Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/pt4ik_POu5c-QYMKe0HeHzSKZ0c.roa
File: pt4ik_POu5c-QYMKe0HeHzSKZ0c.roa (raw, json)
Hash identifier: KFZVraD+kBY9SpCug3DmOJa7rWzxs2jtXDexdcBJn04=
Subject key identifier: A6:DE:22:93:F3:CE:BB:97:3E:41:83:0A:7B:41:DE:1F:34:8A:67:47
Certificate issuer: /CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
Certificate serial: 018F4CD76915B831080C3969EA282D711410
Authority key identifier: 4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/pt4ik_POu5c-QYMKe0HeHzSKZ0c.roa
Signing time: Mon 06 May 2024 07:38:56 +0000
ROA not before: Mon 06 May 2024 07:38:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12334
IP address blocks: 77.26.0.0/18 maxlen: 18
77.26.64.0/18 maxlen: 18
77.26.128.0/18 maxlen: 18
77.26.192.0/18 maxlen: 18
77.27.0.0/18 maxlen: 18
77.27.64.0/18 maxlen: 18
77.27.128.0/18 maxlen: 18
77.27.192.0/18 maxlen: 18
83.165.0.0/18 maxlen: 18
83.165.64.0/18 maxlen: 18
83.165.128.0/18 maxlen: 18
83.165.192.0/18 maxlen: 18
91.116.64.0/18 maxlen: 18
91.116.128.0/18 maxlen: 18
91.116.192.0/18 maxlen: 18
91.117.0.0/18 maxlen: 18
91.117.64.0/18 maxlen: 18
91.117.128.0/18 maxlen: 18
91.117.192.0/18 maxlen: 18
92.53.192.0/19 maxlen: 19
178.60.0.0/18 maxlen: 18
178.60.128.0/18 maxlen: 18
212.51.32.0/19 maxlen: 19
213.60.0.0/18 maxlen: 18
213.60.64.0/18 maxlen: 18
213.60.128.0/18 maxlen: 18
213.60.192.0/18 maxlen: 18
2a00:bec0::/40 maxlen: 40
2a00:bec0:c800::/40 maxlen: 40
2a00:bec0:d000::/40 maxlen: 40
2a00:bec0:d800::/40 maxlen: 40
2a00:bec0:e000::/40 maxlen: 40
2a00:bec0:e800::/40 maxlen: 40
2a00:bec0:f000::/40 maxlen: 40
2a00:bec0:f800::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 13 May 2024 07:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4c:d7:69:15:b8:31:08:0c:39:69:ea:28:2d:71:14:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
Validity
Not Before: May 6 07:38:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6de2293f3cebb973e41830a7b41de1f348a6747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:18:8d:3e:3b:f6:c5:ea:c4:25:9f:f7:43:f0:
41:e1:c8:c9:94:60:38:f0:31:4e:a4:21:46:d5:98:
91:17:cc:fc:4b:14:90:8d:83:81:ae:f4:57:13:97:
b7:f1:bf:88:26:37:6f:df:b4:df:04:3b:d6:49:dc:
74:e6:7a:af:c5:fd:45:97:15:07:bc:c8:99:cf:7d:
32:96:38:40:52:07:81:5d:1e:2b:34:d7:c9:32:b3:
a9:51:12:1e:a5:ae:91:9a:1d:d5:1a:ff:d9:5a:d6:
37:d9:e1:95:63:a4:ef:30:21:b0:a8:34:f4:16:67:
29:b9:43:33:78:e6:51:36:7b:1a:5e:4c:a9:b0:6c:
78:fb:d4:19:73:71:39:60:65:4b:3f:14:19:ef:78:
c3:da:16:f5:12:11:2b:21:f2:59:b4:e7:d3:cf:96:
55:1f:c5:ec:da:cf:53:e7:16:d5:2c:96:fe:4f:cd:
18:2f:35:05:2a:d1:d6:84:17:71:d0:33:35:5c:28:
77:4c:ef:e0:64:ff:59:12:b6:b7:cf:47:16:44:d2:
a7:38:3d:1c:dc:e0:de:43:5b:57:df:ce:a5:7b:d7:
17:d6:01:57:b9:fb:f4:95:16:78:5c:42:a5:25:34:
fc:90:52:6f:f4:46:99:a7:f7:36:82:13:a3:a3:46:
3c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DE:22:93:F3:CE:BB:97:3E:41:83:0A:7B:41:DE:1F:34:8A:67:47
X509v3 Authority Key Identifier:
keyid:4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/pt4ik_POu5c-QYMKe0HeHzSKZ0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.26.0.0/15
83.165.0.0/16
91.116.64.0-91.117.255.255
92.53.192.0/19
178.60.0.0/18
178.60.128.0/18
212.51.32.0/19
213.60.0.0/16
IPv6:
2a00:bec0::/40
2a00:bec0:c800::/40
2a00:bec0:d000::/40
2a00:bec0:d800::/40
2a00:bec0:e000::/40
2a00:bec0:e800::/40
2a00:bec0:f000::/40
2a00:bec0:f800::/40
Signature Algorithm: sha256WithRSAEncryption
c2:48:05:6a:98:cb:d6:78:f1:54:1d:42:d6:26:bd:d2:60:7f:
14:b3:2f:de:47:de:aa:cb:2b:fb:8c:dc:e3:52:45:72:04:85:
ac:04:aa:4a:67:c3:74:1a:93:31:17:70:b0:3e:25:10:a4:c9:
28:ab:83:96:60:04:57:39:77:e7:8e:62:cf:26:6f:71:70:01:
12:9a:b3:d7:7f:c3:6e:f5:09:7f:f3:03:13:3e:4d:36:6c:0f:
ba:1e:68:9f:40:60:ec:3f:2d:05:06:b2:53:5e:49:a3:c4:8c:
06:02:4c:8e:ea:cd:1b:59:01:06:c6:d9:6a:f5:11:78:0a:4b:
c0:b9:8a:86:a3:c2:9f:eb:5c:48:90:d7:94:c3:61:ca:48:54:
c7:9d:62:51:e3:ee:0b:75:64:37:c8:c3:e6:61:f9:42:3e:7d:
73:9c:d8:5e:2c:b6:11:26:8f:23:a1:43:ae:ce:6d:2d:19:55:
2d:a4:fe:88:4e:3e:8d:22:99:a0:ea:9c:a1:4a:17:aa:03:e5:
c9:48:ad:27:ed:a8:05:2e:f5:60:d2:61:9a:92:32:19:14:95:
a5:5f:75:4e:ab:78:f3:7e:bb:c3:22:a2:3f:cc:47:83:3c:1b:
0a:a0:8f:3a:09:98:ff:18:ff:23:e2:8b:ba:b6:55:4c:2b:e4:
e0:79:7c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:51:42 2025 by rpki-client