Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/VpwtD78w_z9gEFL9JBSXzIYcTE0.roa
File: VpwtD78w_z9gEFL9JBSXzIYcTE0.roa (raw, json)
Hash identifier: WG9Zaeci21gHwOf/EMVBZKwDlA+QDQHgJESHs0GUsaA=
Subject key identifier: 56:9C:2D:0F:BF:30:FF:3F:60:10:52:FD:24:14:97:CC:86:1C:4C:4D
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 018CC7933CF17B90E02CFE1FDD65323E4785
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/VpwtD78w_z9gEFL9JBSXzIYcTE0.roa
Signing time: Tue 02 Jan 2024 00:29:24 +0000
ROA not before: Tue 02 Jan 2024 00:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21211
IP address blocks: 62.192.182.0/23 maxlen: 23
62.192.180.0/23 maxlen: 23
5.253.240.0/23 maxlen: 23
5.253.242.0/23 maxlen: 23
147.78.112.0/23 maxlen: 23
171.22.4.0/23 maxlen: 23
147.78.114.0/23 maxlen: 23
171.22.6.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 14 Mar 2024 17:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:3c:f1:7b:90:e0:2c:fe:1f:dd:65:32:3e:47:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 2 00:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=569c2d0fbf30ff3f601052fd241497cc861c4c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:28:72:3e:c3:ed:1f:aa:08:af:7f:43:4d:
12:d9:cf:88:24:4d:47:2a:bc:31:6b:5c:f1:e1:f6:
96:57:34:13:bb:79:15:61:7b:d7:25:d5:c7:46:14:
ca:7c:8c:ee:b4:08:31:26:cb:5a:48:a3:34:a6:0a:
9c:74:42:3b:24:e0:54:b5:53:6b:08:fd:79:14:09:
ff:08:60:2d:ee:f2:80:05:0c:26:4b:56:a7:fa:20:
85:a3:a1:4c:68:ce:84:00:f3:3b:e4:41:eb:2e:b7:
53:48:9d:60:fa:9e:88:f5:11:ed:81:c6:10:94:ed:
7c:36:50:d5:de:e1:dd:f6:15:02:be:d4:4c:7c:02:
31:10:09:fb:59:c9:cd:85:08:c6:8c:87:92:1b:c9:
ff:88:f9:d8:c9:d3:33:4c:c9:d7:75:7e:11:f6:11:
1e:cd:68:cc:4f:8b:6c:ee:dc:a9:5f:f5:3c:0b:04:
24:b5:b9:8b:da:26:e2:f6:ce:79:69:0c:b3:09:24:
69:83:3b:74:62:aa:23:bb:40:4c:32:a8:8d:05:93:
10:b8:65:f9:e0:36:d4:a8:77:58:e0:ae:1b:17:12:
04:0a:1f:29:61:10:22:7d:6c:2a:c8:b3:7f:c1:ff:
b5:9a:cc:eb:57:f7:f6:e1:4a:30:c7:7b:73:e8:c5:
a2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9C:2D:0F:BF:30:FF:3F:60:10:52:FD:24:14:97:CC:86:1C:4C:4D
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/VpwtD78w_z9gEFL9JBSXzIYcTE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.240.0/22
62.192.180.0/22
147.78.112.0/22
171.22.4.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:6d:84:30:54:97:e8:85:86:de:15:94:a5:1c:0c:24:10:0e:
80:2f:47:b9:a0:52:cd:70:7a:b6:29:a5:02:9e:eb:00:de:c5:
84:6f:33:0b:6d:f4:63:18:56:67:0f:45:90:3e:5d:1f:15:57:
6c:f9:22:4d:14:b2:6d:92:53:cd:36:cb:4a:cc:34:8e:48:66:
d4:22:df:ab:20:ef:46:90:18:bb:c7:34:57:50:f8:00:79:3a:
d4:71:c5:17:c0:c2:c3:a6:35:4a:4d:67:a5:87:78:fb:80:11:
75:25:d6:5b:df:d2:16:5c:58:73:01:cc:0b:44:e3:59:ed:8a:
63:f3:28:af:cf:5c:65:5a:06:18:60:45:67:21:92:1a:95:1a:
57:5b:e9:44:ca:d9:ec:85:76:47:fe:03:21:b4:4f:d1:ec:17:
35:ca:dd:12:3f:00:bb:fe:f0:d6:8c:47:5b:d3:da:c2:c2:61:
4b:a5:5e:14:cb:f5:0f:92:9c:1f:15:26:2b:ce:9c:38:9e:ce:
c8:11:ba:c8:c5:79:eb:cf:ef:ad:de:a9:f4:b4:bc:73:26:92:
59:35:1c:f2:be:c3:4d:81:3a:a4:8e:cd:7a:4d:88:d2:0b:5a:
1a:01:7b:13:88:5a:6e:d2:46:9a:61:73:ac:37:8e:92:02:d6:
50:2e:52:49
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzHkzzxe5DgLP4f3WUyPkeFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj
YjUzZDYwHhcNMjQwMTAyMDAyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjljMmQwZmJmMzBmZjNmNjAxMDUyZmQyNDE0OTdjYzg2MWM0YzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtloocj7D7R+qCK9/Q00S2c+IJE1H
Krwxa1zx4faWVzQTu3kVYXvXJdXHRhTKfIzutAgxJstaSKM0pgqcdEI7JOBUtVNr
CP15FAn/CGAt7vKABQwmS1an+iCFo6FMaM6EAPM75EHrLrdTSJ1g+p6I9RHtgcYQ
lO18NlDV3uHd9hUCvtRMfAIxEAn7WcnNhQjGjIeSG8n/iPnYydMzTMnXdX4R9hEe
zWjMT4ts7typX/U8CwQktbmL2ibi9s55aQyzCSRpgzt0Yqoju0BMMqiNBZMQuGX5
4DbUqHdY4K4bFxIECh8pYRAifWwqyLN/wf+1mszrV/f24Uowx3tz6MWi8QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFacLQ+/MP8/YBBS/SQUl8yGHExNMB8GA1UdIwQY
MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt
NDY5MGEwMDcxNDFmLzEvVnB3dEQ3OHdfejlnRUZMOUpCU1h6SVljVEUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm
LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCBf3wAwQC
PsC0AwQCk05wAwQCqxYEMA0GCSqGSIb3DQEBCwUAA4IBAQCtbYQwVJfohYbeFZSl
HAwkEA6AL0e5oFLNcHq2KaUCnusA3sWEbzMLbfRjGFZnD0WQPl0fFVds+SJNFLJt
klPNNstKzDSOSGbUIt+rIO9GkBi7xzRXUPgAeTrUccUXwMLDpjVKTWelh3j7gBF1
JdZb39IWXFhzAcwLRONZ7Ypj8yivz1xlWgYYYEVnIZIalRpXW+lEytnshXZH/gMh
tE/R7Bc1yt0SPwC7/vDWjEdb09rCwmFLpV4Uy/UPkpwfFSYrzpw4ns7IEbrIxXnr
z++t3qn0tLxzJpJZNRzyvsNNgTqkjs16TYjSC1oaAXsTiFpu0kaaYXOsN46SAtZQ
LlJJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:48 2024 by rpki-client on console-fra.rpki-client.org