Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/VamV4hI5xCBlV2xSYa7_POYBnb4.roa
File: VamV4hI5xCBlV2xSYa7_POYBnb4.roa (raw, json)
Hash identifier: YaCSwlJmWCXb7YOcOiTHnL+H3Owxs9runAZgoraRxtM=
Subject key identifier: 55:A9:95:E2:12:39:C4:20:65:57:6C:52:61:AE:FF:3C:E6:01:9D:BE
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 019643F150DA7AA0EC1C4349A43AC78538B9
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/VamV4hI5xCBlV2xSYa7_POYBnb4.roa
Signing time: Thu 17 Apr 2025 13:30:10 +0000
ROA not before: Thu 17 Apr 2025 13:30:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.59.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.104.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.208.0/23 maxlen: 23
84.32.214.0/23 maxlen: 24
84.32.223.0/24 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/23 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.34.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.66.0/23 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.127.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Apr 2025 05:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:f1:50:da:7a:a0:ec:1c:43:49:a4:3a:c7:85:38:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Apr 17 13:30:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55a995e21239c42065576c5261aeff3ce6019dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:85:94:3a:88:ec:ca:5e:77:d6:63:19:40:84:
40:c2:d4:32:7d:1c:1e:12:6b:5e:dd:19:ae:30:ca:
fd:98:e1:42:2e:eb:56:0e:01:8b:08:a9:2a:45:c8:
ab:7b:a5:52:e2:9f:02:45:37:9a:8a:19:0b:10:67:
e4:fa:a7:bb:90:c4:a6:5f:56:19:2b:a1:d6:54:0e:
ce:d5:e8:e4:36:d6:4d:60:8b:ca:ce:ac:75:eb:a5:
16:86:fa:25:be:d5:f5:4f:84:2f:3c:07:94:d4:cc:
dd:e4:33:71:be:e8:1a:e8:80:2a:dc:2f:53:22:fa:
c0:96:89:06:ed:93:00:8f:41:86:bc:be:18:47:b2:
0d:34:57:b5:7d:fb:95:5c:8a:ff:b6:b0:7b:f6:f9:
a0:6c:b7:48:2a:22:43:ac:20:08:b2:87:f8:2b:98:
fd:00:f2:d4:9e:e5:f8:cd:a6:09:ee:0f:1d:73:d4:
96:27:a1:c5:08:3f:dd:c8:3e:16:44:7b:04:c5:6b:
2a:d5:fd:92:71:8e:c3:bd:08:31:ea:7d:c3:22:91:
aa:45:b5:26:00:e5:23:ca:58:52:be:e7:b2:c6:13:
ef:53:11:e7:89:a0:09:b2:d7:58:ec:30:13:b6:44:
38:4d:0c:aa:1b:66:b3:70:97:4a:5c:25:63:1f:79:
2c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A9:95:E2:12:39:C4:20:65:57:6C:52:61:AE:FF:3C:E6:01:9D:BE
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/VamV4hI5xCBlV2xSYa7_POYBnb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0-84.32.8.255
84.32.20.0/22
84.32.46.0/23
84.32.59.0/24
84.32.64.0/24
84.32.104.0/24
84.32.148.0/22
84.32.174.0/23
84.32.208.0/23
84.32.214.0/23
84.32.223.0/24
84.32.244.0/22
88.216.22.0/23
88.216.34.0/24
88.216.44.0/23
88.216.66.0/23
88.216.93.0/24
88.216.127.0/24
88.216.130.0/23
88.216.134.0/23
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
21:98:4c:7a:9b:df:d2:59:b6:9c:63:54:bf:5d:39:39:7f:e1:
25:bb:1b:47:19:8e:c5:12:2f:a3:55:f2:4c:0b:39:e9:b7:0e:
8f:ef:52:a1:ac:99:53:ab:db:a2:8c:36:f8:a2:69:fc:da:70:
c5:77:45:f3:f3:e0:94:6b:9c:de:b2:b6:2f:1a:21:f7:a9:41:
57:20:fc:51:7c:1d:f0:d4:27:fd:5f:fb:e0:ce:35:1d:c2:6f:
ef:c4:29:9d:0c:6c:e0:40:92:2a:a0:55:e6:91:ed:30:d1:7b:
a6:11:86:74:f4:48:8f:ad:a3:08:a4:b1:64:7d:7a:eb:eb:41:
b0:f8:93:f7:c7:96:e3:f7:19:17:74:04:f7:5f:dd:8b:c8:31:
75:0f:0a:09:fd:23:97:ac:ab:c1:98:ad:22:89:97:9e:0b:6c:
b9:ea:8a:28:df:35:d7:b3:ab:58:20:58:9a:0e:18:55:57:bd:
55:89:93:08:18:b1:10:c9:7a:f6:96:ec:e6:87:c0:be:08:8b:
61:df:19:77:d3:4e:19:2d:e9:9a:68:a8:f8:ba:17:9e:54:21:
92:72:f2:9f:17:19:72:67:27:e4:c4:f4:c2:1f:f6:c3:c0:96:
15:df:63:da:a9:d6:f9:21:0f:bb:88:a2:9b:52:73:3a:94:0e:
04:6a:3c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:54:55 2025 by rpki-client