Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vptYtdqg0hbibwDJkbsCFBnf4k4.roa
File: vptYtdqg0hbibwDJkbsCFBnf4k4.roa (raw, json)
Hash identifier: bb53N4MUDQbyX/tfjkO+MhMP2TrtnjgzEd2og4PUgbw=
Subject key identifier: BE:9B:58:B5:DA:A0:D2:16:E2:6F:00:C9:91:BB:02:14:19:DF:E2:4E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01952E06A7E1EEBD5453F2FA12A937836812
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vptYtdqg0hbibwDJkbsCFBnf4k4.roa
Signing time: Sat 22 Feb 2025 14:19:02 +0000
ROA not before: Sat 22 Feb 2025 14:19:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26383
IP address blocks: 45.144.172.0/24 maxlen: 24
45.144.174.0/24 maxlen: 24
86.107.50.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
92.114.54.0/24 maxlen: 24
93.113.171.0/24 maxlen: 24
185.72.8.0/24 maxlen: 24
185.141.219.0/24 maxlen: 24
185.193.102.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
194.58.34.0/24 maxlen: 24
194.58.44.0/24 maxlen: 24
194.58.45.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
212.192.12.0/24 maxlen: 24
212.192.13.0/24 maxlen: 24
212.192.15.0/24 maxlen: 24
212.192.20.0/24 maxlen: 24
212.192.23.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Feb 2025 13:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:2e:06:a7:e1:ee:bd:54:53:f2:fa:12:a9:37:83:68:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 22 14:19:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be9b58b5daa0d216e26f00c991bb021419dfe24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7c:03:9d:18:20:cd:7b:53:cb:d7:a1:e1:d7:
d5:28:c4:3a:be:da:55:cf:2d:f3:bf:2a:37:18:8b:
b9:ca:ad:1c:cf:34:b1:d4:d6:97:17:c9:12:5e:75:
47:4e:2f:59:69:5c:82:a7:72:11:93:90:36:ff:dd:
dc:8a:e0:5f:21:cd:b0:e4:64:95:79:1d:9d:af:db:
39:c7:5a:cd:a0:9a:0f:57:11:a2:47:66:9a:f8:3c:
8f:a7:d2:28:71:7a:1d:15:18:80:cf:96:69:f9:1e:
2b:36:79:f2:65:0b:ee:ab:be:f6:68:1d:3c:a3:b8:
6e:df:a0:55:57:a8:f9:a5:0f:1b:47:15:8c:18:00:
65:88:b4:53:22:f0:d5:04:3b:16:fe:ca:19:5b:7b:
c2:b7:9a:f3:a4:dc:c6:67:a9:ab:63:90:b4:01:f1:
23:58:92:bf:8f:32:e7:0f:64:4a:06:3d:dd:e6:9f:
5e:e6:ad:0f:0f:ae:08:75:13:8e:e0:21:21:2d:76:
1d:f7:bd:05:c7:75:64:6f:a0:46:8e:9b:b1:13:31:
40:e2:38:51:ce:ee:1d:b5:be:7e:67:e4:ec:21:72:
86:b6:30:70:65:0b:78:e6:7a:2b:8c:8d:2e:75:3f:
60:6f:76:9b:e2:95:66:b9:cc:9a:b2:d0:aa:93:da:
bb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9B:58:B5:DA:A0:D2:16:E2:6F:00:C9:91:BB:02:14:19:DF:E2:4E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vptYtdqg0hbibwDJkbsCFBnf4k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.172.0/24
45.144.174.0/24
86.107.50.0/24
86.107.100.0/24
92.114.54.0/24
93.113.171.0/24
185.72.8.0/24
185.141.219.0/24
185.193.102.0/24
185.198.235.0/24
188.64.142.0/24
193.124.49.0/24
194.58.34.0/24
194.58.44.0-194.58.46.255
195.88.89.0/24
195.133.193.0/24
212.192.12.0/23
212.192.15.0/24
212.192.20.0/24
212.192.23.0/24
212.192.214.0/23
Signature Algorithm: sha256WithRSAEncryption
14:0a:b3:ee:2d:c0:a2:71:88:cf:07:3e:d2:c5:d6:0d:18:0f:
17:06:af:30:29:75:20:db:bc:ac:80:76:e8:4f:00:96:d2:9b:
64:96:21:0d:ca:46:d5:cf:6e:ea:7d:59:2c:37:b2:1b:3a:02:
6b:b0:ea:e3:f4:8e:5d:36:3e:3c:23:3c:b1:61:92:be:d6:3f:
d0:18:2d:35:41:f6:8c:88:c2:7e:61:63:25:f1:44:41:33:c4:
cc:9e:26:65:81:1e:a5:d4:31:78:d3:2e:62:da:3b:72:de:11:
ab:1f:78:fb:52:7b:dc:b2:40:3e:e4:51:6f:dc:ad:46:9d:ba:
4a:b3:a5:1d:1a:6f:f4:0e:38:6a:a6:11:9c:5d:c1:2a:f0:70:
90:9f:14:48:f6:1f:09:2a:67:a8:e4:60:5a:3a:33:ea:d3:f7:
75:09:5f:36:0a:e7:a9:de:09:02:62:fe:ea:9b:19:12:ed:4a:
48:47:1a:53:2c:52:04:79:3a:20:f3:e0:bb:c9:69:92:03:2b:
3e:a1:93:6d:5b:51:8a:a5:77:35:d7:d3:4d:3a:9a:ac:36:30:
66:fc:8f:4c:a3:df:f6:0d:55:d5:e1:67:21:45:6f:b6:47:96:
35:2b:eb:c0:7d:ce:44:0f:0c:ef:8c:2e:78:4c:f7:61:70:2b:
ef:1f:78:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:32:10 2025 by rpki-client