Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/VCCmdlnlMjk_aSfEH4DFBe_fh48.roa
File: VCCmdlnlMjk_aSfEH4DFBe_fh48.roa (raw, json)
Hash identifier: X2itv4jynSMIUch8lX+8Bsh+ST7sZONpNYS98OCscGc=
Subject key identifier: 54:20:A6:76:59:E5:32:39:3F:69:27:C4:1F:80:C5:05:EF:DF:87:8F
Certificate issuer: /CN=6eef0dc51dfff0103419599906365572b7fe48fe
Certificate serial: 0191F5E2D2E20CC0C56EDC65369287637A46
Authority key identifier: 6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/VCCmdlnlMjk_aSfEH4DFBe_fh48.roa
Signing time: Sun 15 Sep 2024 13:32:48 +0000
ROA not before: Sun 15 Sep 2024 13:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61055
IP address blocks: 185.10.72.0/24 maxlen: 24
185.10.73.0/24 maxlen: 24
185.10.74.0/24 maxlen: 24
185.10.75.0/24 maxlen: 24
2a02:dfc0:1::/48 maxlen: 48
2a02:dfc0:2::/48 maxlen: 48
2a02:dfc0:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 15 Sep 2024 14:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f5:e2:d2:e2:0c:c0:c5:6e:dc:65:36:92:87:63:7a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eef0dc51dfff0103419599906365572b7fe48fe
Validity
Not Before: Sep 15 13:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5420a67659e532393f6927c41f80c505efdf878f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1b:3f:9d:29:3f:d3:37:e1:2b:df:4e:c6:6f:
af:15:cc:3f:c5:31:fb:c6:9d:4b:96:da:37:b1:df:
50:1c:2f:80:1b:f6:2b:9b:d1:dc:6d:bb:6a:ce:9c:
fe:1f:b1:1a:03:aa:a8:64:17:19:48:c3:a7:fd:59:
f6:db:17:ff:06:cd:b7:98:d2:5c:f4:7a:08:28:5c:
b2:15:d3:ba:f3:80:c3:e9:f7:e3:b4:d8:dc:86:04:
ec:93:ed:0b:74:70:45:f0:1d:b9:68:3d:a5:e9:1a:
c6:cb:63:4f:0d:3f:6d:e5:17:da:8f:5f:4d:6c:b2:
07:9f:2f:b5:ff:72:f9:8d:2b:ae:bc:c8:a5:ba:d4:
35:46:1f:20:6c:9b:9e:00:a9:c1:80:0b:f8:14:85:
2c:1d:e6:63:51:cf:27:4b:3c:54:e0:54:24:f9:31:
4f:c9:3b:50:08:fb:18:21:e3:e2:4e:cd:76:cb:f0:
28:a7:fc:da:09:5c:bf:de:c3:bb:03:60:90:76:9b:
d5:f3:1f:62:69:79:5a:dd:26:1f:1a:c6:da:17:ba:
f8:e7:c0:a4:62:48:df:41:71:7d:4f:6b:d4:ad:db:
8c:2d:76:d3:34:76:11:de:2c:c7:23:14:c9:85:ae:
d2:c4:69:9e:a8:ff:2a:43:27:67:fa:c1:44:73:9a:
1f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:20:A6:76:59:E5:32:39:3F:69:27:C4:1F:80:C5:05:EF:DF:87:8F
X509v3 Authority Key Identifier:
keyid:6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/VCCmdlnlMjk_aSfEH4DFBe_fh48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.72.0/22
IPv6:
2a02:dfc0:1::-2a02:dfc0:3:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
22:9c:f7:47:6c:8f:f5:23:8d:33:98:b9:6b:86:05:7e:ef:79:
22:e7:0b:b6:67:f0:80:47:30:e7:63:91:32:60:3d:da:a3:29:
9c:bf:d4:90:d4:86:b7:51:29:ff:c8:c7:ca:bd:88:22:44:db:
17:6d:be:02:12:92:62:de:75:b8:9d:d3:90:e0:a2:04:21:5f:
85:92:60:d6:e3:e5:f5:6b:5c:ea:c2:a5:77:b3:e9:20:3b:f4:
79:74:a1:d2:9c:a3:bd:67:43:f1:3c:c7:33:f5:d5:d7:cf:bb:
40:65:0b:3d:c1:a8:4c:9f:c0:9e:40:ce:cd:50:8b:3e:bb:94:
b3:13:76:a7:7f:e4:fc:d9:55:6c:d2:64:f3:c7:95:b6:99:52:
21:b9:0a:d1:79:5d:0e:60:a7:57:1f:66:98:67:69:3e:cd:c7:
01:54:3b:ef:7f:80:f9:5b:37:d5:a9:4b:e1:43:01:92:41:c4:
d8:88:d4:bb:7b:bc:bc:e6:4a:08:38:86:8a:e3:ae:a3:cd:81:
ca:cb:10:e2:1f:bf:6b:aa:22:68:58:26:c2:d2:5d:04:98:1c:
b6:05:cd:a7:c1:1b:54:c2:07:49:d4:7a:99:d3:4c:52:96:c8:
76:15:09:a7:fe:d8:9c:8c:9f:9c:c4:56:63:4f:9d:ae:36:18:
99:7c:5b:65
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZH14tLiDMDFbtxlNpKHY3pGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZWYwZGM1MWRmZmYwMTAzNDE5NTk5OTA2MzY1NTcyYjdm
ZTQ4ZmUwHhcNMjQwOTE1MTMzMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDIwYTY3NjU5ZTUzMjM5M2Y2OTI3YzQxZjgwYzUwNWVmZGY4NzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRs/nSk/0zfhK99Oxm+vFcw/xTH7
xp1Llto3sd9QHC+AG/Yrm9Hcbbtqzpz+H7EaA6qoZBcZSMOn/Vn22xf/Bs23mNJc
9HoIKFyyFdO684DD6ffjtNjchgTsk+0LdHBF8B25aD2l6RrGy2NPDT9t5Rfaj19N
bLIHny+1/3L5jSuuvMilutQ1Rh8gbJueAKnBgAv4FIUsHeZjUc8nSzxU4FQk+TFP
yTtQCPsYIePiTs12y/Aop/zaCVy/3sO7A2CQdpvV8x9iaXla3SYfGsbaF7r458Ck
YkjfQXF9T2vUrduMLXbTNHYR3izHIxTJha7SxGmeqP8qQydn+sFEc5ofqQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFQgpnZZ5TI5P2knxB+AxQXv34ePMB8GA1UdIwQY
MBaAFG7vDcUd//AQNBlZmQY2VXK3/kj+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnU4TnhSM184QkEwR1ZtWkJqWlZjcmYtU1A0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS81ZjIxN2EtZGUyNi00YmYwLWFjMjAt
NGZkYWUwOWE2NzdkLzEvVkNDbWRsbmxNamtfYVNmRUg0REZCZV9maDQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS81ZjIxN2EtZGUyNi00YmYwLWFjMjAtNGZkYWUwOWE2Nzdk
LzEvYnU4TnhSM184QkEwR1ZtWkJqWlZjcmYtU1A0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQCuQpIMBoE
AgACMBQwEgMHACoC38AAAQMHAioC38AAADANBgkqhkiG9w0BAQsFAAOCAQEAIpz3
R2yP9SONM5i5a4YFfu95IucLtmfwgEcw52ORMmA92qMpnL/UkNSGt1Ep/8jHyr2I
IkTbF22+AhKSYt51uJ3TkOCiBCFfhZJg1uPl9Wtc6sKld7PpIDv0eXSh0pyjvWdD
8TzHM/XV18+7QGULPcGoTJ/AnkDOzVCLPruUsxN2p3/k/NlVbNJk88eVtplSIbkK
0XldDmCnVx9mmGdpPs3HAVQ773+A+Vs31alL4UMBkkHE2IjUu3u8vOZKCDiGiuOu
o82ByssQ4h+/a6oiaFgmwtJdBJgctgXNp8EbVMIHSdR6mdNMUpbIdhUJp/7YnIyf
nMRWY0+drjYYmXxbZQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 17:27:45 2025 by rpki-client