Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/VebEgF7Al_L15kdICmuoDM02QY0.roa
File: VebEgF7Al_L15kdICmuoDM02QY0.roa (raw, json)
Hash identifier: IEEfRdGSs+t9MRM22afoVKZfVhWYxqSRoRyL23QUVdE=
Subject key identifier: 55:E6:C4:80:5E:C0:97:F2:F5:E6:47:48:0A:6B:A8:0C:CD:36:41:8D
Certificate issuer: /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Certificate serial: 0192111BD1E735368A4A6454463410DEBF48
Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/VebEgF7Al_L15kdICmuoDM02QY0.roa
Signing time: Fri 20 Sep 2024 20:24:48 +0000
ROA not before: Fri 20 Sep 2024 20:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39347
IP address blocks: 89.33.88.0/21 maxlen: 21
89.33.89.0/24 maxlen: 24
89.33.90.0/23 maxlen: 23
89.33.94.0/23 maxlen: 23
89.35.57.0/24 maxlen: 24
89.42.31.0/24 maxlen: 24
93.119.176.0/21 maxlen: 21
93.119.176.0/23 maxlen: 23
93.119.176.0/24 maxlen: 24
93.119.177.0/24 maxlen: 24
93.119.182.0/23 maxlen: 23
185.122.220.0/22 maxlen: 22
185.122.220.0/24 maxlen: 24
185.122.221.0/24 maxlen: 24
185.122.222.0/24 maxlen: 24
185.122.223.0/24 maxlen: 24
2a06:a880::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Sep 2024 10:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:11:1b:d1:e7:35:36:8a:4a:64:54:46:34:10:de:bf:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Validity
Not Before: Sep 20 20:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55e6c4805ec097f2f5e647480a6ba80ccd36418d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a9:20:bb:da:2b:f1:98:34:4a:d5:45:2f:d0:
30:c6:3b:fc:2e:7d:ae:49:80:66:df:99:5a:d0:22:
4d:4a:bb:16:bb:c1:fd:60:00:09:28:ac:a1:ec:63:
e6:65:ad:e3:3b:42:a9:68:41:74:43:82:7b:20:33:
76:1c:8d:df:b4:34:fc:81:56:89:3a:9a:9f:31:bd:
2d:58:d2:14:ce:f6:6c:fe:a3:01:41:30:77:07:b9:
d8:03:3b:e6:7a:3f:2d:30:08:27:36:89:60:4a:51:
74:89:d4:db:94:6b:16:6c:3a:bc:66:a4:00:83:d9:
a1:1e:74:79:77:e4:5b:82:77:28:88:58:7b:ea:2d:
3b:6d:2c:f7:ea:cc:fd:68:bf:e3:c5:58:c8:0f:4d:
16:62:ae:12:b2:bc:86:ae:df:bd:09:94:bf:0d:4b:
b1:f1:0c:aa:41:d6:6b:0d:aa:b7:73:e8:c8:15:a7:
7b:b1:05:a1:fc:e9:25:6f:c7:12:0a:79:31:fb:20:
96:76:a3:73:24:a7:b2:77:ec:cb:51:37:8c:63:31:
a2:9c:e5:08:f6:11:72:5e:09:83:fd:fa:8a:9b:fc:
bd:12:95:81:ed:e6:61:cf:a9:30:c6:4e:6c:a6:ba:
0f:25:17:4d:8d:17:1e:a7:ec:f8:ca:1f:6b:be:1a:
2b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E6:C4:80:5E:C0:97:F2:F5:E6:47:48:0A:6B:A8:0C:CD:36:41:8D
X509v3 Authority Key Identifier:
keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/VebEgF7Al_L15kdICmuoDM02QY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.88.0/21
89.35.57.0/24
89.42.31.0/24
93.119.176.0/21
185.122.220.0/22
IPv6:
2a06:a880::/48
Signature Algorithm: sha256WithRSAEncryption
83:3c:c6:7a:54:56:19:ee:b1:24:48:d8:c7:63:76:d9:e6:1c:
08:75:fb:d0:7e:b5:e1:15:a3:a0:38:02:68:73:b1:e6:f6:25:
c5:74:54:10:55:22:b1:cd:ba:7d:0d:ed:7a:6e:c3:13:5a:b3:
fe:97:36:dc:67:77:f7:8b:c7:fd:b3:45:1c:9a:1e:74:1e:14:
a0:4c:f0:28:d2:1d:ef:fb:50:41:ac:97:b3:de:19:1f:ac:14:
61:bc:e7:af:c3:5a:c1:b3:ef:44:0c:52:54:4f:6b:42:58:47:
b1:9a:fe:d7:56:c0:00:89:11:37:0b:f6:fd:0a:57:1c:c9:22:
90:68:0e:9b:23:fe:51:45:33:b7:1d:07:11:d5:74:11:65:05:
1a:eb:e7:2d:a5:34:f4:cd:32:31:ad:be:96:f8:c8:c7:c5:3a:
3a:b0:8b:d8:d2:e3:b4:37:3b:a7:04:e5:50:8e:aa:8a:fb:75:
fb:1c:f7:57:29:b4:bb:67:87:c2:34:77:63:2b:05:93:9b:1a:
e6:5a:9b:25:5f:61:f3:fc:c7:3d:d3:6e:60:27:6f:e7:b4:98:
7c:c4:b7:f0:04:4b:d8:c8:d1:5b:c6:70:00:76:38:39:a6:d2:
d4:af:11:de:0c:ac:a1:21:c7:50:35:41:3a:90:9d:0a:38:40:
40:6f:18:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:43 2025 by rpki-client