Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/I7uENdk9cQznOdJp8H0Ug83PO6c.roa
File: I7uENdk9cQznOdJp8H0Ug83PO6c.roa (raw, json)
Hash identifier: vPtjv+0QeSD1RNYLppvoc5f+kYqrB5TMdzol9rODnD8=
Subject key identifier: 23:BB:84:35:D9:3D:71:0C:E7:39:D2:69:F0:7D:14:83:CD:CF:3B:A7
Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Certificate serial: 0190A53D44F73F1EE350E863B81376270A8A
Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/I7uENdk9cQznOdJp8H0Ug83PO6c.roa
Signing time: Fri 12 Jul 2024 04:39:34 +0000
ROA not before: Fri 12 Jul 2024 04:39:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201502
IP address blocks: 46.255.240.0/24 maxlen: 24
46.255.241.0/24 maxlen: 24
46.255.242.0/24 maxlen: 24
46.255.243.0/24 maxlen: 24
46.255.244.0/24 maxlen: 24
46.255.245.0/24 maxlen: 24
46.255.246.0/24 maxlen: 24
46.255.247.0/24 maxlen: 24
176.124.114.0/24 maxlen: 24
185.13.220.0/22 maxlen: 24
185.25.136.0/22 maxlen: 22
185.25.136.0/24 maxlen: 24
185.25.137.0/24 maxlen: 24
185.25.138.0/24 maxlen: 24
185.25.139.0/24 maxlen: 24
185.203.172.0/24 maxlen: 24
185.203.173.0/24 maxlen: 24
185.203.174.0/24 maxlen: 24
185.203.175.0/24 maxlen: 24
185.220.80.0/24 maxlen: 24
185.253.80.0/22 maxlen: 24
188.208.19.0/24 maxlen: 24
188.214.82.0/24 maxlen: 24
188.214.83.0/24 maxlen: 24
2a03:a6c0::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 14 Nov 2024 18:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a5:3d:44:f7:3f:1e:e3:50:e8:63:b8:13:76:27:0a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Validity
Not Before: Jul 12 04:39:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23bb8435d93d710ce739d269f07d1483cdcf3ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d0:0c:d6:ca:9a:89:79:27:f7:48:37:9c:56:
79:d8:b3:da:2a:96:d0:a4:95:63:77:f0:65:5a:68:
a1:33:9d:ad:e7:8d:78:2e:ea:62:77:7a:e1:ff:da:
a0:42:08:bd:64:41:7e:84:cb:7b:d7:20:01:8d:b2:
db:bd:67:49:96:60:63:7c:7d:cd:b5:b2:29:4f:5c:
f2:22:6a:70:95:b2:43:44:e4:38:89:25:1f:08:b4:
4a:16:a5:0a:2e:4a:01:ed:8d:ee:3d:d5:91:5e:a3:
11:3b:a2:c1:4b:58:85:96:1f:78:c4:4d:0d:39:50:
91:16:5b:86:a5:93:f9:d8:5d:85:3f:44:fc:10:b3:
9d:ae:09:83:64:87:49:41:03:86:09:e3:9e:bd:8c:
d1:6f:b9:6b:db:13:0e:a1:1d:99:b1:d7:73:c7:01:
f1:78:f6:61:74:24:d1:1a:7e:84:e9:b9:51:77:fb:
ac:6b:de:28:40:18:48:3d:10:90:65:b2:28:08:fa:
b8:38:ac:e4:c8:69:f4:e4:09:a2:5e:a9:dc:71:f5:
de:5d:58:e6:20:28:c5:d9:4a:1e:12:64:15:96:ba:
70:50:21:be:c4:88:73:11:f7:76:70:d7:cc:49:b9:
83:da:cf:90:38:99:19:38:e6:a6:a7:3c:18:8c:62:
d3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BB:84:35:D9:3D:71:0C:E7:39:D2:69:F0:7D:14:83:CD:CF:3B:A7
X509v3 Authority Key Identifier:
keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/I7uENdk9cQznOdJp8H0Ug83PO6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.240.0/21
176.124.114.0/24
185.13.220.0/22
185.25.136.0/22
185.203.172.0/22
185.220.80.0/24
185.253.80.0/22
188.208.19.0/24
188.214.82.0/23
IPv6:
2a03:a6c0::/32
Signature Algorithm: sha256WithRSAEncryption
3f:fe:e8:5d:76:66:5d:db:c5:3d:68:2b:be:2b:ca:a5:79:4f:
5d:15:43:4b:4e:89:84:53:3a:85:77:55:38:40:31:63:0a:d8:
b3:d6:aa:99:9a:03:ab:3a:96:dc:98:04:9c:5e:4e:a2:a7:02:
ce:67:3b:2e:34:4f:24:16:81:39:ef:b3:86:af:f0:cd:e7:06:
ef:c8:a0:87:0c:00:18:cf:da:a2:1f:15:42:85:b6:0a:05:3c:
13:50:30:da:a6:ad:f3:a1:77:30:cb:03:f8:75:ec:d5:be:18:
3c:a7:7d:3c:61:20:40:6f:21:69:98:b5:e4:12:bf:d4:df:7e:
9e:3f:31:87:b3:71:e6:10:64:a2:2b:fa:b6:cc:ba:bb:42:d5:
8a:fe:7e:49:eb:5e:28:90:82:9f:03:77:2a:87:e4:af:4b:65:
c5:74:aa:fd:5a:94:65:0e:b6:df:af:55:ab:9b:f0:0e:33:f7:
69:33:40:ec:12:e2:52:20:ef:aa:87:83:af:92:53:eb:28:1e:
40:e1:35:32:19:58:65:c1:83:c6:2f:9c:ed:3e:3b:e7:69:0c:
77:ce:e4:ac:e5:02:61:21:61:1c:37:88:f7:db:4d:a1:d6:75:
a9:d6:bf:3b:af:47:85:cb:90:f5:3b:4d:62:ea:37:dd:e5:20:
2d:55:b3:1c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAZClPUT3Px7jUOhjuBN2JwqKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYmE2ZDBmMGY5YjE5ZjdmNDNjZWI0M2U3MzU5YTNkODRl
OTlkOTkwHhcNMjQwNzEyMDQzOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2JiODQzNWQ5M2Q3MTBjZTczOWQyNjlmMDdkMTQ4M2NkY2YzYmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdAM1sqaiXkn90g3nFZ52LPaKpbQ
pJVjd/BlWmihM52t5414Lupid3rh/9qgQgi9ZEF+hMt71yABjbLbvWdJlmBjfH3N
tbIpT1zyImpwlbJDROQ4iSUfCLRKFqUKLkoB7Y3uPdWRXqMRO6LBS1iFlh94xE0N
OVCRFluGpZP52F2FP0T8ELOdrgmDZIdJQQOGCeOevYzRb7lr2xMOoR2ZsddzxwHx
ePZhdCTRGn6E6blRd/usa94oQBhIPRCQZbIoCPq4OKzkyGn05AmiXqnccfXeXVjm
ICjF2UoeEmQVlrpwUCG+xIhzEfd2cNfMSbmD2s+QOJkZOOampzwYjGLTBwIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFCO7hDXZPXEM5znSafB9FIPNzzunMB8GA1UdIwQY
MBaAFGu6bQ8Pmxn39DzrQ+c1mj2E6Z2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTdwdER3LWJHZmYwUE90RDV6V2FQWVRwblprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MzJlODktODg0Mi00OGIxLTlkY2Yt
MmFlYWRiOTY2Yjc2LzEvSTd1RU5kazljUXpuT2RKcDhIMFVnODNQTzZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MzJlODktODg0Mi00OGIxLTlkY2YtMmFlYWRiOTY2Yjc2
LzEvYTdwdER3LWJHZmYwUE90RDV6V2FQWVRwblprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDLv/wAwQA
sHxyAwQCuQ3cAwQCuRmIAwQCucusAwQAudxQAwQCuf1QAwQAvNATAwQBvNZSMA0E
AgACMAcDBQAqA6bAMA0GCSqGSIb3DQEBCwUAA4IBAQA//uhddmZd28U9aCu+K8ql
eU9dFUNLTomEUzqFd1U4QDFjCtiz1qqZmgOrOpbcmAScXk6ipwLOZzsuNE8kFoE5
77OGr/DN5wbvyKCHDAAYz9qiHxVChbYKBTwTUDDapq3zoXcwywP4dezVvhg8p308
YSBAbyFpmLXkEr/U336ePzGHs3HmEGSiK/q2zLq7QtWK/n5J614okIKfA3cqh+Sv
S2XFdKr9WpRlDrbfr1Wrm/AOM/dpM0DsEuJSIO+qh4OvklPrKB5A4TUyGVhlwYPG
L5ztPjvnaQx3zuSs5QJhIWEcN4j3202h1nWp1r87r0eFy5D1O01i6jfd5SAtVbMc
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:34 2025 by rpki-client