Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/N4CbnoHx4znTdh0kSwQFZ7UyrQw.roa
File: N4CbnoHx4znTdh0kSwQFZ7UyrQw.roa (raw, json)
Hash identifier: RVrw4E6goA2A2wyv7nYJvyiT3woPB/Wv2E0OWZFNuho=
Subject key identifier: 37:80:9B:9E:81:F1:E3:39:D3:76:1D:24:4B:04:05:67:B5:32:AD:0C
Certificate issuer: /CN=331bce2ee806e93621112dbd618536f775f44fba
Certificate serial: 01922B09647846051D37F31C5286F77D19FC
Authority key identifier: 33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/N4CbnoHx4znTdh0kSwQFZ7UyrQw.roa
Signing time: Wed 25 Sep 2024 21:14:48 +0000
ROA not before: Wed 25 Sep 2024 21:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60446
IP address blocks: 5.252.206.0/24 maxlen: 24
45.67.232.0/24 maxlen: 24
45.67.233.0/24 maxlen: 24
91.230.149.0/24 maxlen: 24
185.130.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Oct 2024 14:58:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2b:09:64:78:46:05:1d:37:f3:1c:52:86:f7:7d:19:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331bce2ee806e93621112dbd618536f775f44fba
Validity
Not Before: Sep 25 21:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37809b9e81f1e339d3761d244b040567b532ad0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:39:70:29:8f:ca:4f:cf:d9:14:0c:e5:57:
a6:28:f9:be:b0:ab:60:6e:53:27:f9:b6:ed:80:09:
dc:b8:78:c1:3a:7b:d2:dc:04:43:ba:59:4f:61:64:
cb:46:66:e5:9e:9a:17:03:be:98:e4:90:2c:21:2f:
e7:13:28:76:b9:a7:fe:85:dc:81:91:70:d1:ca:35:
53:e4:6e:f6:0a:0e:ef:e3:4a:6f:d1:73:cb:a1:43:
c3:27:f5:9b:44:49:38:de:06:41:26:a6:6c:9b:91:
be:6f:cc:47:74:67:6b:67:da:84:a8:27:e0:27:14:
c6:3c:a4:c4:b6:37:ff:99:6f:1a:97:16:ae:28:8a:
2e:c8:77:b4:cd:7d:a4:e6:c8:e6:a9:10:a2:e4:b8:
0e:a0:f8:6f:de:f8:93:7f:10:d2:5f:0f:0f:50:ba:
2d:da:2a:0a:87:27:75:c3:de:fe:4d:8c:18:d0:3a:
a1:95:85:b1:bf:10:be:a8:13:4f:a9:a5:39:31:81:
b2:e8:56:de:f9:c1:1b:d7:3b:19:96:e6:1b:23:d5:
7a:d3:19:a1:ed:11:50:42:f8:0d:05:6e:a6:6b:8c:
80:2e:a1:2a:05:6c:ed:b5:f0:fa:ca:80:7c:cf:f2:
17:f7:5d:75:3c:26:80:3d:76:b9:fb:86:8b:dc:5e:
ec:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:80:9B:9E:81:F1:E3:39:D3:76:1D:24:4B:04:05:67:B5:32:AD:0C
X509v3 Authority Key Identifier:
keyid:33:1B:CE:2E:E8:06:E9:36:21:11:2D:BD:61:85:36:F7:75:F4:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxvOLugG6TYhES29YYU293X0T7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/N4CbnoHx4znTdh0kSwQFZ7UyrQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4ba3ca-d6fd-4116-9146-aeac16227c25/1/MxvOLugG6TYhES29YYU293X0T7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.206.0/24
45.67.232.0/23
91.230.149.0/24
185.130.56.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:fc:5b:e7:7f:88:8c:5f:ae:38:ec:25:7d:56:a7:03:e2:dd:
f8:63:49:e1:ce:8a:eb:6a:d9:79:51:12:ef:ce:30:11:73:60:
63:81:0f:f9:db:b7:77:12:ed:5f:3e:af:56:e4:94:bc:0e:54:
0c:98:2f:31:8c:de:db:fa:ea:53:94:9f:52:38:bc:09:ed:1f:
ee:9c:39:29:2a:0c:63:43:2f:cc:51:13:84:ab:98:17:41:b6:
eb:2b:e4:09:fe:a5:fe:ba:40:59:40:da:e9:f2:f9:0f:f0:db:
1b:85:af:12:b2:62:98:a2:c9:39:86:9b:04:93:ba:ee:9a:39:
57:90:a0:a6:3e:9a:f4:7a:0b:34:6d:38:2d:be:f5:f4:ac:88:
64:e0:b0:65:4d:7c:1f:0c:2c:72:9b:10:8a:1f:a8:a0:ec:6d:
0f:6e:40:dd:d5:e0:ac:06:16:ab:cd:73:b6:7d:7c:ed:e7:8c:
d8:04:23:59:4b:c3:44:36:72:27:16:4d:78:ef:ac:42:eb:5e:
26:17:2c:b7:6b:5c:db:4a:ac:2b:d7:da:3e:58:d2:f6:ff:fa:
e4:7c:2a:ad:15:d1:44:42:50:ec:96:8a:65:ff:90:8f:66:dd:
a8:c3:d4:7a:e8:0f:d7:d6:f1:9b:12:c9:1a:e2:1c:0c:80:ff:
e7:b8:e6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 08:22:11 2025 by rpki-client