Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/VmmlMzL1dfGzG-z9r5Ly5pdPOYc.roa
File: VmmlMzL1dfGzG-z9r5Ly5pdPOYc.roa (raw, json)
Hash identifier: d09cnyr7fmuUELdHm7mD1kVZKdb7QxAj2PstrKX52oM=
Subject key identifier: 56:69:A5:33:32:F5:75:F1:B3:1B:EC:FD:AF:92:F2:E6:97:4F:39:87
Certificate issuer: /CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Certificate serial: 018E0A477D7FABF9A38B255A4A72AF9E14C1
Authority key identifier: 5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/VmmlMzL1dfGzG-z9r5Ly5pdPOYc.roa
Signing time: Mon 04 Mar 2024 16:24:01 +0000
ROA not before: Mon 04 Mar 2024 16:24:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56571
IP address blocks: 176.10.64.0/20 maxlen: 20
176.10.64.0/24 maxlen: 24
176.10.65.0/24 maxlen: 24
176.10.66.0/24 maxlen: 24
176.10.67.0/24 maxlen: 24
176.10.68.0/24 maxlen: 24
176.10.69.0/24 maxlen: 24
176.10.70.0/24 maxlen: 24
176.10.71.0/24 maxlen: 24
176.10.72.0/24 maxlen: 24
176.10.73.0/24 maxlen: 24
176.10.74.0/24 maxlen: 24
176.10.75.0/24 maxlen: 24
176.10.76.0/24 maxlen: 24
176.10.77.0/24 maxlen: 24
176.10.78.0/24 maxlen: 24
176.10.79.0/24 maxlen: 24
185.32.68.0/24 maxlen: 24
185.191.40.0/22 maxlen: 22
185.191.40.0/24 maxlen: 24
185.191.41.0/24 maxlen: 24
185.191.42.0/24 maxlen: 24
185.191.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0a:47:7d:7f:ab:f9:a3:8b:25:5a:4a:72:af:9e:14:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Validity
Not Before: Mar 4 16:24:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5669a53332f575f1b31becfdaf92f2e6974f3987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:54:fd:1d:3a:33:18:ce:f5:3d:6d:01:c9:
fe:2d:e8:39:05:15:83:54:2f:ab:c0:f2:76:72:35:
93:c2:5c:f8:a6:f0:23:7a:40:0a:e4:21:b4:e2:1e:
36:40:d0:95:0c:7f:3a:31:76:83:f3:df:b5:77:b3:
d0:a5:47:e8:76:04:b4:f4:41:5c:78:5b:89:c2:39:
ab:b4:66:66:8d:83:dc:7e:87:5d:1b:72:77:2a:67:
44:c7:e7:38:c5:3a:c8:60:5f:86:2f:d0:96:07:1b:
8e:07:b3:7f:81:0b:94:a6:30:60:04:be:6e:c2:83:
87:20:dc:8f:9a:23:b5:db:4b:3d:88:61:a5:da:f6:
c5:de:fc:e1:64:7d:7e:52:39:0d:6b:17:89:50:e7:
f4:43:ed:82:8f:f8:ea:f8:c8:ac:d5:35:02:14:96:
98:59:d5:f1:3c:21:19:95:0b:8e:10:42:12:e7:02:
43:fe:bb:80:5e:da:7e:e1:9f:6e:5e:ec:44:25:b8:
9b:52:bd:88:d9:86:5e:12:fd:44:39:72:31:d3:fc:
34:41:71:b2:4d:e2:99:79:95:f4:e9:b0:f5:ba:ec:
6a:20:8f:44:ac:d8:2d:f1:0d:f5:67:b2:f1:4e:28:
c9:4d:45:f5:02:cf:44:91:79:e7:26:65:8b:3b:31:
bf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:69:A5:33:32:F5:75:F1:B3:1B:EC:FD:AF:92:F2:E6:97:4F:39:87
X509v3 Authority Key Identifier:
keyid:5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/VmmlMzL1dfGzG-z9r5Ly5pdPOYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.10.64.0/20
185.32.68.0/24
185.191.40.0/22
Signature Algorithm: sha256WithRSAEncryption
74:09:2d:5b:d3:8f:58:74:af:79:64:e5:74:61:c1:48:23:d3:
3e:c2:42:ff:9f:4f:4c:15:e1:e7:c5:b2:26:25:23:c0:af:4f:
63:7a:2f:84:d9:68:eb:af:3d:01:c1:e4:64:f7:06:54:1c:08:
8c:df:4b:9f:c1:68:87:43:65:43:b4:4f:2d:bd:09:7d:f5:c4:
60:39:62:a5:c2:e1:e7:e1:18:50:8c:f2:42:22:e4:fc:56:57:
c0:2e:52:00:63:6c:17:e2:9c:12:fc:60:f9:e1:95:95:43:4b:
52:4d:cd:22:5d:a4:28:ad:1b:c3:97:da:73:82:1d:d5:90:05:
af:40:7d:f1:17:80:36:c8:e2:1e:a5:d7:18:ea:a0:ae:24:f6:
0b:2a:55:f2:66:42:fe:ea:58:de:18:26:63:f5:7d:88:60:93:
bd:3b:dd:03:99:5b:41:2c:79:c1:6f:db:53:ea:e8:69:85:a0:
3a:0f:ba:29:95:28:53:69:2a:50:1d:5a:38:7e:06:99:64:16:
ad:58:2d:7a:b5:27:61:e1:1f:35:11:f3:df:f0:8f:e6:e1:d8:
e5:5c:3a:e2:e1:e0:59:f0:1e:46:ba:2c:0d:9d:be:b6:ec:0a:
d8:83:57:c1:40:19:85:bc:da:fb:85:88:7e:d1:8b:4d:8b:da:
24:bf:f9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:11:28 2025 by rpki-client