Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/3G2DA45VM_lDBB71pVstt1nFsgM.roa
File: 3G2DA45VM_lDBB71pVstt1nFsgM.roa (raw, json)
Hash identifier: XsJ7+cj3m87ow6PegmNGMVEScsq7erviwZWWQiHFJaI=
Subject key identifier: DC:6D:83:03:8E:55:33:F9:43:04:1E:F5:A5:5B:2D:B7:59:C5:B2:03
Certificate issuer: /CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Certificate serial: 019426D956B64D09360289F66D6C279A1E96
Authority key identifier: C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/3G2DA45VM_lDBB71pVstt1nFsgM.roa
Signing time: Thu 02 Jan 2025 11:49:25 +0000
ROA not before: Thu 02 Jan 2025 11:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206618
IP address blocks: 143.163.1.0/24 maxlen: 24
143.163.12.0/22 maxlen: 22
143.163.16.0/23 maxlen: 23
143.163.22.0/24 maxlen: 24
143.163.66.0/23 maxlen: 23
143.163.66.0/24 maxlen: 24
143.163.67.0/24 maxlen: 24
193.23.96.0/24 maxlen: 24
194.114.32.0/23 maxlen: 23
194.114.40.0/23 maxlen: 23
194.114.61.0/24 maxlen: 24
194.114.62.0/23 maxlen: 23
194.114.62.0/24 maxlen: 24
194.114.63.0/24 maxlen: 24
194.114.64.0/23 maxlen: 23
194.114.66.0/23 maxlen: 23
194.114.70.0/23 maxlen: 23
194.114.74.0/24 maxlen: 24
194.114.77.0/24 maxlen: 24
194.114.78.0/23 maxlen: 23
194.114.80.0/23 maxlen: 23
194.114.82.0/24 maxlen: 24
194.114.85.0/24 maxlen: 24
194.114.94.0/23 maxlen: 23
194.114.96.0/22 maxlen: 22
194.114.96.0/23 maxlen: 23
194.114.96.0/24 maxlen: 24
194.114.97.0/24 maxlen: 24
194.114.98.0/23 maxlen: 23
194.114.100.0/22 maxlen: 22
194.114.104.0/21 maxlen: 21
194.114.104.0/24 maxlen: 24
194.114.112.0/22 maxlen: 22
194.114.116.0/22 maxlen: 22
194.114.125.0/24 maxlen: 24
194.114.126.0/24 maxlen: 24
2a01:4dc0::/42 maxlen: 42
Validation: Failed, certificate revoked on Thu 13 Mar 2025 08:12:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:56:b6:4d:09:36:02:89:f6:6d:6c:27:9a:1e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Validity
Not Before: Jan 2 11:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc6d83038e5533f943041ef5a55b2db759c5b203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4e:70:35:8d:60:42:15:42:4b:9f:74:19:55:
b3:f3:95:e7:b3:1c:e9:37:fa:f5:ca:0a:15:1e:fd:
12:25:e2:d0:9c:b5:16:50:cd:8c:1b:53:e9:a1:5d:
15:9b:16:82:e8:9f:4a:1c:49:e0:13:45:e6:5f:48:
e2:63:c7:c6:f3:6a:4e:01:3c:2c:88:71:8e:0f:12:
65:bc:68:83:1a:6b:69:13:fd:77:c8:de:0e:df:90:
0b:32:08:d3:1a:2c:c5:2b:b5:de:8e:38:be:33:14:
44:f1:5e:76:8d:64:02:54:69:d3:fd:a0:35:0f:9b:
95:f4:29:be:fb:50:e5:5e:8c:85:8f:6c:24:f3:b8:
7c:d5:d6:d7:22:19:6d:6c:6e:77:a9:b4:bd:47:62:
1f:3e:6e:63:c3:d5:27:ed:d3:7a:c2:77:39:28:1b:
cb:27:89:63:10:ac:c8:2a:e6:c1:59:f3:89:57:b1:
38:04:19:ab:95:18:b7:60:7d:0c:51:08:1a:59:01:
f7:6b:1f:b8:46:c4:74:65:e0:73:b5:86:9e:8a:85:
29:50:30:2b:99:c5:d7:b2:10:69:65:05:7e:66:12:
9f:38:f5:96:ca:15:15:e1:3b:e2:3d:9b:88:01:e7:
84:15:04:7d:cc:53:23:6b:a6:b7:8e:9d:2b:07:cf:
10:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6D:83:03:8E:55:33:F9:43:04:1E:F5:A5:5B:2D:B7:59:C5:B2:03
X509v3 Authority Key Identifier:
keyid:C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/3G2DA45VM_lDBB71pVstt1nFsgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.163.1.0/24
143.163.12.0-143.163.17.255
143.163.22.0/24
143.163.66.0/23
193.23.96.0/24
194.114.32.0/23
194.114.40.0/23
194.114.61.0-194.114.67.255
194.114.70.0/23
194.114.74.0/24
194.114.77.0-194.114.82.255
194.114.85.0/24
194.114.94.0-194.114.119.255
194.114.125.0-194.114.126.255
IPv6:
2a01:4dc0::/42
Signature Algorithm: sha256WithRSAEncryption
8f:2a:3d:e0:a1:af:21:b7:1b:06:77:30:9b:bb:6f:91:04:de:
83:21:f8:3a:3a:f9:7c:dd:db:31:43:3f:10:46:8e:01:de:d5:
e5:9d:60:2f:6f:09:40:8c:d4:db:fa:ae:79:d0:ce:25:cc:58:
91:ae:f3:85:88:11:db:38:4a:e9:71:a2:22:35:76:8b:e7:34:
e8:d7:c2:74:f8:9e:67:91:f9:93:d7:65:08:81:bb:09:4b:76:
8f:44:92:41:04:b8:d1:73:0a:35:84:0c:22:d9:d7:80:1f:42:
ab:11:1c:b8:ea:d3:87:d2:94:d9:18:16:69:91:0a:7e:8a:b0:
7b:78:9a:e2:bf:c2:e8:fa:fc:be:e7:3d:e6:67:4f:65:32:af:
60:f6:cc:07:bf:ae:6a:f4:b7:96:97:92:04:32:53:3c:ce:38:
00:6a:0d:05:6b:9b:a4:6e:60:fb:d7:37:37:8b:cc:30:d0:f0:
17:cd:a4:52:31:28:ec:01:8d:43:70:87:f2:1a:7d:be:4c:a7:
71:31:03:25:c7:d8:d4:ca:8a:96:b2:94:63:12:68:b3:3c:57:
80:c8:7c:8f:96:95:7b:e8:e4:11:2a:cb:06:2b:ee:41:b2:fb:
46:b6:3e:97:35:fd:d2:34:14:b0:a7:b7:5a:fc:25:08:f4:c6:
8b:8e:02:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:54:27 2025 by rpki-client