Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/vC2oTt1lYLWmeKfj_OlfpD0qaLg.roa
File: vC2oTt1lYLWmeKfj_OlfpD0qaLg.roa (raw, json)
Hash identifier: 74xq2lM755aDPhj9juNTtmTMz+6jkQN+noZDt3ogrvo=
Subject key identifier: BC:2D:A8:4E:DD:65:60:B5:A6:78:A7:E3:FC:E9:5F:A4:3D:2A:68:B8
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 018F76EF9D28C47855A79D2FFBB636E4C875
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/vC2oTt1lYLWmeKfj_OlfpD0qaLg.roa
Signing time: Tue 14 May 2024 11:49:25 +0000
ROA not before: Tue 14 May 2024 11:49:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61173
IP address blocks: 5.182.44.0/24 maxlen: 24
5.182.45.0/24 maxlen: 24
5.182.46.0/24 maxlen: 24
5.182.47.0/24 maxlen: 24
45.159.112.0/24 maxlen: 24
45.159.113.0/24 maxlen: 24
45.159.114.0/24 maxlen: 24
45.159.115.0/24 maxlen: 24
62.3.42.0/24 maxlen: 24
85.208.252.0/24 maxlen: 24
85.208.253.0/24 maxlen: 24
85.208.254.0/24 maxlen: 24
85.208.255.0/24 maxlen: 24
185.4.28.0/24 maxlen: 24
185.4.29.0/24 maxlen: 24
185.4.30.0/24 maxlen: 24
185.4.31.0/24 maxlen: 24
185.50.37.0/24 maxlen: 24
185.50.38.0/24 maxlen: 24
185.50.39.0/24 maxlen: 24
185.116.160.0/24 maxlen: 24
185.116.161.0/24 maxlen: 24
185.116.162.0/24 maxlen: 24
185.116.163.0/24 maxlen: 24
185.213.164.0/24 maxlen: 24
185.213.165.0/24 maxlen: 24
185.213.166.0/24 maxlen: 24
185.213.167.0/24 maxlen: 24
185.255.88.0/24 maxlen: 24
185.255.89.0/24 maxlen: 24
185.255.90.0/24 maxlen: 24
185.255.91.0/24 maxlen: 24
193.141.64.0/24 maxlen: 24
193.141.65.0/24 maxlen: 24
193.141.126.0/24 maxlen: 24
193.141.127.0/24 maxlen: 24
2a05:ab80::/48 maxlen: 48
2a05:ab80:3::/48 maxlen: 48
2a05:ab80:4::/48 maxlen: 48
2a05:ab80:100::/48 maxlen: 48
2a05:ab80:200::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 30 Jun 2024 11:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:76:ef:9d:28:c4:78:55:a7:9d:2f:fb:b6:36:e4:c8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: May 14 11:49:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc2da84edd6560b5a678a7e3fce95fa43d2a68b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3b:22:eb:8d:a9:73:03:e2:1a:41:4b:de:23:
f1:83:ba:45:db:36:2a:12:61:30:c5:aa:bd:4d:5d:
67:cf:73:4d:c5:e8:d0:0e:b4:cb:f4:9b:d4:20:aa:
90:1a:0d:49:03:0a:7a:cf:c2:3a:97:32:45:7c:1f:
4e:fa:e2:66:98:58:b7:0d:e2:ee:c5:63:65:81:1c:
42:9d:67:54:a0:8a:5a:f6:92:d7:02:24:54:4a:2b:
08:e5:6b:fd:da:93:1c:cb:ab:03:b3:c5:ae:5c:c7:
29:9a:e0:bd:ea:b9:66:c9:0e:f8:e2:0e:d9:7a:b0:
d8:a6:33:9a:0d:5e:86:4a:6e:60:7b:e1:dc:7d:14:
51:bb:20:f3:28:2d:5b:3f:5a:e7:b6:90:64:7d:e1:
74:83:5c:50:2e:7c:4c:79:33:f8:44:36:46:e1:8e:
4d:0e:8d:87:52:bf:38:f9:9d:b5:5b:d4:f3:03:38:
3a:73:44:06:50:c1:c9:f3:1a:5c:a3:d9:b5:5d:f4:
b4:32:45:c7:3c:a4:1c:3e:53:0a:57:ce:9e:05:56:
ef:55:93:73:61:4a:46:f0:d0:64:da:b0:cf:ff:d9:
4f:fa:8c:91:db:a5:fb:48:db:ce:b9:c3:f6:8b:da:
55:21:ea:54:65:3a:4e:15:81:be:ff:36:62:d4:aa:
f9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2D:A8:4E:DD:65:60:B5:A6:78:A7:E3:FC:E9:5F:A4:3D:2A:68:B8
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/vC2oTt1lYLWmeKfj_OlfpD0qaLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.44.0/22
45.159.112.0/22
62.3.42.0/24
85.208.252.0/22
185.4.28.0/22
185.50.37.0-185.50.39.255
185.116.160.0/22
185.213.164.0/22
185.255.88.0/22
193.141.64.0/23
193.141.126.0/23
IPv6:
2a05:ab80::/48
2a05:ab80:3::-2a05:ab80:4:ffff:ffff:ffff:ffff:ffff
2a05:ab80:100::/48
2a05:ab80:200::/48
Signature Algorithm: sha256WithRSAEncryption
93:a3:f5:1d:92:25:26:6f:9d:97:19:7c:3e:4a:fb:4b:4e:26:
1e:5f:86:28:d4:89:0d:d2:66:33:ab:0e:d5:ef:38:b9:9b:45:
35:4b:5e:2c:d8:c4:54:08:42:ac:6e:8a:c6:f2:42:3f:ca:9e:
33:d3:92:6d:2c:9d:88:2a:69:9d:98:4d:be:72:8c:d8:6c:5e:
cc:f6:1d:22:2c:47:d0:97:71:f1:a6:e8:b6:bc:bd:f8:76:08:
dd:dc:90:55:b3:47:a0:77:5b:e3:0b:00:4d:48:fa:ef:0f:da:
cc:73:41:26:79:ed:b5:fa:30:7a:cd:44:48:6b:27:d0:63:6b:
6e:57:14:d7:35:60:b5:7c:83:20:cb:00:79:be:f7:17:3c:8f:
a1:e9:ba:87:75:cf:0b:dc:2b:52:5d:83:bb:eb:9b:87:1a:e8:
1d:0c:b0:d1:17:57:07:5b:e6:3c:d9:7c:41:1f:bd:c2:df:76:
25:44:20:cf:7b:78:6b:27:40:3f:ee:45:03:50:9d:b8:59:53:
59:ea:9e:99:89:a6:2e:3f:b4:aa:c9:d9:04:af:53:9a:a2:ef:
ce:fd:bc:32:37:b1:73:05:6a:67:79:d8:32:51:1c:28:df:b9:
86:46:ec:d6:ba:66:4e:39:ba:de:37:df:2c:47:9c:0c:1a:b2:
46:15:91:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:17:21 2025 by rpki-client