Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/A6NPahw8t6WO_VFueJ78lHkmKVo.roa
File: A6NPahw8t6WO_VFueJ78lHkmKVo.roa (raw, json)
Hash identifier: RrP67ImvE/UWkpH43F25IjNKVnAM6v77Glaf0NjLRK4=
Subject key identifier: 03:A3:4F:6A:1C:3C:B7:A5:8E:FD:51:6E:78:9E:FC:94:79:26:29:5A
Certificate issuer: /CN=2d1815b0c9dc9ee2207ec9417cdec2bc4be23c61
Certificate serial: 018CC649AC942839D5860832761C1728C8E4
Authority key identifier: 2D:18:15:B0:C9:DC:9E:E2:20:7E:C9:41:7C:DE:C2:BC:4B:E2:3C:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/A6NPahw8t6WO_VFueJ78lHkmKVo.roa
Signing time: Mon 01 Jan 2024 18:29:26 +0000
ROA not before: Mon 01 Jan 2024 18:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25274
IP address blocks: 45.138.88.0/22 maxlen: 22
45.140.232.0/22 maxlen: 22
37.218.232.0/21 maxlen: 21
45.10.28.0/22 maxlen: 22
85.235.92.0/22 maxlen: 22
185.40.136.0/22 maxlen: 22
109.105.0.0/19 maxlen: 24
45.132.200.0/22 maxlen: 22
185.153.216.0/22 maxlen: 22
45.134.236.0/22 maxlen: 22
2a00:d240::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:ac:94:28:39:d5:86:08:32:76:1c:17:28:c8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1815b0c9dc9ee2207ec9417cdec2bc4be23c61
Validity
Not Before: Jan 1 18:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03a34f6a1c3cb7a58efd516e789efc947926295a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c5:17:1b:b4:f7:dd:85:a2:6c:6e:70:c1:9e:
73:4f:0d:40:4b:db:d0:e5:cc:8c:fd:e2:83:5e:92:
e6:01:bf:05:ae:d9:8b:35:37:28:ea:6f:67:69:60:
95:3e:ae:8b:51:10:81:ce:9c:33:a3:49:a4:b9:4e:
cf:6c:34:fb:7d:aa:0a:c9:71:54:8b:d9:ff:e1:6d:
70:e5:7d:c9:0b:5a:dc:9b:99:67:4c:7f:c1:5d:d1:
0f:c6:60:62:1b:18:73:fe:61:09:79:71:61:f2:8e:
44:a6:0a:2d:3e:e3:f9:a0:96:22:0b:74:ab:8d:92:
39:0a:3a:c0:97:bf:cf:8d:be:98:35:27:d3:19:b3:
34:4f:09:7b:76:f9:63:80:f2:f7:09:fe:41:30:58:
a3:20:28:4e:6a:6e:8f:82:d9:89:f3:9c:43:4a:f2:
25:35:7e:83:86:1c:2d:c8:b7:87:27:cc:2d:6e:72:
3b:a7:3d:08:7b:99:d7:12:3a:45:6b:5a:70:6d:c8:
1f:6d:b2:30:6c:04:93:9d:f1:6f:3b:84:02:95:e9:
ad:54:96:f2:6b:f9:a5:db:e1:c8:82:ee:58:dc:df:
53:3f:58:1d:ed:ef:22:0d:3e:83:51:ec:16:4a:17:
f6:da:42:85:17:1e:8e:55:3e:42:df:e6:2f:52:1a:
0e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A3:4F:6A:1C:3C:B7:A5:8E:FD:51:6E:78:9E:FC:94:79:26:29:5A
X509v3 Authority Key Identifier:
keyid:2D:18:15:B0:C9:DC:9E:E2:20:7E:C9:41:7C:DE:C2:BC:4B:E2:3C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/A6NPahw8t6WO_VFueJ78lHkmKVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.218.232.0/21
45.10.28.0/22
45.132.200.0/22
45.134.236.0/22
45.138.88.0/22
45.140.232.0/22
85.235.92.0/22
109.105.0.0/19
185.40.136.0/22
185.153.216.0/22
IPv6:
2a00:d240::/32
Signature Algorithm: sha256WithRSAEncryption
31:6f:73:d3:65:bc:0c:f5:97:60:c3:98:36:a9:16:0b:ca:8d:
96:81:c9:59:26:87:05:f3:94:72:79:e4:e3:b9:8e:c7:e0:06:
40:88:bd:bf:c9:dd:3c:e0:f1:4f:95:73:1f:c0:72:76:ca:03:
da:bc:de:e5:09:be:25:db:30:bb:5a:04:c5:52:96:0f:f6:ce:
55:35:4a:69:3f:10:c7:6a:7f:6e:95:33:2f:51:a2:ac:08:e9:
0a:52:8e:27:9a:3a:a7:a4:af:e3:f9:7d:7d:5e:f5:46:30:9c:
ab:cd:f2:13:d7:84:c5:18:ad:a0:ce:d3:ab:be:0b:32:72:a3:
99:1b:a8:34:cd:e3:9a:c8:d0:7c:73:c9:ff:5e:c1:e1:8d:6c:
e5:fe:1b:37:f3:f3:d2:4a:92:53:86:3e:36:90:07:4b:dc:34:
2f:44:d2:60:cf:0c:f2:21:7b:44:32:56:8d:5d:83:18:98:e3:
f6:4e:71:5f:86:83:66:e2:60:8a:d7:95:f0:e2:f2:96:8c:64:
f0:1c:9a:9d:24:d8:54:1f:47:08:40:82:f9:86:5e:d8:fe:76:
62:75:74:64:c6:38:69:e0:16:be:75:61:aa:0d:06:3e:38:ee:
38:68:4e:19:23:68:9a:bd:8b:e7:3a:20:a5:3c:7d:ae:93:6a:
a7:d8:40:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:29 2025 by rpki-client