Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/1-QlRHsHu1vYH_tVIs3DAj_tdIhE.roa
File: 1-QlRHsHu1vYH_tVIs3DAj_tdIhE.roa (raw, json)
Hash identifier: 4V7YRCro+gx8iZxLkuDJIvOyh6/rhHnYNGKe726qcI8=
Subject key identifier: F9:09:51:1E:C1:EE:D6:F6:07:FE:D5:48:B3:70:C0:8F:FB:5D:22:11
Certificate issuer: /CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef
Certificate serial: 01967C7F777A9ABB5B07F18CB31A23222BE6
Authority key identifier: FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/1-QlRHsHu1vYH_tVIs3DAj_tdIhE.roa
Signing time: Mon 28 Apr 2025 13:04:10 +0000
ROA not before: Mon 28 Apr 2025 13:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43370
IP address blocks: 37.46.48.0/22 maxlen: 22
37.77.128.0/24 maxlen: 24
37.221.202.0/24 maxlen: 24
37.221.207.0/24 maxlen: 24
46.34.130.0/23 maxlen: 23
46.34.146.0/23 maxlen: 23
62.32.78.0/24 maxlen: 24
62.32.84.0/23 maxlen: 23
62.32.92.0/23 maxlen: 23
79.142.93.0/24 maxlen: 24
79.142.94.0/23 maxlen: 23
95.161.184.0/22 maxlen: 22
95.161.196.0/22 maxlen: 22
95.161.224.0/22 maxlen: 22
178.16.157.0/24 maxlen: 24
185.244.132.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 29 Apr 2025 07:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:7f:77:7a:9a:bb:5b:07:f1:8c:b3:1a:23:22:2b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef
Validity
Not Before: Apr 28 13:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f909511ec1eed6f607fed548b370c08ffb5d2211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:79:8a:43:3d:62:a7:41:ba:2b:9d:83:90:
80:2d:ee:b6:19:dc:70:f8:2c:1a:13:95:db:cf:74:
43:11:61:25:c7:d1:13:30:8d:23:0b:88:57:04:80:
6c:25:47:b7:c4:ce:73:05:e0:af:70:d5:77:19:04:
3d:f5:f4:eb:42:4f:56:b7:e1:a4:82:f1:5d:30:af:
dc:0f:5f:22:ca:7a:c4:7d:e1:90:fe:cc:06:4d:59:
bf:00:55:b0:4a:54:e1:16:75:c1:78:8f:f6:2a:ff:
10:48:a9:e5:c6:a1:98:bd:47:b0:db:81:b5:91:af:
48:ba:c4:56:83:d4:07:84:72:c1:ff:e7:b9:37:d3:
06:b6:1a:e9:ba:4c:c6:f0:cc:a1:37:08:e5:3f:98:
88:b6:cc:9b:72:a4:51:dc:1d:31:da:08:eb:39:1b:
f9:1f:fb:33:b9:6a:18:f3:0f:0f:fe:7d:dd:98:76:
1e:45:f3:b3:ab:25:8a:49:6b:0d:05:bb:e2:f5:b5:
79:67:1b:d3:c9:ed:33:22:f0:52:b9:ae:68:b6:74:
8a:fb:11:7a:4c:97:92:ec:21:4f:2f:5c:c8:8b:60:
55:87:f5:39:6c:6b:ca:bf:2a:d7:c6:4a:ef:06:20:
9b:1b:32:9d:d3:16:b7:fa:33:a7:86:a0:fb:ce:2d:
e2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:09:51:1E:C1:EE:D6:F6:07:FE:D5:48:B3:70:C0:8F:FB:5D:22:11
X509v3 Authority Key Identifier:
keyid:FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/1-QlRHsHu1vYH_tVIs3DAj_tdIhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.48.0/22
37.77.128.0/24
37.221.202.0/24
37.221.207.0/24
46.34.130.0/23
46.34.146.0/23
62.32.78.0/24
62.32.84.0/23
62.32.92.0/23
79.142.93.0-79.142.95.255
95.161.184.0/22
95.161.196.0/22
95.161.224.0/22
178.16.157.0/24
185.244.132.0/22
Signature Algorithm: sha256WithRSAEncryption
71:a8:a5:f8:46:e0:5c:86:1f:97:99:2c:63:3d:84:23:46:8a:
40:31:8c:ce:41:7d:84:c4:cc:50:d1:cc:a8:2a:39:6b:ca:70:
81:16:99:c8:e9:b1:ba:40:94:41:47:1f:da:ae:c9:85:f7:b8:
f8:50:06:dd:63:37:d3:37:3a:fc:7e:e4:3b:6a:24:1d:19:ed:
b4:15:f0:a9:7b:cf:ac:3d:02:af:06:51:4e:29:92:01:67:49:
cd:59:ff:2a:07:2a:85:39:b9:5c:dd:17:45:1e:38:70:79:cc:
d5:ce:5a:f3:69:12:dc:49:05:61:4a:3c:f8:a3:ee:1c:c7:c1:
c5:4b:1c:23:d3:a1:b3:34:e5:26:45:df:0f:d9:a8:69:e4:40:
ab:53:a8:4e:4c:c6:c6:37:69:f1:25:f4:fe:8f:48:8f:46:c1:
bc:ed:ab:23:0b:68:2e:10:01:e3:1c:ef:2e:1d:ae:35:67:fd:
a5:73:df:63:84:dd:5c:fd:93:c1:02:78:59:4e:96:f6:81:4b:
e3:fd:27:18:fb:ea:82:80:19:d0:9a:7f:fc:20:30:51:db:a3:
77:3d:75:7a:68:12:a8:ec:2d:a6:23:93:e2:a4:7b:cd:31:91:
84:92:3e:54:b0:9b:39:04:5b:bb:f6:94:0b:ec:75:b5:15:e8:
36:3e:1e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:39:47 2025 by rpki-client