Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/VMgt2-zwXiRMAycAeAmqzstIUe0.roa
File: VMgt2-zwXiRMAycAeAmqzstIUe0.roa (raw, json)
Hash identifier: FHO9oR+E7svaFFpGX+YhVeEA71oryQTJZvBNQ6rw+2s=
Subject key identifier: 54:C8:2D:DB:EC:F0:5E:24:4C:03:27:00:78:09:AA:CE:CB:48:51:ED
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01937BEB7A0733A531ECF9F6007E2A34F6DC
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/VMgt2-zwXiRMAycAeAmqzstIUe0.roa
Signing time: Sat 30 Nov 2024 07:14:09 +0000
ROA not before: Sat 30 Nov 2024 07:14:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44889
IP address blocks: 46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
46.38.140.0/24 maxlen: 24
46.38.150.0/24 maxlen: 24
46.38.151.0/24 maxlen: 24
185.24.150.0/24 maxlen: 24
185.29.220.0/24 maxlen: 24
185.29.221.0/24 maxlen: 24
212.16.64.0/19 maxlen: 24
212.16.71.0/24 maxlen: 24
212.16.72.0/24 maxlen: 25
212.16.81.0/24 maxlen: 24
212.16.86.0/23 maxlen: 23
212.16.89.0/24 maxlen: 24
212.80.0.0/19 maxlen: 24
212.80.2.0/24 maxlen: 24
212.80.12.0/24 maxlen: 24
212.80.13.0/24 maxlen: 24
212.80.14.0/24 maxlen: 24
212.80.15.0/24 maxlen: 24
2a00:7d80::/29 maxlen: 64
Validation: Failed, certificate revoked on Wed 11 Dec 2024 10:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:7b:eb:7a:07:33:a5:31:ec:f9:f6:00:7e:2a:34:f6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Nov 30 07:14:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54c82ddbecf05e244c0327007809aacecb4851ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:25:7f:9a:82:a8:56:a0:a2:6f:ed:2f:88:eb:
36:75:4f:f0:00:9e:6a:15:69:ea:84:a1:e0:8d:db:
4d:29:8e:7e:93:76:7f:14:4b:55:a8:b7:cc:70:ee:
4c:5a:13:6c:ec:3e:fd:c6:61:c9:7c:a4:79:53:4f:
58:9d:e7:c0:cd:7c:da:46:12:29:ec:04:71:78:73:
8a:6c:0c:a1:28:be:6a:15:eb:d3:b2:a5:2f:26:1e:
35:8f:9a:04:1f:be:54:18:57:27:ed:c6:8c:99:ef:
e6:31:5e:a0:cd:ff:52:b8:16:b7:5c:c3:dd:40:58:
78:ba:97:19:8b:11:75:31:3f:4f:7a:be:0d:4e:8e:
0b:4c:0a:89:87:94:e0:c2:ea:ec:dc:6d:45:dd:53:
10:3d:8e:a4:0c:c9:d9:96:24:b7:43:1c:08:c4:e5:
d5:75:fe:d8:04:92:f2:28:de:b3:5e:8f:41:57:0d:
40:27:5c:e9:0f:a8:d6:6b:8a:5e:90:37:81:2e:e7:
7c:b2:f3:a5:96:3a:40:80:cd:da:21:cd:52:a5:70:
7d:68:01:bc:62:bc:3a:1b:aa:58:ad:e0:6d:a7:06:
dc:1d:a7:42:ae:c8:4e:d4:6b:d8:dc:99:54:2f:53:
e8:d7:0e:67:64:25:3d:66:f7:b4:d6:8a:e5:89:73:
d5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C8:2D:DB:EC:F0:5E:24:4C:03:27:00:78:09:AA:CE:CB:48:51:ED
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/VMgt2-zwXiRMAycAeAmqzstIUe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0/24
46.38.140.0/24
46.38.150.0/23
185.24.150.0/24
185.29.220.0/23
212.16.64.0/19
212.80.0.0/19
IPv6:
2a00:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
7c:63:30:42:a8:d2:07:7e:ab:ba:af:5c:3e:e8:3b:a3:24:5d:
f7:e2:31:16:21:b2:8e:2f:cb:8d:2a:ce:03:46:77:a9:d3:d7:
d3:4b:5f:9f:6f:82:36:9d:2f:de:ae:fe:b4:f5:e7:3a:37:8f:
03:e4:c1:4d:0a:72:79:62:5d:73:60:16:c4:ec:a8:c5:9a:c8:
7b:58:01:66:30:d5:ad:0a:18:c1:ad:b9:87:1d:8d:c4:8b:67:
cd:67:d1:26:b9:d1:97:dc:dd:c4:7c:ea:03:98:9b:58:15:fc:
ed:be:86:40:af:ba:88:c9:7f:f3:02:ca:d7:e1:e2:f9:61:72:
f8:a0:a1:be:7d:e8:15:5c:e5:09:ce:53:f6:fc:2b:95:05:44:
ec:ef:76:e2:58:bb:56:d7:b5:17:80:e2:8d:49:66:64:73:08:
ee:a9:d9:35:ee:08:84:1e:a8:b2:39:0c:37:ac:ac:67:94:0d:
14:bc:23:ba:15:11:55:ce:19:43:96:d2:eb:7c:40:fd:03:20:
4d:e6:7b:52:1d:47:8a:19:e7:f1:c5:32:12:7b:c2:66:bb:27:
b6:f3:2b:1e:52:9e:e9:aa:28:a3:bd:49:eb:d1:26:9f:47:78:
75:34:59:76:b3:75:bd:93:4c:03:15:75:aa:bf:95:e9:f9:c6:
3a:08:1b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:43:50 2025 by rpki-client