Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/VF_cw60Tf0xcE3zVcrTCsUa4XqQ.roa
File: VF_cw60Tf0xcE3zVcrTCsUa4XqQ.roa (raw, json)
Hash identifier: bACi0OXoHKYCeqhgtkVji+c6JvIQXLYJanVhplAEhDo=
Subject key identifier: 54:5F:DC:C3:AD:13:7F:4C:5C:13:7C:D5:72:B4:C2:B1:46:B8:5E:A4
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 018C7FB744CD1FB6FD67B5E1FC8FEDF9F456
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/VF_cw60Tf0xcE3zVcrTCsUa4XqQ.roa
Signing time: Tue 19 Dec 2023 01:36:06 +0000
ROA not before: Tue 19 Dec 2023 01:36:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 45.120.176.0/22 maxlen: 24
195.149.87.0/24 maxlen: 24
89.221.225.0/24 maxlen: 24
89.221.224.0/24 maxlen: 24
91.194.161.0/24 maxlen: 24
185.242.84.0/24 maxlen: 24
185.242.85.0/24 maxlen: 24
185.242.87.0/24 maxlen: 24
185.242.86.0/24 maxlen: 24
103.106.0.0/22 maxlen: 24
185.250.150.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
185.250.148.0/24 maxlen: 24
185.250.151.0/24 maxlen: 24
103.35.188.0/22 maxlen: 24
193.203.202.0/24 maxlen: 24
80.92.205.0/24 maxlen: 24
80.92.204.0/24 maxlen: 24
74.119.192.0/24 maxlen: 24
80.92.206.0/24 maxlen: 24
91.225.218.0/24 maxlen: 24
91.225.219.0/24 maxlen: 24
74.119.195.0/24 maxlen: 24
74.119.194.0/24 maxlen: 24
74.119.193.0/24 maxlen: 24
176.120.64.0/24 maxlen: 24
176.120.64.0/22 maxlen: 24
176.120.72.0/22 maxlen: 24
103.113.68.0/22 maxlen: 24
45.67.231.0/24 maxlen: 24
45.67.230.0/24 maxlen: 24
45.67.229.0/24 maxlen: 24
45.67.228.0/24 maxlen: 24
194.246.114.0/24 maxlen: 24
2a09:7c44::/32 maxlen: 32
2a09:7c45::/32 maxlen: 32
2a09:7c47::/32 maxlen: 32
2a09:7c41::/32 maxlen: 32
2a09:7c42::/32 maxlen: 32
2a09:7c43::/32 maxlen: 32
2a09:7c40::/32 maxlen: 32
2a09:7c46::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 19 Dec 2023 01:44:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7f:b7:44:cd:1f:b6:fd:67:b5:e1:fc:8f:ed:f9:f4:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Dec 19 01:36:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=545fdcc3ad137f4c5c137cd572b4c2b146b85ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:20:ff:82:e0:ff:34:8a:a9:82:83:73:56:d1:
ff:03:fb:4a:87:fb:f2:b4:e2:79:27:d7:82:70:ed:
20:bd:3e:d4:96:05:24:f2:fa:fc:63:52:cd:06:3e:
b8:78:f6:4f:2f:b2:79:8d:30:70:64:f5:e6:c8:3d:
63:1f:d8:83:a2:4a:f7:9c:90:4d:c3:53:f2:8d:2c:
c8:09:d5:4c:cc:43:34:7e:09:ec:ba:e0:8c:d4:ad:
80:4b:4d:f1:f2:2a:b6:a6:d5:39:2d:25:d6:f4:83:
dd:cb:17:e7:db:fb:03:ac:44:ff:68:92:78:c2:2a:
16:af:95:ca:20:e2:6e:2c:38:37:2f:d7:d7:97:44:
36:0d:ef:77:fd:60:e3:6c:57:df:f9:08:13:e7:8d:
08:70:bc:ce:16:1c:60:d2:07:22:2c:f6:16:69:b5:
fb:90:0f:1f:13:25:a9:3d:62:9f:69:6d:03:f2:f3:
da:76:db:8d:bf:58:33:35:c2:ab:e8:7b:5e:db:ed:
17:22:52:2f:3a:e5:74:c1:c1:b4:61:57:75:2d:de:
dd:ca:2e:e5:b5:e8:2e:5c:b2:de:56:1b:e7:fb:32:
b5:39:05:e7:99:ad:a0:df:fc:af:32:35:1f:8c:f8:
7a:2b:fc:68:91:f0:ba:16:35:05:28:e2:33:68:93:
51:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5F:DC:C3:AD:13:7F:4C:5C:13:7C:D5:72:B4:C2:B1:46:B8:5E:A4
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/VF_cw60Tf0xcE3zVcrTCsUa4XqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/22
45.120.176.0/22
74.119.192.0/22
80.92.204.0-80.92.206.255
89.221.224.0/23
91.194.161.0/24
91.225.218.0/23
103.35.188.0/22
103.106.0.0/22
103.113.68.0/22
176.120.64.0/22
176.120.72.0/22
185.242.84.0/22
185.250.148.0/22
193.203.202.0/24
194.246.114.0/24
195.149.87.0/24
IPv6:
2a09:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
07:db:ef:a0:d0:9d:77:35:7d:d3:37:7a:d8:31:69:1f:24:a7:
1e:b5:d4:47:1a:d0:02:98:24:43:38:66:14:09:05:0b:a6:50:
43:a3:2d:1d:3e:a9:63:53:0f:40:dd:47:32:0f:e7:9d:9c:2e:
f1:70:fa:c9:0b:a7:36:38:ed:0f:30:75:4d:7e:6f:a8:9e:2c:
0b:c1:bd:e0:66:6f:02:f9:e9:e6:be:c5:6d:cc:49:46:ee:7e:
c9:9c:20:09:03:6c:b8:20:92:2b:b7:a4:c8:5b:75:6f:57:6e:
44:f6:49:89:a1:0d:49:58:e2:25:d2:a0:ab:dc:9e:6b:42:c2:
70:57:65:c0:73:3a:84:99:23:0a:a0:77:d7:5f:3e:96:7d:62:
61:90:7e:76:f9:11:c8:8f:31:d8:e1:4b:d2:a2:cb:bd:16:cb:
a5:ec:4b:da:60:57:3c:70:ae:bf:b2:d9:e9:1e:6a:a9:89:f3:
45:be:ca:92:76:ee:87:ce:54:e1:ed:23:9e:88:eb:e1:ae:3d:
37:03:7d:68:70:f7:de:66:5c:3f:d2:8a:2e:f2:62:a8:4c:98:
04:fb:10:ca:a8:5e:66:10:2b:2f:13:1b:0f:64:9c:53:21:de:
0e:4e:f8:1b:f3:5b:98:b6:7a:1b:b6:1d:12:82:2e:1b:da:34:
16:f8:08:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:28 2024 by rpki-client on console-ams.rpki-client.org