Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/VPPPblsWUiNHJvrN5zTS6QdsQIk.roa
File: VPPPblsWUiNHJvrN5zTS6QdsQIk.roa (raw, json)
Hash identifier: 35fzFntEUemSRXTqnR1SkrxINoKVSLjeFLrA0JpOvqs=
Subject key identifier: 54:F3:CF:6E:5B:16:52:23:47:26:FA:CD:E7:34:D2:E9:07:6C:40:89
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0193E9A059D99D725EC1DD36D98B0E544824
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/VPPPblsWUiNHJvrN5zTS6QdsQIk.roa
Signing time: Sat 21 Dec 2024 14:30:20 +0000
ROA not before: Sat 21 Dec 2024 14:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.12.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
91.228.14.0/24 maxlen: 24
91.228.15.0/24 maxlen: 24
94.154.32.0/24 maxlen: 24
94.154.35.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e9:a0:59:d9:9d:72:5e:c1:dd:36:d9:8b:0e:54:48:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Dec 21 14:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54f3cf6e5b1652234726facde734d2e9076c4089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:03:1d:aa:d3:94:c4:40:98:3a:92:0a:fc:36:
87:9b:de:58:b6:94:fb:55:f0:0a:99:cf:c5:37:08:
a0:c9:ef:60:03:b6:59:01:cd:57:2c:fe:91:8c:67:
ac:31:fc:19:32:ca:d8:15:e9:84:28:ff:33:0f:e9:
b1:34:2d:05:c3:eb:d9:4d:8e:82:ff:b7:2e:d7:07:
05:ea:8a:72:7c:8c:78:bd:81:98:1b:d6:f4:80:45:
97:d1:16:5f:03:fb:15:e2:5f:eb:dc:b2:ad:14:50:
af:bc:fd:57:f5:23:23:59:f5:76:fa:8a:90:38:2e:
97:77:96:34:9d:37:57:bd:a7:b1:78:7d:7e:0a:da:
12:2d:a8:63:c1:e7:8d:46:14:46:11:9b:89:5a:06:
72:ba:07:14:2b:21:58:cd:98:99:13:09:e3:47:2c:
18:3d:5b:2c:18:a1:cc:9b:b0:55:82:2e:fd:a6:db:
38:14:b1:40:c6:f1:4f:4a:d7:7c:18:a5:22:c1:18:
45:2a:61:0e:ca:4a:eb:9f:69:b5:68:30:8d:e7:21:
85:06:70:64:77:77:a2:ac:66:6b:7d:79:31:64:91:
12:21:0c:39:b9:c7:b8:4d:5c:33:87:24:e0:fa:e6:
2a:0e:e2:77:8b:38:62:01:0d:50:00:7a:3e:d2:70:
04:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F3:CF:6E:5B:16:52:23:47:26:FA:CD:E7:34:D2:E9:07:6C:40:89
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/VPPPblsWUiNHJvrN5zTS6QdsQIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/22
94.154.32.0/24
94.154.35.0-94.154.38.255
Signature Algorithm: sha256WithRSAEncryption
72:80:4a:7d:72:1d:57:21:c1:f3:f5:ba:fc:08:58:df:ef:14:
cb:85:f0:5d:f5:42:6c:5b:cc:1d:c4:d0:0d:e9:01:e3:5a:fa:
7d:f9:81:ba:ea:6f:22:ca:02:37:b1:d0:02:81:f0:c1:22:e3:
db:7b:d6:01:39:3e:0f:79:cd:25:5a:9e:a8:18:a3:75:ec:79:
bd:9f:b1:35:88:a7:cf:23:3b:eb:84:a4:be:55:29:e4:c7:df:
34:ab:2d:b9:4a:28:a1:8e:9d:af:7b:96:e8:60:a1:6a:45:e6:
2d:be:54:71:07:2e:e4:0a:87:cf:c5:86:b1:03:ca:fa:ca:95:
7a:81:85:0b:1e:6d:2f:77:a1:9a:32:ec:b1:e2:9d:7f:99:9d:
a3:8a:0f:7b:1d:76:6c:df:0a:94:6b:2b:7b:c1:dd:41:63:f1:
01:b2:03:85:b7:bb:32:9f:de:19:ce:ba:77:30:d1:17:54:dd:
21:7f:8f:3d:28:da:ca:0f:ee:18:c8:73:7c:f5:6b:38:fb:60:
e4:15:d3:5f:38:f3:4b:3b:34:91:24:76:f4:d3:c3:c9:5b:9a:
20:38:51:c6:09:92:ad:d9:16:e0:43:f2:0e:c1:82:bf:45:0d:
d7:72:af:8a:ac:57:40:43:bf:2c:f1:f7:e3:7a:3b:e6:0a:9b:
e4:b3:28:80
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZPpoFnZnXJewd022YsOVEgkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjQxMjIxMTQzMDIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGYzY2Y2ZTViMTY1MjIzNDcyNmZhY2RlNzM0ZDJlOTA3NmM0MDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgMdqtOUxECYOpIK/DaHm95YtpT7
VfAKmc/FNwigye9gA7ZZAc1XLP6RjGesMfwZMsrYFemEKP8zD+mxNC0Fw+vZTY6C
/7cu1wcF6opyfIx4vYGYG9b0gEWX0RZfA/sV4l/r3LKtFFCvvP1X9SMjWfV2+oqQ
OC6Xd5Y0nTdXvaexeH1+CtoSLahjweeNRhRGEZuJWgZyugcUKyFYzZiZEwnjRywY
PVssGKHMm7BVgi79pts4FLFAxvFPStd8GKUiwRhFKmEOykrrn2m1aDCN5yGFBnBk
d3eirGZrfXkxZJESIQw5uce4TVwzhyTg+uYqDuJ3izhiAQ1QAHo+0nAEzQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFFTzz25bFlIjRyb6zec00ukHbECJMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvVlBQUGJsc1dVaU5ISnZyTjV6VFM2UWRzUUlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCW+QMAwQA
XpogMAwDBABemiMDBABemiYwDQYJKoZIhvcNAQELBQADggEBAHKASn1yHVchwfP1
uvwIWN/vFMuF8F31QmxbzB3E0A3pAeNa+n35gbrqbyLKAjex0AKB8MEi49t71gE5
Pg95zSVanqgYo3Xseb2fsTWIp88jO+uEpL5VKeTH3zSrLblKKKGOna97luhgoWpF
5i2+VHEHLuQKh8/FhrEDyvrKlXqBhQsebS93oZoy7LHinX+ZnaOKD3sddmzfCpRr
K3vB3UFj8QGyA4W3uzKf3hnOuncw0RdU3SF/jz0o2soP7hjIc3z1azj7YOQV0184
80s7NJEkdvTTw8lbmiA4UcYJkq3ZFuBD8g7Bgr9FDddyr4qsV0BDvyzx9+N6O+YK
m+SzKIA=
-----END CERTIFICATE-----
Generated at Tue May 13 13:18:31 2025 by rpki-client