Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/VPcNriDzG3cgmnP-0Qg5fyhEcDg.roa
File: VPcNriDzG3cgmnP-0Qg5fyhEcDg.roa (raw, json)
Hash identifier: U+/iaKDRb1XoW9ttQLUyB6UNINeOF0Caf6C2pt0PaIE=
Subject key identifier: 54:F7:0D:AE:20:F3:1B:77:20:9A:73:FE:D1:08:39:7F:28:44:70:38
Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial: 01926C7DBC428E95A8006286286F66A2ADCE
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/VPcNriDzG3cgmnP-0Qg5fyhEcDg.roa
Signing time: Tue 08 Oct 2024 14:17:12 +0000
ROA not before: Tue 08 Oct 2024 14:17:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 5.44.42.0/24 maxlen: 24
45.129.185.0/24 maxlen: 24
2a05:541:102::/48 maxlen: 48
2a05:541:103::/48 maxlen: 48
2a05:541:104::/48 maxlen: 48
2a05:541:105::/48 maxlen: 48
2a05:541:106::/48 maxlen: 48
2a05:541:107::/48 maxlen: 48
2a05:541:108::/48 maxlen: 48
2a05:541:109::/48 maxlen: 48
2a05:541:110::/48 maxlen: 48
2a05:541:111::/48 maxlen: 48
2a05:541:112::/48 maxlen: 48
2a05:541:113::/48 maxlen: 48
2a05:541:114::/48 maxlen: 48
2a05:541:115::/48 maxlen: 48
2a05:541:116::/48 maxlen: 48
2a05:541:117::/48 maxlen: 48
2a05:541:118::/48 maxlen: 48
2a05:541:119::/48 maxlen: 48
2a05:541:121::/48 maxlen: 48
2a05:541:122::/48 maxlen: 48
2a05:541:123::/48 maxlen: 48
2a05:541:124::/48 maxlen: 48
2a05:541:125::/48 maxlen: 48
2a05:541:126::/48 maxlen: 48
2a05:541:127::/48 maxlen: 48
2a05:541:129::/48 maxlen: 48
2a05:541:131::/48 maxlen: 48
2a05:541:133::/48 maxlen: 48
2a05:541:134::/48 maxlen: 48
2a05:541:135::/48 maxlen: 48
2a05:541:136::/48 maxlen: 48
2a05:541:137::/48 maxlen: 48
2a05:541:138::/48 maxlen: 48
2a05:541:139::/48 maxlen: 48
2a05:541:141::/48 maxlen: 48
2a05:541:152::/48 maxlen: 48
2a05:541:153::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 13 Oct 2024 10:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:7d:bc:42:8e:95:a8:00:62:86:28:6f:66:a2:ad:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
Validity
Not Before: Oct 8 14:17:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54f70dae20f31b77209a73fed108397f28447038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e1:02:13:01:e9:38:d3:62:28:56:33:b7:c8:
17:9a:90:a1:fa:e2:54:ea:30:bf:69:2c:8a:d3:1a:
1b:f6:46:f1:04:ff:c0:ca:d1:9a:4e:7e:d2:37:88:
70:2a:86:26:f0:80:03:f9:f2:d0:49:62:ec:0c:a8:
a8:b7:8e:32:4a:d1:15:bf:6e:f8:13:c2:d8:68:f5:
41:59:e1:25:38:aa:e6:99:8e:1d:f5:51:03:24:8a:
90:08:e8:ee:2d:78:cd:76:7a:72:f1:cf:f2:e7:04:
b0:31:9d:c1:36:23:97:c2:8d:68:22:57:24:65:9c:
bc:b1:f6:b1:45:9c:4e:4b:fe:5f:d3:34:17:7a:45:
20:01:bc:8d:c6:57:e6:49:36:12:f8:e4:df:f3:55:
42:81:a5:2a:59:76:ee:74:34:e8:9b:e5:d0:82:82:
17:5f:8d:39:cc:80:45:c8:81:17:13:ff:91:99:6e:
01:91:42:0e:6e:4b:64:32:ad:f0:80:2b:2d:de:14:
61:b0:36:28:0f:12:df:e8:f4:71:b6:30:61:bf:ae:
ed:9b:75:5e:a5:28:9f:f0:9d:77:90:72:90:92:78:
37:ae:e8:e6:a7:74:a2:2a:11:ca:6a:31:3f:e9:19:
8e:12:b1:2f:2c:32:eb:ce:f6:0d:a3:b7:fb:92:54:
18:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F7:0D:AE:20:F3:1B:77:20:9A:73:FE:D1:08:39:7F:28:44:70:38
X509v3 Authority Key Identifier:
keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/VPcNriDzG3cgmnP-0Qg5fyhEcDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.42.0/24
45.129.185.0/24
IPv6:
2a05:541:102::-2a05:541:109:ffff:ffff:ffff:ffff:ffff
2a05:541:110::-2a05:541:119:ffff:ffff:ffff:ffff:ffff
2a05:541:121::-2a05:541:127:ffff:ffff:ffff:ffff:ffff
2a05:541:129::/48
2a05:541:131::/48
2a05:541:133::-2a05:541:139:ffff:ffff:ffff:ffff:ffff
2a05:541:141::/48
2a05:541:152::/47
Signature Algorithm: sha256WithRSAEncryption
60:f3:59:00:bd:61:39:95:67:ee:8e:c6:1d:2c:76:16:86:fc:
cc:64:52:e9:36:45:81:59:2f:41:3f:95:01:9b:72:ed:09:91:
46:13:80:5c:52:00:b7:e1:90:67:41:ab:10:36:26:0f:ac:e0:
2e:0a:bc:50:30:e5:47:b4:ab:6d:48:7e:f8:0f:c6:07:8f:72:
4a:58:88:73:a9:8e:f1:e3:a1:b5:b4:c4:3b:82:68:f1:5e:4b:
70:fd:5a:f2:11:5d:cf:97:69:12:79:c6:cb:33:20:e3:f6:47:
69:d3:83:13:1f:3f:9c:01:e1:9c:a6:85:82:4b:eb:d1:c8:f1:
f8:96:31:30:5f:01:2c:6d:f4:fe:1a:52:c5:e6:5b:77:9e:b5:
74:7c:d6:00:28:df:38:30:d4:99:a6:6f:6d:e0:8d:da:e8:22:
4c:4f:b5:a9:be:5b:7d:8c:6e:70:d2:42:ed:89:bf:3c:72:f7:
de:41:3b:a6:57:11:64:1d:6e:c3:b9:bf:96:51:ef:ea:d0:1d:
d5:bf:f8:71:33:f0:91:9d:2f:ff:10:07:03:ff:65:3d:48:82:
7a:d4:7e:5a:50:c6:ad:65:00:ad:64:8e:32:e2:b3:c2:df:f4:
de:8d:02:6d:94:5c:d0:6f:06:58:8f:ea:00:f1:ff:ee:d9:9f:
01:95:ae:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:06:56 2025 by rpki-client