Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/UQe0ej0I5lgNIdrQL_q6Fl0D20g.roa
File: UQe0ej0I5lgNIdrQL_q6Fl0D20g.roa (raw, json)
Hash identifier: 69U/HhMH8sGLApFee7b6KShw4MQyrucTJ1As+x4R/Gk=
Subject key identifier: 51:07:B4:7A:3D:08:E6:58:0D:21:DA:D0:2F:FA:BA:16:5D:03:DB:48
Certificate issuer: /CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Certificate serial: 018FCDAACBFD2C10434D64F355A9624D762C
Authority key identifier: AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/UQe0ej0I5lgNIdrQL_q6Fl0D20g.roa
Signing time: Fri 31 May 2024 08:01:13 +0000
ROA not before: Fri 31 May 2024 08:01:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204151
IP address blocks: 46.32.144.0/21 maxlen: 21
78.31.252.0/22 maxlen: 22
185.107.12.0/22 maxlen: 22
185.107.13.0/24 maxlen: 24
185.107.14.0/24 maxlen: 24
185.233.252.0/22 maxlen: 22
194.45.76.0/22 maxlen: 22
212.237.176.0/21 maxlen: 21
2a06:4000::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 03 Jun 2024 13:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cd:aa:cb:fd:2c:10:43:4d:64:f3:55:a9:62:4d:76:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Validity
Not Before: May 31 08:01:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5107b47a3d08e6580d21dad02ffaba165d03db48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:67:7d:2d:66:be:ee:c5:07:ef:52:25:68:ba:
88:40:32:56:31:04:b6:a4:b3:14:8c:6b:7e:06:cc:
83:e4:75:d4:9f:c7:4d:01:c8:b4:dc:92:e8:27:37:
03:c9:21:53:fc:bf:d3:e0:57:f9:23:71:35:04:67:
08:33:68:89:f6:7e:b5:14:b2:ca:d2:8e:f5:ac:d0:
24:05:91:ba:56:4a:1e:cb:d7:7b:14:a8:6d:40:e1:
16:77:f1:30:da:06:f9:69:b3:ea:6a:c7:8e:0d:4b:
0f:0f:8d:f6:c9:56:5d:a1:b3:0e:86:d8:fb:82:92:
6e:c3:d5:fc:bb:29:7c:20:dd:a9:51:ed:87:9d:be:
3e:5d:07:99:95:9a:69:93:7d:4a:b0:b5:91:c0:59:
79:9d:9a:46:b1:40:cf:a2:76:3a:2e:b2:37:06:1c:
f0:48:ca:8f:46:e0:31:01:65:8e:3a:3c:b4:d4:19:
a7:13:39:e2:4b:04:aa:60:a1:f2:3d:25:67:14:35:
a7:44:78:49:ae:53:8a:29:38:04:59:a5:79:05:a4:
42:00:60:3f:61:6f:01:47:4e:be:fd:7b:8b:14:56:
5e:e0:a5:38:5b:9a:75:40:13:53:77:0f:50:8e:4a:
68:b4:88:93:87:64:94:67:c0:35:d7:63:db:08:47:
a1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:07:B4:7A:3D:08:E6:58:0D:21:DA:D0:2F:FA:BA:16:5D:03:DB:48
X509v3 Authority Key Identifier:
keyid:AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/UQe0ej0I5lgNIdrQL_q6Fl0D20g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.144.0/21
78.31.252.0/22
185.107.12.0/22
185.233.252.0/22
194.45.76.0/22
212.237.176.0/21
IPv6:
2a06:4000::/29
Signature Algorithm: sha256WithRSAEncryption
80:03:47:62:4e:c8:a2:64:c7:93:48:4e:e9:ea:07:a2:29:11:
a0:94:bb:24:bc:87:bf:e5:ad:c9:79:03:c0:5f:3c:65:25:e9:
d5:c7:dc:46:d6:89:91:67:37:54:4c:4b:91:d6:32:a1:f2:c8:
8a:c1:dd:b8:1b:d3:3f:7c:41:20:50:31:84:29:55:c2:5c:d1:
de:29:e5:f5:4e:03:fe:a1:57:c6:4d:d2:39:84:f4:62:ce:50:
84:5c:cd:77:d2:cc:2a:1d:94:de:71:71:f2:41:38:32:4e:61:
50:bc:50:b5:e0:35:58:2a:fd:94:f3:c8:e2:f1:59:10:e0:1d:
bd:1f:a9:f6:d6:7d:84:3f:9d:b9:d4:3e:1f:90:10:f1:1f:3b:
5f:57:4c:e3:24:55:14:52:45:9f:40:11:0d:7b:f2:27:a0:c2:
72:21:33:ac:6e:61:74:2f:55:fd:36:52:51:67:83:53:d2:c0:
15:82:f0:7a:dc:bf:15:02:2b:08:a5:bd:f0:96:90:9b:7d:c8:
c1:e3:c9:2e:86:c2:07:3f:f1:df:53:7e:a8:e0:5e:83:41:7c:
b0:c8:6f:1d:b6:c9:1c:38:2b:2e:69:b5:2d:1f:29:7b:b1:69:
f2:f6:33:ce:a6:73:d9:8c:37:b7:df:9a:90:5f:b7:87:67:bf:
89:d1:22:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:08:22 2025 by rpki-client