: 24
5.149.0.0/24 maxlen: 24
5.149.0.0/21 maxlen: 21
5.149.7.0/24 maxlen: 24
5.149.6.0/24 maxlen: 24
5.149.5.0/24 maxlen: 24
2a01:48c0::/32 maxlen: 32
2a01:48c0::/40 maxlen: 40
2a01:48c0:100::/40 maxlen: 40
2a01:48c0:200::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 12 Sep 2023 09:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e5:e6:10:24:ae:87:1e:39:59:b3:be:ea:23:fd:cf:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Validity
Not Before: Mar 15 15:31:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5683f4c5b5c15d0e69b2dd76efdb571332af22cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e4:63:7b:49:3a:d6:b9:30:3d:7b:2e:d8:80:
45:25:0a:92:6c:45:b5:aa:ae:7c:bb:52:f4:50:82:
50:a3:d2:1a:82:e1:03:0a:60:85:f9:25:28:c8:5f:
23:b2:9d:fb:e5:56:fe:7e:54:2c:55:95:e6:6b:bd:
87:34:d8:12:73:89:8f:22:d0:a2:83:d9:c8:6e:74:
78:a9:4c:27:2b:1d:34:02:2d:b5:a9:3c:7e:ce:da:
2a:10:70:1a:e2:7d:4b:e0:15:bf:c8:05:12:b6:c2:
55:40:d1:ea:19:41:5e:01:57:12:e1:f2:7f:2e:ef:
f7:b9:05:99:bb:1d:dc:d4:83:31:a6:af:b0:17:2d:
d8:b8:2b:6a:7b:37:b2:3f:57:22:b8:25:b7:8c:cd:
de:dd:c2:a6:77:d1:86:f2:b4:e6:d4:a1:7b:fd:59:
67:10:a2:f8:57:93:04:ab:c5:33:94:16:35:81:f2:
f3:e7:37:c6:7e:89:88:f2:70:97:f6:bf:f4:7e:37:
78:51:f4:8c:78:4c:5c:c1:dd:6b:77:d5:75:0a:60:
c1:0c:3f:87:bc:e3:01:57:1a:03:86:24:19:dc:01:
85:89:0e:67:ed:31:c9:e7:26:91:f3:66:07:5c:ce:
e9:4b:d2:06:4f:38:ed:42:7c:59:76:2b:87:28:01:
42:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:83:F4:C5:B5:C1:5D:0E:69:B2:DD:76:EF:DB:57:13:32:AF:22:CD
X509v3 Authority Key Identifier:
keyid:AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/VoP0xbXBXQ5pst1279tXEzKvIs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.0.0/21
185.122.48.0/22
194.126.144.0/23
IPv6:
2a01:48c0::/32
Signature Algorithm: sha256WithRSAEncryption
ea:fa:5c:36:87:fc:2e:42:f5:30:3c:85:fc:4b:d1:60:43:d9:
0b:8b:1c:23:6a:13:10:e0:a3:1c:78:d2:ca:81:95:79:e1:5b:
c8:13:4a:8a:68:ed:f4:dc:46:57:8a:a2:65:d9:1a:d7:5a:33:
42:dd:47:1c:00:84:4d:ce:ff:1f:3a:c9:e6:9a:e2:3e:3d:40:
b9:8a:8c:3b:49:75:d3:1b:16:1c:41:50:e7:c5:af:de:01:28:
1d:99:e6:b7:66:87:a1:20:48:ce:26:d5:54:72:94:d1:32:81:
9a:6a:ac:67:b2:66:52:82:0f:cb:81:46:dc:6a:49:74:1e:0f:
bf:e4:68:0f:94:b8:55:1d:19:87:e2:de:de:7a:e5:59:ff:da:
8e:7e:a5:2c:7b:1f:44:49:20:e3:37:3f:a1:9e:98:8e:f2:ac:
6c:18:34:fd:c6:da:ca:3a:b0:e0:8c:71:f9:be:01:e8:57:84:
64:56:31:a0:7f:98:24:e1:00:c8:60:52:4d:17:4d:ee:c0:55:
3f:6f:bb:d6:8d:fb:35:d0:3d:31:99:a9:92:ef:46:ee:98:6a:
7f:94:df:1d:15:65:b1:9a:bf:e7:06:d4:2e:2d:69:74:fd:ec:
9b:06:f4:03:fa:99:7e:8f:d5:c3:09:c0:22:7b:74:16:b5:4c:
e7:df:b5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:30 2024 by rpki-client on console-ams.rpki-client.org