Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/vVjstCh52YyTEDeCtGBnXzl4OOM.roa
File: vVjstCh52YyTEDeCtGBnXzl4OOM.roa (raw, json)
Hash identifier: EFdprdiYMZWOB7F9QkQI2qHMQpcVFnpDkg+Bp7qfP3g=
Subject key identifier: BD:58:EC:B4:28:79:D9:8C:93:10:37:82:B4:60:67:5F:39:78:38:E3
Certificate issuer: /CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
Certificate serial: 0194074F9FBA881B33827B8F488C54E6C14D
Authority key identifier: F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/vVjstCh52YyTEDeCtGBnXzl4OOM.roa
Signing time: Fri 27 Dec 2024 08:50:46 +0000
ROA not before: Fri 27 Dec 2024 08:50:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60721
IP address blocks: 45.136.104.0/24 maxlen: 24
45.136.105.0/24 maxlen: 24
45.136.107.0/24 maxlen: 24
185.26.144.0/24 maxlen: 24
185.26.145.0/24 maxlen: 24
185.26.146.0/24 maxlen: 24
185.26.147.0/24 maxlen: 24
185.126.176.0/24 maxlen: 24
185.153.228.0/24 maxlen: 24
185.153.229.0/24 maxlen: 24
185.153.230.0/24 maxlen: 24
185.153.231.0/24 maxlen: 24
185.162.144.0/24 maxlen: 24
185.162.147.0/24 maxlen: 24
185.171.24.0/24 maxlen: 24
185.171.25.0/24 maxlen: 24
185.171.26.0/24 maxlen: 24
185.171.27.0/24 maxlen: 24
185.247.136.0/24 maxlen: 24
185.247.138.0/24 maxlen: 24
185.247.139.0/24 maxlen: 24
2a04:3880::/30 maxlen: 30
2a06:c380::/29 maxlen: 29
2a0b:6000::/29 maxlen: 29
2a0d:a2c0::/29 maxlen: 29
2a0d:c480::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:4f:9f:ba:88:1b:33:82:7b:8f:48:8c:54:e6:c1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
Validity
Not Before: Dec 27 08:50:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd58ecb42879d98c93103782b460675f397838e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:77:6c:18:ce:69:63:5b:39:a0:1c:75:69:f7:
0f:cb:1f:27:d3:73:57:18:97:14:a5:1b:03:b8:18:
4a:95:53:ff:0f:39:be:33:8d:c2:7e:dd:18:40:18:
08:7e:73:ed:f6:1a:d9:a8:5a:ec:f6:c4:25:4a:d9:
86:d2:b1:25:92:a5:43:23:1c:fc:ae:9f:a3:d1:6e:
2f:fa:34:8b:e4:c8:cf:49:09:9f:c4:43:07:05:f7:
13:0b:8f:12:1c:c7:6e:b0:29:0c:ca:35:69:39:60:
bb:ef:1a:01:7d:bb:4d:66:de:71:66:db:50:0d:f9:
08:e8:be:a3:5d:1c:55:e9:a0:ca:01:25:8e:dd:0d:
c2:a4:53:08:b0:fc:6d:df:ca:cd:73:f0:d8:0e:f2:
41:e0:f7:14:66:53:de:ae:b1:99:ad:d2:d0:53:5e:
fe:6d:53:88:89:14:ad:3e:2a:2b:31:5a:65:63:67:
1e:e2:31:2d:dd:6e:31:84:de:6f:95:28:dd:ff:82:
d7:c3:03:b2:ae:e0:53:8e:07:f7:9e:b3:db:37:e6:
bd:36:e0:53:9c:d2:56:cd:25:36:18:0a:1c:ea:e3:
b5:65:08:7f:d6:a1:39:ad:f4:2c:ae:11:f5:98:fa:
33:5e:22:b7:09:0c:b7:7f:66:ef:b8:f9:24:55:06:
a8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:58:EC:B4:28:79:D9:8C:93:10:37:82:B4:60:67:5F:39:78:38:E3
X509v3 Authority Key Identifier:
keyid:F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/vVjstCh52YyTEDeCtGBnXzl4OOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.104.0/23
45.136.107.0/24
185.26.144.0/22
185.126.176.0/24
185.153.228.0/22
185.162.144.0/24
185.162.147.0/24
185.171.24.0/22
185.247.136.0/24
185.247.138.0/23
IPv6:
2a04:3880::/30
2a06:c380::/29
2a0b:6000::/29
2a0d:a2c0::/29
2a0d:c480::/29
Signature Algorithm: sha256WithRSAEncryption
3d:3e:04:17:ea:19:c3:fe:b7:2c:63:2e:53:f4:ff:6e:1a:d8:
e3:93:71:03:f9:f4:ef:a1:65:4c:23:9f:2b:8a:f2:c8:98:7f:
d6:a6:e2:57:3f:f9:ea:38:df:8f:e8:a8:b0:6b:61:5c:ff:6b:
74:9b:10:a8:b7:79:ed:33:ae:e7:40:32:42:e6:78:66:cb:19:
f2:27:43:e5:71:72:95:b5:aa:3c:fb:ee:49:9c:1f:b5:98:3b:
5e:a2:8a:4e:f3:80:77:81:e0:9b:35:08:20:15:f3:60:ed:f8:
bf:2a:f9:94:54:58:21:8b:01:f9:2d:5d:15:cb:eb:47:df:fe:
47:d4:94:21:04:7d:c2:65:ab:9d:7a:a6:42:11:d1:95:c6:4e:
b5:15:99:c1:d5:ad:7b:d5:24:10:94:76:fe:3d:e0:25:99:37:
40:39:47:a5:b1:1d:9b:0a:23:f7:f6:c6:d3:aa:67:0a:d7:28:
28:ab:a8:68:95:fd:3c:99:ec:eb:43:77:79:4e:14:bf:36:b5:
35:22:73:5f:61:8d:f0:a0:ac:89:55:ce:c0:cd:d3:63:f5:e3:
da:69:e9:68:6c:1e:29:09:4c:63:3d:13:30:03:69:d8:73:79:
3a:c8:91:53:39:dc:b8:a7:e5:65:fa:4f:cc:25:20:ce:92:4b:
6f:a1:cd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:19:15 2025 by rpki-client