Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/VMwCRdbeON-SB74-nx80iJySfVs.roa
File: VMwCRdbeON-SB74-nx80iJySfVs.roa (raw, json)
Hash identifier: sxVlL9jXXcniwZ9LABZ12aC3OnF6elJLkbZ7OupekH8=
Subject key identifier: 54:CC:02:45:D6:DE:38:DF:92:07:BE:3E:9F:1F:34:88:9C:92:7D:5B
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 0193250D511166665D18ED1CABAEEBAD71EA
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/VMwCRdbeON-SB74-nx80iJySfVs.roa
Signing time: Wed 13 Nov 2024 10:24:09 +0000
ROA not before: Wed 13 Nov 2024 10:24:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29555
IP address blocks: 85.117.96.0/24 maxlen: 24
85.117.97.0/24 maxlen: 24
85.117.98.0/24 maxlen: 24
85.117.99.0/24 maxlen: 24
85.117.100.0/24 maxlen: 24
85.117.101.0/24 maxlen: 24
85.117.102.0/24 maxlen: 24
85.117.103.0/24 maxlen: 24
85.117.104.0/24 maxlen: 24
85.117.105.0/24 maxlen: 24
85.117.106.0/24 maxlen: 24
85.117.107.0/24 maxlen: 24
85.117.108.0/24 maxlen: 24
85.117.109.0/24 maxlen: 24
85.117.110.0/24 maxlen: 24
85.117.111.0/24 maxlen: 24
85.117.112.0/24 maxlen: 24
85.117.113.0/24 maxlen: 24
85.117.114.0/24 maxlen: 24
85.117.115.0/24 maxlen: 24
85.117.116.0/24 maxlen: 24
85.117.117.0/24 maxlen: 24
85.117.118.0/24 maxlen: 24
85.117.119.0/24 maxlen: 24
85.117.120.0/24 maxlen: 24
85.117.121.0/24 maxlen: 24
85.117.122.0/24 maxlen: 24
85.117.123.0/24 maxlen: 24
85.117.124.0/24 maxlen: 24
85.117.125.0/24 maxlen: 24
85.117.126.0/24 maxlen: 24
85.117.127.0/24 maxlen: 24
185.57.72.0/24 maxlen: 24
185.57.73.0/24 maxlen: 24
185.57.74.0/24 maxlen: 24
185.57.75.0/24 maxlen: 24
217.76.64.0/24 maxlen: 24
217.76.65.0/24 maxlen: 24
217.76.68.0/24 maxlen: 24
217.76.71.0/24 maxlen: 24
217.76.72.0/24 maxlen: 24
217.76.74.0/24 maxlen: 24
217.76.75.0/24 maxlen: 24
217.76.76.0/24 maxlen: 24
217.76.77.0/24 maxlen: 24
217.76.78.0/24 maxlen: 24
217.76.79.0/24 maxlen: 24
2a03:32c0:a::/48 maxlen: 48
2a03:32c0:b::/48 maxlen: 48
2a03:32c0:c::/48 maxlen: 48
2a03:32c0:d::/48 maxlen: 48
2a03:32c0:16::/48 maxlen: 48
2a03:32c0:17::/48 maxlen: 48
2a03:32c0:18::/48 maxlen: 48
2a03:32c0:27::/48 maxlen: 48
2a03:32c0:28::/48 maxlen: 48
2a03:32c0:29::/48 maxlen: 48
2a03:32c0:2a::/48 maxlen: 48
2a03:32c0:2b::/48 maxlen: 48
2a03:32c0:2c::/48 maxlen: 48
2a03:32c0:2d::/48 maxlen: 48
2a03:32c0:2e::/48 maxlen: 48
2a03:32c0:2f::/48 maxlen: 48
2a03:32c0:300a::/48 maxlen: 48
2a03:32c0:300b::/48 maxlen: 48
2a03:32c0:300e::/48 maxlen: 48
2a03:32c0:300f::/48 maxlen: 48
2a03:32c0:3010::/48 maxlen: 48
2a03:32c0:3011::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 13 Nov 2024 12:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:25:0d:51:11:66:66:5d:18:ed:1c:ab:ae:eb:ad:71:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Nov 13 10:24:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54cc0245d6de38df9207be3e9f1f34889c927d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b1:b8:bb:b1:23:9b:ee:99:83:58:a1:e3:43:
cb:e0:be:d0:33:d8:b8:72:19:44:b5:c8:d4:4a:cd:
68:a4:ae:b2:62:1b:eb:1e:5d:27:9c:1a:18:1d:40:
36:a1:68:72:31:64:27:85:11:7a:5a:3c:eb:28:ba:
06:84:e6:a4:10:a1:d5:fa:e4:51:de:62:3d:18:d0:
a8:67:6d:5c:56:7c:0d:bd:34:48:9b:9c:3e:13:91:
80:96:a1:82:40:3d:78:92:3c:56:80:83:b9:95:df:
e4:bc:35:0a:0e:b6:47:f9:bd:7f:24:34:b6:ee:df:
0c:df:61:ed:ac:18:f6:64:ed:79:50:57:a3:ad:b6:
f1:0a:93:83:5f:1e:9d:62:40:92:d6:14:89:ce:d1:
52:51:78:c0:8d:85:2f:c4:72:94:7f:4e:49:d3:49:
f1:a5:33:07:45:9b:70:58:b4:7b:ea:69:d8:fc:e3:
d2:66:78:22:74:3e:46:02:6b:d7:7e:b2:4a:64:be:
24:25:d1:db:e8:7b:11:ff:e6:b4:32:0f:ea:d4:0e:
93:e5:8c:cf:fd:f1:8c:d7:f7:d6:59:86:bd:98:95:
cc:34:1f:89:98:bc:b9:20:b7:e1:4b:be:d9:50:cc:
3f:50:3b:95:54:8a:2a:1f:2c:fa:26:3a:37:21:3f:
23:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CC:02:45:D6:DE:38:DF:92:07:BE:3E:9F:1F:34:88:9C:92:7D:5B
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/VMwCRdbeON-SB74-nx80iJySfVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.96.0/19
185.57.72.0/22
217.76.64.0/23
217.76.68.0/24
217.76.71.0-217.76.72.255
217.76.74.0-217.76.79.255
IPv6:
2a03:32c0:a::-2a03:32c0:d:ffff:ffff:ffff:ffff:ffff
2a03:32c0:16::-2a03:32c0:18:ffff:ffff:ffff:ffff:ffff
2a03:32c0:27::-2a03:32c0:2f:ffff:ffff:ffff:ffff:ffff
2a03:32c0:300a::/47
2a03:32c0:300e::-2a03:32c0:3011:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c2:3b:67:57:46:27:a1:91:89:f2:94:02:ea:54:60:46:ad:7a:
4f:9e:47:9a:1b:7f:18:19:b2:16:47:5a:78:6a:e2:aa:86:53:
d6:35:c1:9f:e5:99:d7:a1:8d:85:b8:22:07:71:30:ae:3d:e8:
0b:00:49:df:15:47:51:97:3f:88:d4:29:d7:2e:d4:e2:03:75:
95:73:35:e6:0a:e6:13:f8:8a:31:a7:ea:60:58:1b:63:90:58:
ef:23:22:04:91:94:81:01:e0:6e:fa:45:0d:8d:15:bb:6b:2b:
f8:6e:52:d1:08:0b:e8:d8:0a:d7:b1:03:36:99:a6:91:ac:63:
1b:aa:ef:ed:98:35:98:de:be:67:fd:fb:c1:ea:c3:6f:b0:ee:
a3:bd:00:8d:1e:b8:fe:b6:3c:f2:04:b2:3d:60:b1:f2:d2:ab:
7e:05:0f:f8:c5:f9:1b:0b:92:8e:7b:bf:67:c8:ef:e2:17:bb:
d1:74:b0:e7:26:42:e9:96:99:20:8d:72:5e:a7:fd:6a:18:6f:
1d:cc:a4:26:f8:c5:ae:b7:09:c5:fb:8e:02:a3:8a:08:7b:b4:
03:8c:d2:9b:12:c2:d3:5b:7b:43:5c:5c:48:7a:7b:22:9a:b2:
5e:e0:83:38:9f:91:6d:00:8c:85:bc:6f:f1:0d:86:a1:97:7b:
15:b2:c2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 14:36:38 2024 by rpki-client on console-fra.rpki-client.org