Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/VW35rBbdbQ2RxmJapJvYbEHMYRQ.roa
File: VW35rBbdbQ2RxmJapJvYbEHMYRQ.roa (raw, json)
Hash identifier: fVzePr3Anp7AXMahYHCYb6uGcdbMcCWa+lTYL24/g70=
Subject key identifier: 55:6D:F9:AC:16:DD:6D:0D:91:C6:62:5A:A4:9B:D8:6C:41:CC:61:14
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018F8133C4872C3D42216AAFB32694391C10
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/VW35rBbdbQ2RxmJapJvYbEHMYRQ.roa
Signing time: Thu 16 May 2024 11:40:04 +0000
ROA not before: Thu 16 May 2024 11:40:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42864
IP address blocks: 45.9.169.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.171.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.11.0/24 maxlen: 24
45.88.93.0/24 maxlen: 24
77.242.144.0/22 maxlen: 24
77.242.148.0/24 maxlen: 24
77.242.151.0/24 maxlen: 24
88.209.193.0/24 maxlen: 24
88.209.196.0/24 maxlen: 24
88.209.208.0/24 maxlen: 24
88.209.210.0/24 maxlen: 24
88.209.212.0/24 maxlen: 24
88.209.213.0/24 maxlen: 24
88.209.214.0/24 maxlen: 24
88.209.215.0/24 maxlen: 24
88.209.246.0/24 maxlen: 24
88.209.247.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
92.52.209.0/24 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.212.0/22 maxlen: 24
92.52.215.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
178.248.200.0/21 maxlen: 21
193.138.125.0/24 maxlen: 24
2a00:1f40::/29 maxlen: 29
2a05:f5c0::/29 maxlen: 29
2a05:f5c0::/32 maxlen: 32
2a0c:f1c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jul 2024 12:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:81:33:c4:87:2c:3d:42:21:6a:af:b3:26:94:39:1c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 16 11:40:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=556df9ac16dd6d0d91c6625aa49bd86c41cc6114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:65:f3:91:d4:29:73:0e:81:67:a6:2e:eb:
46:4d:b3:6b:49:8e:45:c0:17:8c:03:41:ad:85:bf:
7f:d4:b7:f2:d4:91:4c:12:5b:45:c5:fb:3b:2e:45:
f5:bf:cb:65:f7:0f:14:5a:f8:0d:01:f2:7d:bb:79:
37:65:58:c8:d9:31:f3:f0:a6:12:33:5a:5d:6f:d0:
66:0a:70:1f:cd:6e:b7:f9:86:ea:49:c4:03:d2:1b:
c1:d9:dd:45:66:39:e3:8c:24:2f:f7:ca:32:64:17:
dc:07:56:57:bc:dd:af:e4:1f:14:48:da:10:05:83:
67:89:7d:e7:54:ba:13:ed:55:a1:97:0b:82:df:ac:
55:66:4d:26:f8:b5:c8:4a:3d:96:72:78:17:7b:6a:
a4:9a:05:64:5a:3b:5f:2a:94:34:79:72:7d:6a:e1:
3f:07:38:80:98:20:34:b9:0a:65:2e:79:44:b3:28:
c9:95:2c:c1:17:0d:ad:34:fb:58:2b:38:55:2b:b5:
68:b6:4e:c5:15:5f:d7:1f:62:66:b2:6a:c4:3f:d4:
65:04:03:c8:b0:02:49:76:78:55:5d:a1:bf:3c:1c:
5b:38:f3:59:c3:95:22:3e:02:b7:20:03:b5:1a:50:
c7:d9:e1:72:10:43:8a:42:6f:9d:5a:5a:dc:9b:2c:
b1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6D:F9:AC:16:DD:6D:0D:91:C6:62:5A:A4:9B:D8:6C:41:CC:61:14
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/VW35rBbdbQ2RxmJapJvYbEHMYRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.10.0/23
45.88.93.0/24
77.242.144.0-77.242.148.255
77.242.151.0/24
88.209.193.0/24
88.209.196.0/24
88.209.208.0/24
88.209.210.0/24
88.209.212.0/22
88.209.246.0/23
92.52.208.0/21
92.52.219.0/24
178.248.200.0/21
193.138.125.0/24
IPv6:
2a00:1f40::/29
2a05:f5c0::/29
2a0c:f1c0::/29
Signature Algorithm: sha256WithRSAEncryption
6a:de:23:0e:11:69:b4:3e:45:77:7f:d0:a7:ba:1e:50:4a:5d:
44:56:b5:55:46:b4:f1:46:40:72:8b:b4:87:0f:60:bc:ac:08:
b5:3c:50:71:80:54:67:6a:65:60:54:ca:ff:f2:d0:2e:47:df:
a2:d2:d4:8a:37:cc:17:e1:a2:e6:17:ae:0d:c7:ce:4b:fe:ea:
6f:0d:cf:75:6e:2a:7e:20:6c:c6:33:96:10:db:c2:26:62:f1:
b8:93:cb:c8:54:04:2c:b0:29:b1:95:2c:72:e2:63:74:81:4b:
1c:28:5f:59:89:da:b0:c6:c7:b4:3a:53:02:6b:3f:06:80:58:
a1:be:5c:6e:b4:66:eb:53:61:86:ab:ff:80:b4:6b:87:70:ef:
f6:db:99:79:74:97:3a:b9:87:17:ad:8b:30:9d:12:34:6f:3d:
56:d7:d6:b7:54:01:3b:3a:92:fe:dd:84:01:2b:16:40:d3:da:
2a:ba:f9:85:0c:b2:0a:af:b5:5f:ff:77:9e:38:cd:3d:91:6e:
d5:6f:cc:46:7e:65:76:13:ab:35:d3:d6:98:aa:69:28:46:49:
78:81:7a:79:9b:65:8e:7e:df:5e:f7:fd:97:4f:ca:b6:1e:e7:
55:0b:d0:17:87:06:9a:a4:cd:b6:b1:04:bd:42:55:55:90:85:
05:fb:a8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 14:30:22 2024 by rpki-client on console-fra.rpki-client.org