Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/VPNAlszCYkE5ZP91rRdw7VXqoEE.roa
File: VPNAlszCYkE5ZP91rRdw7VXqoEE.roa (raw, json)
Hash identifier: 1LS9AgKU9tic0UyAn0GnjqECx4C2Oci0ikBeTQIwz1E=
Subject key identifier: 54:F3:40:96:CC:C2:62:41:39:64:FF:75:AD:17:70:ED:55:EA:A0:41
Certificate issuer: /CN=4cad0397487799e2118ff4cbcf8f159747f35891
Certificate serial: 01857169B257E388B1B3B849E675AD00CA7E
Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/VPNAlszCYkE5ZP91rRdw7VXqoEE.roa
Signing time: Mon 02 Jan 2023 07:37:10 +0000
ROA not before: Mon 02 Jan 2023 07:37:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12859
IP address blocks: 212.114.97.0/24 maxlen: 24
212.114.96.0/19 maxlen: 24
212.114.98.0/24 maxlen: 24
212.114.96.0/24 maxlen: 24
212.114.100.0/24 maxlen: 24
212.114.101.0/24 maxlen: 24
212.114.99.0/24 maxlen: 24
212.114.104.0/24 maxlen: 24
212.114.105.0/24 maxlen: 24
212.114.102.0/24 maxlen: 24
212.114.103.0/24 maxlen: 24
212.114.107.0/24 maxlen: 24
212.114.108.0/24 maxlen: 24
212.114.106.0/24 maxlen: 24
212.114.111.0/24 maxlen: 24
212.114.112.0/24 maxlen: 24
212.114.109.0/24 maxlen: 24
212.114.110.0/24 maxlen: 24
212.114.114.0/24 maxlen: 24
212.114.115.0/24 maxlen: 24
212.114.113.0/24 maxlen: 24
212.114.118.0/24 maxlen: 24
213.154.226.0/24 maxlen: 24
213.154.225.0/24 maxlen: 24
213.154.224.0/24 maxlen: 24
212.114.116.0/24 maxlen: 24
212.114.117.0/24 maxlen: 24
213.154.224.0/19 maxlen: 24
213.154.228.0/24 maxlen: 24
212.114.121.0/24 maxlen: 24
212.114.119.0/24 maxlen: 24
213.154.229.0/24 maxlen: 24
213.154.230.0/24 maxlen: 24
212.114.122.0/24 maxlen: 24
213.154.233.0/24 maxlen: 24
213.154.232.0/24 maxlen: 24
213.154.231.0/24 maxlen: 24
213.154.227.0/24 maxlen: 24
212.114.120.0/24 maxlen: 24
212.114.125.0/24 maxlen: 24
212.114.123.0/24 maxlen: 24
212.114.124.0/24 maxlen: 24
213.154.237.0/24 maxlen: 24
212.114.126.0/24 maxlen: 24
213.154.236.0/24 maxlen: 24
213.154.234.0/24 maxlen: 24
212.114.127.0/24 maxlen: 24
213.154.235.0/24 maxlen: 24
213.154.240.0/24 maxlen: 24
213.154.238.0/24 maxlen: 24
213.154.239.0/24 maxlen: 24
212.72.233.0/24 maxlen: 24
212.72.232.0/24 maxlen: 24
212.72.232.0/21 maxlen: 24
212.72.234.0/24 maxlen: 24
212.72.237.0/24 maxlen: 24
212.72.238.0/24 maxlen: 24
212.72.235.0/24 maxlen: 24
212.72.236.0/24 maxlen: 24
212.72.240.0/24 maxlen: 24
212.72.239.0/24 maxlen: 24
212.72.240.0/20 maxlen: 24
212.72.241.0/24 maxlen: 24
212.72.244.0/24 maxlen: 24
212.72.245.0/24 maxlen: 24
212.72.242.0/24 maxlen: 24
212.72.243.0/24 maxlen: 24
212.72.246.0/24 maxlen: 24
212.72.247.0/24 maxlen: 24
212.72.248.0/24 maxlen: 24
212.72.251.0/24 maxlen: 24
212.72.252.0/24 maxlen: 24
212.72.249.0/24 maxlen: 24
212.72.250.0/24 maxlen: 24
212.72.253.0/24 maxlen: 24
212.72.254.0/24 maxlen: 24
212.72.255.0/24 maxlen: 24
87.251.39.0/24 maxlen: 24
87.251.40.0/24 maxlen: 24
87.251.43.0/24 maxlen: 24
87.251.41.0/24 maxlen: 24
87.251.42.0/24 maxlen: 24
87.251.44.0/24 maxlen: 24
87.251.46.0/24 maxlen: 24
87.251.47.0/24 maxlen: 24
87.251.45.0/24 maxlen: 24
87.251.50.0/24 maxlen: 24
87.251.48.0/24 maxlen: 24
87.251.49.0/24 maxlen: 24
87.251.51.0/24 maxlen: 24
87.251.53.0/24 maxlen: 24
87.251.54.0/24 maxlen: 24
87.251.52.0/24 maxlen: 24
87.251.57.0/24 maxlen: 24
87.251.55.0/24 maxlen: 24
87.251.56.0/24 maxlen: 24
87.251.58.0/24 maxlen: 24
87.251.60.0/24 maxlen: 24
87.251.61.0/24 maxlen: 24
87.251.59.0/24 maxlen: 24
87.251.63.0/24 maxlen: 24
87.251.62.0/24 maxlen: 24
193.109.122.0/24 maxlen: 24
87.251.32.0/24 maxlen: 24
87.251.32.0/19 maxlen: 24
87.251.33.0/24 maxlen: 24
87.251.36.0/24 maxlen: 24
87.251.34.0/24 maxlen: 24
87.251.35.0/24 maxlen: 24
87.251.37.0/24 maxlen: 24
87.251.38.0/24 maxlen: 24
213.136.0.0/19 maxlen: 24
213.136.0.0/24 maxlen: 24
213.136.1.0/24 maxlen: 24
213.136.4.0/24 maxlen: 24
213.136.2.0/24 maxlen: 24
213.136.3.0/24 maxlen: 24
213.136.5.0/24 maxlen: 24
213.136.7.0/24 maxlen: 24
213.136.8.0/24 maxlen: 24
213.136.6.0/24 maxlen: 24
213.136.11.0/24 maxlen: 24
213.136.9.0/24 maxlen: 24
213.136.10.0/24 maxlen: 24
213.136.12.0/24 maxlen: 24
213.136.14.0/24 maxlen: 24
213.136.15.0/24 maxlen: 24
213.136.13.0/24 maxlen: 24
213.136.16.0/24 maxlen: 24
213.136.17.0/24 maxlen: 24
213.136.23.0/24 maxlen: 24
213.136.24.0/24 maxlen: 24
213.136.18.0/24 maxlen: 24
213.136.19.0/24 maxlen: 24
213.136.21.0/24 maxlen: 24
213.136.22.0/24 maxlen: 24
213.136.20.0/24 maxlen: 24
213.136.25.0/24 maxlen: 24
213.136.26.0/24 maxlen: 24
213.136.28.0/24 maxlen: 24
213.136.29.0/24 maxlen: 24
213.136.27.0/24 maxlen: 24
213.136.30.0/24 maxlen: 24
213.136.31.0/24 maxlen: 24
185.62.16.0/22 maxlen: 24
185.62.16.0/24 maxlen: 24
185.62.17.0/24 maxlen: 24
185.62.19.0/24 maxlen: 24
185.62.18.0/24 maxlen: 24
213.154.243.0/24 maxlen: 24
213.154.244.0/24 maxlen: 24
213.154.241.0/24 maxlen: 24
213.154.242.0/24 maxlen: 24
213.154.246.0/24 maxlen: 24
213.154.245.0/24 maxlen: 24
213.154.247.0/24 maxlen: 24
213.154.250.0/24 maxlen: 24
213.154.251.0/24 maxlen: 24
213.154.248.0/24 maxlen: 24
213.154.249.0/24 maxlen: 24
213.154.253.0/24 maxlen: 24
213.154.252.0/24 maxlen: 24
213.154.255.0/24 maxlen: 24
213.154.254.0/24 maxlen: 24
2001:7b8::/29 maxlen: 48
2001:7bf::/48 maxlen: 48
2001:7be::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:b2:57:e3:88:b1:b3:b8:49:e6:75:ad:00:ca:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891
Validity
Not Before: Jan 2 07:37:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54f34096ccc262413964ff75ad1770ed55eaa041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a4:38:78:9b:ca:2b:ef:f6:51:22:cf:4e:6f:
a4:bb:42:eb:6d:63:7f:2f:44:9a:ab:cc:37:1a:21:
76:36:68:56:8c:08:97:f7:b9:39:56:0f:51:31:1c:
8e:ab:ac:c6:f0:c3:78:5a:ba:19:23:11:dc:b8:5d:
81:80:d1:90:8a:ef:1c:36:a1:2b:68:9e:3e:b5:cd:
8b:bf:58:c6:28:c0:8d:3c:83:46:2f:1f:cb:8a:95:
86:75:4d:22:e2:da:04:8d:8f:b4:a9:dc:57:69:a8:
f0:05:42:c6:2f:18:8d:c0:a8:6d:b2:48:c4:12:38:
c0:ed:c9:b9:0d:03:d2:ef:35:58:ff:db:44:87:e7:
79:1a:62:17:e6:45:b3:50:90:a8:dd:3a:82:04:72:
1f:7e:72:43:74:31:05:f4:ea:63:26:b3:61:14:d5:
5b:78:d3:f6:39:52:e9:b7:f1:df:68:e8:90:99:d0:
ec:52:35:9d:da:7e:12:cc:84:ae:95:46:ff:3a:04:
45:f5:c6:9a:34:b8:93:09:0b:fb:c9:60:99:93:69:
6c:2f:d3:e6:a5:32:b1:7d:d2:0f:81:e4:65:ba:86:
31:ce:cd:ab:2a:3b:90:13:a5:b4:33:5e:7f:47:53:
30:95:7d:7e:fe:aa:28:b3:37:c3:c0:87:5f:3d:14:
9b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F3:40:96:CC:C2:62:41:39:64:FF:75:AD:17:70:ED:55:EA:A0:41
X509v3 Authority Key Identifier:
keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/VPNAlszCYkE5ZP91rRdw7VXqoEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.32.0/19
185.62.16.0/22
193.109.122.0/24
212.72.232.0-212.72.255.255
212.114.96.0/19
213.136.0.0/19
213.154.224.0/19
IPv6:
2001:7b8::/29
Signature Algorithm: sha256WithRSAEncryption
60:c6:a0:f5:7d:58:d9:fc:8a:80:77:e5:68:e2:39:fb:0d:3d:
28:40:1c:a3:a3:6d:36:8d:2e:53:5a:27:89:35:78:a7:44:da:
37:16:60:42:a3:22:fc:20:87:36:79:59:4d:ac:79:08:2a:b5:
a8:a9:dd:7c:1d:53:11:3f:35:a3:13:92:97:19:96:e6:cd:46:
d9:05:db:52:c5:17:c4:9b:4b:05:96:d0:96:13:57:2c:17:76:
f7:9d:ab:1f:c8:5a:64:5a:44:b3:15:8c:33:c9:42:78:28:61:
69:2d:b5:77:29:34:c5:d1:1e:16:b5:fe:de:ac:44:83:10:e6:
07:82:c4:12:0f:ae:30:12:ba:22:a8:63:82:07:bf:fa:04:d7:
f9:87:60:91:33:1b:59:0d:b2:11:f3:f6:52:2f:e4:0b:9f:57:
1a:25:f0:9d:3a:3b:28:b9:98:b3:f8:4c:f9:ec:72:a4:f3:bf:
5a:62:b1:e3:0b:c2:51:fd:c2:e5:f1:a9:03:94:1c:79:27:1b:
6f:4f:39:4a:93:c3:65:8d:18:d0:16:86:a9:98:c9:7f:a4:47:
f0:4e:02:b1:eb:40:1f:82:6f:6f:d8:fc:75:5f:51:b7:ce:5d:
bd:46:e9:cc:49:e9:de:74:fa:70:5a:82:bf:c3:36:ec:d0:b6:
ef:35:f6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:14 2024 by rpki-client on console-fra.rpki-client.org