Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/46965-Gk3soE07tjlfwNE_8330I.roa
File: 46965-Gk3soE07tjlfwNE_8330I.roa (raw, json)
Hash identifier: +BfpubxpnlgAwdBa0KgwJW1YNGWJPmIHNlEKFWBDt6c=
Subject key identifier: E3:AF:7A:E7:E1:A4:DE:CA:04:D3:BB:63:95:FC:0D:13:FF:37:DF:42
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0193963BEE6144F9833771D3F6B9982E3B44
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/46965-Gk3soE07tjlfwNE_8330I.roa
Signing time: Thu 05 Dec 2024 09:52:10 +0000
ROA not before: Thu 05 Dec 2024 09:52:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34304
IP address blocks: 80.96.99.0/24 maxlen: 24
80.96.106.0/24 maxlen: 24
80.96.236.0/23 maxlen: 23
81.180.94.0/23 maxlen: 23
81.180.172.0/23 maxlen: 23
81.180.252.0/23 maxlen: 23
81.181.173.0/24 maxlen: 24
85.121.18.0/23 maxlen: 23
85.121.36.0/23 maxlen: 23
85.122.84.0/23 maxlen: 23
194.102.217.0/24 maxlen: 24
217.156.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:96:3b:ee:61:44:f9:83:37:71:d3:f6:b9:98:2e:3b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Dec 5 09:52:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3af7ae7e1a4deca04d3bb6395fc0d13ff37df42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:03:a3:4d:98:70:d4:14:48:b6:c5:d6:68:f6:
5e:3c:85:45:96:49:3d:38:c3:96:65:d6:e0:ee:34:
f6:6b:13:fc:9e:c6:ca:d1:11:f5:f0:8e:b8:da:07:
9a:5d:06:91:b6:51:01:11:d7:2c:ed:08:82:1d:a0:
04:09:d3:63:eb:5e:66:01:b4:f7:10:53:71:8b:ef:
be:ce:5a:59:e5:a3:f3:8c:0b:d2:1f:b5:db:47:09:
e4:75:5c:91:95:a9:32:e5:7d:d7:a0:38:a8:57:ee:
7c:75:35:27:04:a0:af:9a:32:30:8e:7e:0a:b0:a2:
e0:ef:89:c5:43:30:8d:95:2d:b0:3c:93:bb:0f:ca:
d0:4c:8b:c4:1b:c3:af:53:78:af:e9:24:3c:c2:c8:
a1:ac:48:31:d3:84:59:9e:73:b6:a2:1d:b6:ff:cd:
42:40:2c:56:0d:08:b4:5a:9b:46:84:9b:8c:46:f0:
ce:a1:07:b5:e3:1b:73:56:3d:81:52:15:af:e8:6f:
15:ec:c9:98:07:1b:d0:a2:37:93:2a:f2:26:de:5e:
fd:0c:4b:5d:eb:34:25:85:21:ba:4a:dc:f4:e2:07:
f2:ea:78:89:55:57:d6:de:3d:19:11:32:88:18:9d:
da:f2:e1:79:ff:9e:4c:e9:89:4b:b0:6a:a7:9d:3e:
35:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AF:7A:E7:E1:A4:DE:CA:04:D3:BB:63:95:FC:0D:13:FF:37:DF:42
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/46965-Gk3soE07tjlfwNE_8330I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.99.0/24
80.96.106.0/24
80.96.236.0/23
81.180.94.0/23
81.180.172.0/23
81.180.252.0/23
81.181.173.0/24
85.121.18.0/23
85.121.36.0/23
85.122.84.0/23
194.102.217.0/24
217.156.91.0/24
Signature Algorithm: sha256WithRSAEncryption
83:3f:ca:d9:64:b2:44:7b:d1:b1:ad:27:17:f2:8c:b3:2a:cc:
19:41:a7:81:49:4d:59:13:f9:5e:0e:cd:20:a2:4b:7a:24:36:
79:23:84:fe:91:97:8d:77:44:6c:b9:7c:7d:d3:a6:1f:b0:7e:
c5:2b:cb:0a:d8:ac:9b:ea:f1:19:55:7f:8c:e9:fb:a7:a0:9c:
60:b9:44:85:35:36:e1:f6:b1:9d:f6:75:4a:b8:45:ea:93:ec:
e7:46:d5:09:e3:f5:6f:dc:4a:d9:e0:2e:81:7a:4f:b5:88:98:
36:8c:fa:00:7c:95:9d:82:ce:58:ca:cb:f7:cd:4e:1c:7f:62:
dc:90:65:fe:53:37:f5:82:09:58:59:19:c3:32:dd:53:75:48:
35:f2:b8:c1:0b:b4:b0:d5:dd:be:db:45:57:7e:f6:95:23:9a:
da:aa:68:a0:98:4c:2c:3a:a0:b2:a5:b2:d3:0b:57:43:2a:3f:
1f:43:39:fb:06:13:e0:50:a9:ee:30:49:66:1d:48:04:ff:63:
57:3a:1a:3c:1c:8f:07:0f:84:2d:15:c9:c3:b5:35:69:d7:58:
a1:a8:0f:a6:97:3b:a8:bb:24:05:61:7e:39:e9:97:9f:1b:d9:
18:e1:52:20:36:fd:b6:23:c0:88:34:6c:3b:c4:23:36:6f:ad:
e6:fa:39:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:26 2025 by rpki-client