Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/vLTViwUEp-r4ZdC6u8Ww5VW2tKg.roa
File: vLTViwUEp-r4ZdC6u8Ww5VW2tKg.roa (raw, json)
Hash identifier: dtxAUgrH5oOxei9Z49nMvxgngVK2eFETXBOPNx1ivoM=
Subject key identifier: BC:B4:D5:8B:05:04:A7:EA:F8:65:D0:BA:BB:C5:B0:E5:55:B6:B4:A8
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0190030B5C14E728F73684B7C93C785961DF
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/vLTViwUEp-r4ZdC6u8Ww5VW2tKg.roa
Signing time: Mon 10 Jun 2024 16:46:34 +0000
ROA not before: Mon 10 Jun 2024 16:46:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 5.180.32.0/22 maxlen: 24
5.180.50.0/24 maxlen: 24
5.180.51.0/24 maxlen: 24
5.180.80.0/24 maxlen: 24
5.253.39.0/24 maxlen: 24
45.8.188.0/22 maxlen: 24
45.8.192.0/22 maxlen: 24
45.8.199.0/24 maxlen: 24
45.8.203.0/24 maxlen: 24
45.8.252.0/24 maxlen: 24
45.8.255.0/24 maxlen: 24
45.9.0.0/24 maxlen: 24
45.9.1.0/24 maxlen: 24
85.208.105.0/24 maxlen: 24
85.208.107.0/24 maxlen: 24
85.208.113.0/24 maxlen: 24
85.208.115.0/24 maxlen: 24
85.209.160.0/24 maxlen: 24
193.168.208.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 16:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:03:0b:5c:14:e7:28:f7:36:84:b7:c9:3c:78:59:61:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 10 16:46:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcb4d58b0504a7eaf865d0babbc5b0e555b6b4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:7f:b2:54:8c:13:0c:5f:b5:7a:13:15:93:
0e:6d:06:72:5f:87:6d:ae:af:23:0d:97:64:88:ea:
7b:d6:77:eb:55:7f:97:15:30:f0:cf:39:56:0c:26:
68:bc:f7:54:de:4a:51:3a:07:52:3b:bf:8f:e9:57:
46:94:d2:f3:02:86:80:78:71:c0:ae:c2:c4:36:76:
48:f7:07:0f:d5:b1:a3:00:d0:6c:cd:90:f9:58:b6:
9f:aa:6b:ab:c3:9a:a0:ca:92:a5:d0:09:be:32:38:
da:92:0d:9c:1f:a9:0c:85:15:81:9b:b5:e0:49:8d:
59:ec:06:45:83:a9:62:e3:a3:11:09:23:a4:3e:aa:
74:35:37:2e:3f:2a:b0:56:df:59:6d:e2:27:9c:3d:
41:b5:d9:81:1f:83:6a:86:ea:3f:7f:04:b2:c1:0a:
3d:cf:21:07:d2:2d:95:72:c7:97:4f:c8:77:41:28:
fa:ca:6c:0e:c9:c0:30:7b:a3:92:a3:49:a3:d8:ee:
d8:7b:4f:2f:8f:17:5c:00:8b:88:01:26:90:d0:52:
c9:8d:9e:2e:bf:bc:9a:0e:f2:81:42:60:c9:b9:db:
8a:9f:95:3d:f2:4d:d6:62:a6:35:28:89:b5:ae:76:
52:b2:ca:4b:a3:6b:9a:5f:62:09:95:38:6f:86:99:
d7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B4:D5:8B:05:04:A7:EA:F8:65:D0:BA:BB:C5:B0:E5:55:B6:B4:A8
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/vLTViwUEp-r4ZdC6u8Ww5VW2tKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.32.0/22
5.180.50.0/23
5.180.80.0/24
5.253.39.0/24
45.8.188.0-45.8.195.255
45.8.199.0/24
45.8.203.0/24
45.8.252.0/24
45.8.255.0-45.9.1.255
85.208.105.0/24
85.208.107.0/24
85.208.113.0/24
85.208.115.0/24
85.209.160.0/24
193.168.208.0/22
Signature Algorithm: sha256WithRSAEncryption
64:c6:0f:3c:eb:53:92:f3:2b:c6:1d:9d:ee:2f:b8:0a:c8:0b:
56:48:84:c1:ad:ac:36:c2:3b:28:3b:97:fb:e1:71:67:c4:2f:
66:80:8d:61:93:f5:49:4b:b0:7a:ee:5b:26:75:f0:4a:c7:4e:
c1:32:00:52:0a:c8:32:45:fd:89:4a:30:6b:f9:31:28:da:a0:
bc:f7:12:29:43:0d:17:fa:a4:94:2d:cc:5b:7a:a4:4d:83:ea:
0b:6f:c5:e8:13:7f:62:33:a0:f6:2b:68:b0:59:6c:10:fb:6a:
0e:df:a0:f4:8a:81:c1:6b:1b:64:df:1c:9d:15:4f:93:0a:15:
e5:3c:77:69:fd:7d:cf:27:b4:1c:85:c9:f1:86:b8:37:1b:75:
9a:b6:2b:bd:88:a2:3f:3b:c1:87:6c:05:a7:65:53:e1:6e:67:
7d:0a:0f:44:53:43:77:a0:ca:1f:28:68:4c:ce:cd:b3:00:d2:
4d:99:83:4e:e3:d8:b2:1b:08:ae:32:40:4b:c9:b2:7d:01:05:
01:fc:de:93:49:28:cc:c2:fd:bf:a1:e6:b1:66:fb:02:57:15:
2e:d9:de:e5:78:86:43:6b:0f:65:ab:d4:8a:c8:65:95:f9:9f:
59:d0:cc:e0:ae:c1:4c:bb:ad:a5:a8:3f:ef:67:6d:dd:0d:33:
c4:2f:8d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:04 2025 by rpki-client