Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/6aVhj5ajrfa-A58gaQY8CMOtVPY.roa
File: 6aVhj5ajrfa-A58gaQY8CMOtVPY.roa (raw, json)
Hash identifier: /FwgMaanf9+Jh3QCqniYfJ5eugXZc4fqVYixd55Tq90=
Subject key identifier: E9:A5:61:8F:96:A3:AD:F6:BE:03:9F:20:69:06:3C:08:C3:AD:54:F6
Certificate issuer: /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Certificate serial: 018CC3B6C7B2268B6E94E3BF048776885761
Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/6aVhj5ajrfa-A58gaQY8CMOtVPY.roa
Signing time: Mon 01 Jan 2024 06:29:44 +0000
ROA not before: Mon 01 Jan 2024 06:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50758
IP address blocks: 46.31.160.0/21 maxlen: 24
213.190.12.0/24 maxlen: 24
213.190.13.0/24 maxlen: 24
2a0a:2a40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 19 Aug 2024 09:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:c7:b2:26:8b:6e:94:e3:bf:04:87:76:88:57:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Validity
Not Before: Jan 1 06:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9a5618f96a3adf6be039f2069063c08c3ad54f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a6:85:9e:26:24:2a:d8:71:c2:ef:16:34:2f:
34:60:db:f7:47:3c:56:40:fd:84:45:12:71:70:44:
c7:5b:39:38:4e:41:77:21:b6:49:2d:71:a3:4a:a3:
5a:f0:30:9a:12:81:3e:e4:c9:dd:0f:4a:aa:a0:5d:
1d:e0:d0:18:5a:b3:c9:ed:f6:9d:26:99:ce:c5:f8:
18:42:9c:14:87:88:c7:f8:a2:43:58:13:c6:af:53:
63:1b:77:92:3c:0d:7f:9d:e6:2f:89:71:e8:9a:eb:
78:b3:6e:48:9a:ea:ec:93:c4:d9:48:d9:fc:58:e1:
a6:f1:a7:34:ea:f7:20:48:ff:70:68:4d:38:6b:13:
aa:89:cc:1d:f8:57:39:64:18:ed:97:e5:f0:c4:6f:
4c:83:2e:ee:8d:3f:37:94:39:ad:21:b7:4e:6c:33:
10:4d:4c:c7:a2:08:ac:6b:a2:5a:bc:fa:56:bb:8e:
d6:46:0f:cb:0e:a5:9d:06:1d:06:a2:1f:de:5b:92:
42:4b:72:62:95:99:81:04:86:63:6b:36:75:41:9b:
1e:46:3a:2b:fb:81:cc:43:96:f3:a0:bf:be:15:37:
b0:95:9e:ee:f5:76:78:fa:a4:38:30:ce:65:ed:d8:
b2:a7:78:e7:02:15:c1:f3:2b:fb:1d:00:e6:e4:75:
05:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A5:61:8F:96:A3:AD:F6:BE:03:9F:20:69:06:3C:08:C3:AD:54:F6
X509v3 Authority Key Identifier:
keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/6aVhj5ajrfa-A58gaQY8CMOtVPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.160.0/21
213.190.12.0/23
IPv6:
2a0a:2a40::/29
Signature Algorithm: sha256WithRSAEncryption
15:e4:08:53:10:a6:04:29:ce:62:84:c4:ea:2f:b3:47:89:db:
e0:3e:84:cd:b7:3d:73:88:e8:9c:ba:8a:29:22:2d:d9:c9:05:
bd:09:8c:47:c8:fe:03:5a:00:30:75:b9:f0:7f:16:25:e1:10:
34:5e:4f:94:d3:bd:18:bb:ee:bd:ff:72:38:e9:12:c2:e2:3e:
d4:50:db:a8:0c:18:7a:30:d3:dc:3d:68:a8:38:8c:e8:08:9c:
44:7e:33:92:bc:32:ba:b4:31:d3:2f:46:81:e5:d8:69:97:bc:
a3:4a:85:08:82:cd:e5:e6:08:43:91:0e:09:47:85:07:d0:49:
6a:53:e1:bb:f7:24:85:8b:d8:a7:5e:d5:b6:11:bd:52:f8:19:
71:93:d0:dd:91:3e:0b:19:6b:7a:fd:dd:87:72:28:83:f3:6d:
d6:c0:8e:f2:fa:03:94:61:3c:66:60:98:54:86:4b:01:ba:41:
58:70:4e:85:71:91:e4:73:10:04:e0:44:ef:ac:fb:62:4c:a9:
88:09:7e:f6:58:88:a6:04:33:11:9e:83:c9:56:93:b5:e5:c1:
c9:30:db:bf:9c:78:ad:f3:59:30:83:c5:fb:15:1c:30:38:c9:
bd:47:9a:63:d3:97:1b:e8:63:57:ff:29:e2:ee:b0:f0:75:d5:
a7:fe:81:a5
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzDtseyJotulOO/BId2iFdhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZDlhMTc3YmI1ZGZiNmVhYmU0Y2FkNzlkZWY4ZjhiMDA1
ZGY2NTYwHhcNMjQwMTAxMDYyOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWE1NjE4Zjk2YTNhZGY2YmUwMzlmMjA2OTA2M2MwOGMzYWQ1NGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqaFniYkKthxwu8WNC80YNv3RzxW
QP2ERRJxcETHWzk4TkF3IbZJLXGjSqNa8DCaEoE+5MndD0qqoF0d4NAYWrPJ7fad
JpnOxfgYQpwUh4jH+KJDWBPGr1NjG3eSPA1/neYviXHomut4s25Imursk8TZSNn8
WOGm8ac06vcgSP9waE04axOqicwd+Fc5ZBjtl+XwxG9Mgy7ujT83lDmtIbdObDMQ
TUzHogisa6JavPpWu47WRg/LDqWdBh0Goh/eW5JCS3JilZmBBIZjazZ1QZseRjor
+4HMQ5bzoL++FTewlZ7u9XZ4+qQ4MM5l7diyp3jnAhXB8yv7HQDm5HUFswIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFOmlYY+Wo632vgOfIGkGPAjDrVT2MB8GA1UdIwQY
MBaAFDvZoXe7Xftuq+TK153vj4sAXfZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzltaGQ3dGQtMjZyNU1yWG5lLVBpd0JkOWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9jMGQ0NjctZjYyYS00MTljLWJlODUt
ZTM4MDMwYjY5ZDVhLzEvNmFWaGo1YWpyZmEtQTU4Z2FRWThDTU90VlBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9jMGQ0NjctZjYyYS00MTljLWJlODUtZTM4MDMwYjY5ZDVh
LzEvTzltaGQ3dGQtMjZyNU1yWG5lLVBpd0JkOWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDLh+gAwQB
1b4MMA0EAgACMAcDBQMqCipAMA0GCSqGSIb3DQEBCwUAA4IBAQAV5AhTEKYEKc5i
hMTqL7NHidvgPoTNtz1ziOicuoopIi3ZyQW9CYxHyP4DWgAwdbnwfxYl4RA0Xk+U
070Yu+69/3I46RLC4j7UUNuoDBh6MNPcPWioOIzoCJxEfjOSvDK6tDHTL0aB5dhp
l7yjSoUIgs3l5ghDkQ4JR4UH0ElqU+G79ySFi9inXtW2Eb1S+Blxk9DdkT4LGWt6
/d2HciiD823WwI7y+gOUYTxmYJhUhksBukFYcE6FcZHkcxAE4ETvrPtiTKmICX72
WIimBDMRnoPJVpO15cHJMNu/nHit81kwg8X7FRwwOMm9R5pj05cb6GNX/yni7rDw
ddWn/oGl
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:00:38 2025 by rpki-client