Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/VgNnHrlHXaW6xt0vIZP2Z_xPVck.roa
File: VgNnHrlHXaW6xt0vIZP2Z_xPVck.roa (raw, json)
Hash identifier: mP4NouX8xYAgoxO/HE0B5dEu1Tij9l/eaXkSskREIC8=
Subject key identifier: 56:03:67:1E:B9:47:5D:A5:BA:C6:DD:2F:21:93:F6:67:FC:4F:55:C9
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018CE983D7093E4CC7F998EB3E911A61001E
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/VgNnHrlHXaW6xt0vIZP2Z_xPVck.roa
Signing time: Mon 08 Jan 2024 14:39:40 +0000
ROA not before: Mon 08 Jan 2024 14:39:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29278
IP address blocks: 84.21.16.0/24 maxlen: 24
84.21.15.0/24 maxlen: 24
84.21.18.0/24 maxlen: 24
84.21.19.0/24 maxlen: 24
217.144.50.0/24 maxlen: 24
217.144.48.0/23 maxlen: 23
213.181.205.0/24 maxlen: 24
213.181.204.0/24 maxlen: 24
213.181.200.0/24 maxlen: 24
213.181.211.0/24 maxlen: 24
213.181.210.0/24 maxlen: 24
213.181.207.0/24 maxlen: 24
213.181.219.0/24 maxlen: 24
87.229.105.0/24 maxlen: 24
217.113.51.0/24 maxlen: 24
217.113.50.0/24 maxlen: 24
217.113.49.0/24 maxlen: 24
217.113.53.0/24 maxlen: 24
217.113.61.0/24 maxlen: 24
217.113.63.0/24 maxlen: 24
87.229.115.0/24 maxlen: 24
87.229.14.0/24 maxlen: 24
87.229.12.0/24 maxlen: 24
87.229.26.0/24 maxlen: 24
87.229.32.0/24 maxlen: 24
87.229.33.0/24 maxlen: 24
87.229.40.0/23 maxlen: 23
87.229.45.0/24 maxlen: 24
87.229.53.0/24 maxlen: 24
87.229.55.0/24 maxlen: 24
87.229.54.0/24 maxlen: 24
87.229.58.0/24 maxlen: 24
84.21.8.0/24 maxlen: 24
84.21.7.0/24 maxlen: 24
84.21.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 12:52:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:83:d7:09:3e:4c:c7:f9:98:eb:3e:91:1a:61:00:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 8 14:39:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5603671eb9475da5bac6dd2f2193f667fc4f55c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:92:79:33:58:d8:6f:12:81:11:54:cd:ff:50:
41:df:a5:05:cc:20:c8:56:33:52:71:f1:30:6a:3b:
27:6f:dc:24:97:b9:04:6d:70:26:3b:64:19:87:92:
ea:a8:2a:be:50:6d:f4:ba:a9:75:c8:96:79:b7:df:
5f:ae:12:39:97:72:63:ab:52:da:08:14:3d:3f:78:
cb:81:0e:c7:8e:11:12:46:8a:4c:ae:7e:0f:24:6d:
5e:24:88:91:dd:0a:27:16:16:aa:1b:ae:96:9d:71:
42:62:02:f6:77:9d:10:eb:2a:c1:97:c1:9f:1d:a4:
5a:4a:26:c8:58:8f:a1:64:5b:69:23:b0:78:6f:8d:
95:ba:87:e8:a7:61:ac:74:ba:b6:bc:c0:aa:c5:c2:
07:74:4f:86:f0:d6:72:69:c9:31:2d:fc:11:05:e6:
33:39:6c:1e:b2:12:60:e8:c5:3c:30:6f:8d:11:23:
27:65:30:a2:b0:98:f6:d3:4c:21:0e:16:a2:3f:00:
cd:d7:97:95:34:44:e2:eb:19:78:34:11:e0:84:58:
ee:8b:3e:a4:1c:3a:1d:21:a2:eb:76:af:2e:e6:a2:
65:70:1f:68:13:db:74:dd:1f:65:14:89:34:5d:29:
29:fe:e1:08:4a:21:82:94:eb:8c:f0:2d:3d:cb:18:
d8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:03:67:1E:B9:47:5D:A5:BA:C6:DD:2F:21:93:F6:67:FC:4F:55:C9
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/VgNnHrlHXaW6xt0vIZP2Z_xPVck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.7.0-84.21.8.255
84.21.11.0/24
84.21.15.0-84.21.16.255
84.21.18.0/23
87.229.12.0/24
87.229.14.0/24
87.229.26.0/24
87.229.32.0/23
87.229.40.0/23
87.229.45.0/24
87.229.53.0-87.229.55.255
87.229.58.0/24
87.229.105.0/24
87.229.115.0/24
213.181.200.0/24
213.181.204.0/23
213.181.207.0/24
213.181.210.0/23
213.181.219.0/24
217.113.49.0-217.113.51.255
217.113.53.0/24
217.113.61.0/24
217.113.63.0/24
217.144.48.0-217.144.50.255
Signature Algorithm: sha256WithRSAEncryption
0b:f5:d1:00:02:9c:a8:f7:81:90:18:a0:e4:a2:1d:c6:a6:a3:
a2:d5:04:0f:22:05:12:08:a8:92:e8:5a:6d:55:d5:e8:3f:4d:
e7:4d:59:ed:fd:b9:04:85:4c:dd:2d:38:b2:89:52:db:6d:02:
19:e3:23:00:a6:04:66:bd:12:1e:ae:61:bd:ed:ae:ba:6e:a4:
24:9a:aa:42:da:3d:15:fb:58:03:5b:ed:0b:65:79:84:1f:ff:
dd:e3:b1:1e:35:e7:61:a0:7c:39:6a:ee:60:51:52:19:a9:b5:
b6:44:13:5c:03:35:34:94:93:17:17:1e:58:bd:c1:46:48:b1:
4f:34:df:1e:ba:2e:09:4b:38:c8:19:a6:a6:ac:82:19:bc:72:
8d:ca:35:55:b8:4f:56:87:6c:10:43:49:6f:a3:cd:0d:b8:61:
b8:fe:da:47:6f:a8:2a:6d:3d:b8:77:9b:bb:dd:d4:35:ef:8f:
22:0a:0a:ec:9e:06:5a:18:6e:5d:a9:8f:0d:98:e7:0d:9d:ba:
9c:82:c1:05:c9:f7:b9:2c:bd:d0:4a:b3:4f:c1:c2:2a:48:ec:
05:0a:cf:64:ff:6d:55:54:2c:b3:bf:dc:1e:1b:f0:4d:23:0c:
79:ce:36:a5:b1:62:db:1f:ee:59:1c:51:c0:20:78:53:7f:e8:
65:ea:5a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:06 2025 by rpki-client