Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/VVot-8hgDFC9iLctdmbaqQnUu0M.roa
File: VVot-8hgDFC9iLctdmbaqQnUu0M.roa (raw, json)
Hash identifier: edSsqJZILd4iVGUeT7nAvsnRHezxQlMfCIuKcr2KSnM=
Subject key identifier: 55:5A:2D:FB:C8:60:0C:50:BD:88:B7:2D:76:66:DA:A9:09:D4:BB:43
Certificate issuer: /CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Certificate serial: 0191458AB8899655145E1B6EA915ABEDA98F
Authority key identifier: 32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/VVot-8hgDFC9iLctdmbaqQnUu0M.roa
Signing time: Mon 12 Aug 2024 07:43:24 +0000
ROA not before: Mon 12 Aug 2024 07:43:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39863
IP address blocks: 81.89.208.0/22 maxlen: 22
81.89.208.0/24 maxlen: 24
81.89.209.0/24 maxlen: 24
81.89.210.0/24 maxlen: 24
81.89.211.0/24 maxlen: 24
81.89.212.0/22 maxlen: 22
81.89.212.0/24 maxlen: 24
81.89.213.0/24 maxlen: 24
81.89.214.0/24 maxlen: 24
81.89.215.0/24 maxlen: 24
81.89.216.0/22 maxlen: 22
81.89.217.0/24 maxlen: 24
81.89.218.0/24 maxlen: 24
81.89.219.0/24 maxlen: 24
81.89.220.0/22 maxlen: 22
81.89.220.0/24 maxlen: 24
81.89.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:45:8a:b8:89:96:55:14:5e:1b:6e:a9:15:ab:ed:a9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Validity
Not Before: Aug 12 07:43:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=555a2dfbc8600c50bd88b72d7666daa909d4bb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:32:83:66:04:d0:c8:0d:18:0d:d0:dd:fa:1c:
59:7a:5b:55:59:f1:fc:e3:fa:35:1c:eb:53:42:67:
81:88:ef:30:32:d2:57:10:79:e3:70:61:8d:c1:83:
e7:f8:4d:7b:e2:42:a2:af:63:a7:d1:d2:2e:8d:7d:
f6:eb:52:b8:a4:ac:94:85:5a:9c:e1:9d:36:65:64:
ab:9a:db:60:02:0c:5b:f1:d8:d0:ec:76:5c:78:1a:
ba:7a:3a:0e:3e:de:12:3a:36:2d:40:df:66:fd:57:
4f:49:3c:4b:d9:41:76:50:81:15:16:00:68:97:6b:
9a:9f:9b:98:aa:1d:79:7e:82:40:14:28:84:24:f4:
e5:6f:7f:fc:2c:ca:fe:bb:cf:ea:98:cd:ac:65:94:
eb:82:4a:63:7a:3a:2e:8e:e6:6c:1d:10:b7:e8:54:
b1:ae:ee:a1:d0:ac:f2:56:01:af:fd:cf:a6:08:bc:
0c:6c:17:3d:b2:e9:39:8b:cf:6c:d4:97:05:4d:29:
11:db:67:14:c3:cd:57:44:d9:4b:98:da:78:35:5f:
1a:52:2c:a7:9d:8f:98:b6:46:20:a0:1f:20:75:be:
74:96:48:9e:c8:96:54:d1:74:61:d1:23:de:76:fa:
8d:0d:7f:09:1d:3e:13:1b:a6:17:a6:06:23:8a:52:
54:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5A:2D:FB:C8:60:0C:50:BD:88:B7:2D:76:66:DA:A9:09:D4:BB:43
X509v3 Authority Key Identifier:
keyid:32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/VVot-8hgDFC9iLctdmbaqQnUu0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.89.208.0/20
Signature Algorithm: sha256WithRSAEncryption
87:f2:c3:8c:9a:ae:d3:46:6d:b3:30:86:f1:43:8d:4b:b4:e1:
ae:1b:c4:68:64:63:e8:e0:cf:a5:f1:10:7f:b5:65:d7:a9:0b:
29:0c:1d:ea:93:cb:20:7e:b9:71:95:57:39:b5:91:ca:2a:83:
2f:ed:5b:08:ea:33:5e:68:c4:5e:9c:bb:f3:48:94:de:4a:6c:
aa:e2:1f:db:16:cc:32:70:1e:53:a1:38:cb:c8:93:ac:10:b3:
8e:a5:8f:8d:f5:c3:a4:72:3b:d1:48:f4:38:bf:81:2a:6c:f5:
34:a6:90:62:16:86:17:31:8e:16:9e:a9:5c:22:d0:b7:69:88:
37:6f:cf:06:fa:45:af:c9:e3:bb:22:23:85:40:fd:34:82:58:
7c:fa:48:f0:b7:17:e9:78:12:c8:c6:a7:57:9f:af:20:e1:e5:
03:58:14:bb:a7:44:e9:2c:79:76:f3:59:83:38:b4:6e:c8:a6:
e5:67:9a:cf:d1:68:c8:57:30:2d:47:39:e6:c0:0e:df:9a:0d:
08:75:76:0c:08:3b:1e:0a:e1:29:dc:fb:34:f3:59:2e:ab:c6:
05:90:e1:ec:b9:26:d9:3c:05:c7:d7:87:d6:8d:40:77:a1:f5:
4a:49:80:c9:6a:2a:cd:38:83:c4:8e:a3:7a:2e:51:87:84:64:
e0:98:5d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:44:51 2025 by rpki-client