Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/vCvfYSENpHozjc3NDPtfuZJb834.roa
File: vCvfYSENpHozjc3NDPtfuZJb834.roa (raw, json)
Hash identifier: 53vD3+jGS/5T0qKx2lOq0eKIPoni9vn76al6tCjs1aQ=
Subject key identifier: BC:2B:DF:61:21:0D:A4:7A:33:8D:CD:CD:0C:FB:5F:B9:92:5B:F3:7E
Certificate issuer: /CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Certificate serial: 0194083F13D702CC14849A35F75869579FEC
Authority key identifier: B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/vCvfYSENpHozjc3NDPtfuZJb834.roa
Signing time: Fri 27 Dec 2024 13:12:19 +0000
ROA not before: Fri 27 Dec 2024 13:12:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47952
IP address blocks: 45.136.106.0/24 maxlen: 24
45.139.220.0/24 maxlen: 24
45.139.221.0/24 maxlen: 24
45.139.223.0/24 maxlen: 24
45.145.21.0/24 maxlen: 24
45.145.22.0/24 maxlen: 24
45.145.23.0/24 maxlen: 24
91.194.52.0/24 maxlen: 24
91.194.54.0/24 maxlen: 24
185.82.220.0/24 maxlen: 24
185.82.221.0/24 maxlen: 24
185.82.222.0/24 maxlen: 24
185.82.223.0/24 maxlen: 24
185.126.177.0/24 maxlen: 24
185.126.178.0/24 maxlen: 24
185.126.179.0/24 maxlen: 24
185.201.212.0/24 maxlen: 24
185.201.213.0/24 maxlen: 24
185.201.214.0/24 maxlen: 24
185.201.215.0/24 maxlen: 24
2a0a:c4c0::/48 maxlen: 48
2a0a:c4c0:1::/48 maxlen: 48
2a0a:c4c0:2::/48 maxlen: 48
2a0a:c4c0:3::/48 maxlen: 48
2a0a:c4c0:100::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:08:3f:13:d7:02:cc:14:84:9a:35:f7:58:69:57:9f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Validity
Not Before: Dec 27 13:12:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc2bdf61210da47a338dcdcd0cfb5fb9925bf37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f7:f6:4a:67:5c:63:33:be:a2:65:25:9b:63:
7e:52:b9:fb:c6:f9:fa:54:84:26:1a:d1:a9:26:25:
a9:54:2a:d8:4a:1b:29:3a:77:45:12:1c:9c:0c:e6:
9a:fc:53:23:93:40:b7:53:81:68:10:33:44:42:b7:
08:64:5b:1d:75:9e:5d:a1:01:55:d5:f9:41:5c:99:
fb:44:4d:fe:26:f2:35:b4:dd:9f:96:0d:57:2a:9e:
c6:7a:55:ad:8e:1d:17:20:27:54:50:72:56:1e:30:
62:d7:ab:05:3f:aa:dc:40:be:33:5e:7d:9f:f7:81:
6c:e3:79:25:96:01:5c:7b:46:98:5d:11:96:d7:d6:
82:2e:2d:48:7a:49:40:71:78:cc:7b:f6:b2:18:8b:
a6:3a:b3:73:6e:26:a1:5c:67:65:2b:79:d6:8c:af:
6e:a2:78:0a:cf:d2:b5:5c:71:0e:57:8a:d1:28:db:
08:95:c9:5a:db:cd:1c:df:2f:26:4e:37:e1:fa:10:
87:0f:2d:3d:94:ad:62:0e:de:30:74:45:19:3a:9b:
91:86:e0:9c:0a:b9:07:67:82:92:5e:c3:21:8f:78:
7e:ba:76:0a:1b:05:6b:49:ea:8c:ef:d0:49:ae:48:
ec:e2:d7:42:c0:37:1b:53:f7:b3:c8:43:97:28:43:
5e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2B:DF:61:21:0D:A4:7A:33:8D:CD:CD:0C:FB:5F:B9:92:5B:F3:7E
X509v3 Authority Key Identifier:
keyid:B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/vCvfYSENpHozjc3NDPtfuZJb834.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.106.0/24
45.139.220.0/23
45.139.223.0/24
45.145.21.0-45.145.23.255
91.194.52.0/24
91.194.54.0/24
185.82.220.0/22
185.126.177.0-185.126.179.255
185.201.212.0/22
IPv6:
2a0a:c4c0::/46
2a0a:c4c0:100::/48
Signature Algorithm: sha256WithRSAEncryption
58:c5:12:58:a9:ae:c7:c5:eb:cd:49:2a:78:32:e2:9d:ee:ea:
81:f2:02:eb:18:8f:01:f7:c3:ab:28:a4:b4:56:c5:40:c4:2a:
7d:45:7c:67:50:ef:dd:68:3d:6b:58:eb:b3:4d:64:af:a9:05:
a5:71:8a:12:93:a9:70:62:b9:d3:f7:45:75:fa:33:02:4c:e8:
43:15:c3:28:5f:cd:df:f4:b2:15:6e:0f:2c:91:cf:7a:59:5a:
54:d7:de:e1:74:46:d1:53:a8:98:e3:77:30:24:f7:70:05:bf:
73:cd:27:36:08:2e:d7:60:8c:01:8d:ae:c7:25:16:6a:35:56:
15:f4:19:42:12:b8:25:ab:05:23:64:0d:ce:1f:ea:c4:54:72:
73:d6:55:01:7f:31:c1:7c:53:2e:54:30:a2:74:2c:c5:1e:60:
a2:7a:8d:21:9d:6a:00:c0:b6:65:d5:ac:18:56:87:cc:8f:dd:
d4:33:24:8a:99:e7:5b:34:c1:62:a9:59:c7:26:0a:b7:f7:cd:
93:19:e9:76:1a:58:c8:ec:f6:bd:74:14:ef:0c:1c:79:cc:79:
76:38:98:90:5e:5e:57:1d:d3:42:72:6c:7d:19:76:ab:82:f6:
53:7f:79:21:c7:bf:d1:2d:a6:3e:9e:51:c2:c4:30:50:23:f2:
ef:c8:2e:0f
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAZQIPxPXAswUhJo191hpV5/sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MzBiNzNiNTFjYmM1MzgwZGQ0YWRiM2Q1YWFmZjRkN2Ez
MzRjNWUwHhcNMjQxMjI3MTMxMjE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzJiZGY2MTIxMGRhNDdhMzM4ZGNkY2QwY2ZiNWZiOTkyNWJmMzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvf2SmdcYzO+omUlm2N+Urn7xvn6
VIQmGtGpJiWpVCrYShspOndFEhycDOaa/FMjk0C3U4FoEDNEQrcIZFsddZ5doQFV
1flBXJn7RE3+JvI1tN2flg1XKp7GelWtjh0XICdUUHJWHjBi16sFP6rcQL4zXn2f
94Fs43kllgFce0aYXRGW19aCLi1IeklAcXjMe/ayGIumOrNzbiahXGdlK3nWjK9u
ongKz9K1XHEOV4rRKNsIlcla280c3y8mTjfh+hCHDy09lK1iDt4wdEUZOpuRhuCc
CrkHZ4KSXsMhj3h+unYKGwVrSeqM79BJrkjs4tdCwDcbU/ezyEOXKENePQIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFLwr32EhDaR6M43NzQz7X7mSW/N+MB8GA1UdIwQY
MBaAFLYwtztRy8U4DdSts9Wq/016M0xeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGpDM08xSEx4VGdOMUsyejFhcl9UWG96VEY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC80NzQ4YzctY2Q5ZS00MDFlLWE4YTQt
MGQ0OGU2ODk1ZjEyLzEvdkN2ZllTRU5wSG96amMzTkRQdGZ1WkpiODM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC80NzQ4YzctY2Q5ZS00MDFlLWE4YTQtMGQ0OGU2ODk1ZjEy
LzEvdGpDM08xSEx4VGdOMUsyejFhcl9UWG96VEY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBMBAIAATBGAwQALYhqAwQB
LYvcAwQALYvfMAwDBAAtkRUDBAMtkRADBABbwjQDBABbwjYDBAK5UtwwDAMEALl+
sQMEArl+sAMEArnJ1DAYBAIAAjASAwcCKgrEwAAAAwcAKgrEwAEAMA0GCSqGSIb3
DQEBCwUAA4IBAQBYxRJYqa7HxevNSSp4MuKd7uqB8gLrGI8B98OrKKS0VsVAxCp9
RXxnUO/daD1rWOuzTWSvqQWlcYoSk6lwYrnT90V1+jMCTOhDFcMoX83f9LIVbg8s
kc96WVpU197hdEbRU6iY43cwJPdwBb9zzSc2CC7XYIwBja7HJRZqNVYV9BlCErgl
qwUjZA3OH+rEVHJz1lUBfzHBfFMuVDCidCzFHmCieo0hnWoAwLZl1awYVofMj93U
MySKmedbNMFiqVnHJgq3982TGel2GljI7Pa9dBTvDBx5zHl2OJiQXl5XHdNCcmx9
GXargvZTf3khx7/RLaY+nlHCxDBQI/LvyC4P
-----END CERTIFICATE-----
Generated at Thu Apr 17 06:58:25 2025 by rpki-client