Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/3TKYT7IfkzUEsVZrAsN7MN0AFbA.roa
File: 3TKYT7IfkzUEsVZrAsN7MN0AFbA.roa (raw, json)
Hash identifier: OIwDNESeP6NVIwp/4RlnN+tLg1moS0HM/Zhq9FX/H88=
Subject key identifier: DD:32:98:4F:B2:1F:93:35:04:B1:56:6B:02:C3:7B:30:DD:00:15:B0
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018D1B8621848B35BFE0ABB2BE9611F799CA
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/3TKYT7IfkzUEsVZrAsN7MN0AFbA.roa
Signing time: Thu 18 Jan 2024 07:43:11 +0000
ROA not before: Thu 18 Jan 2024 07:43:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 31.170.55.0/24 maxlen: 24
94.74.152.0/22 maxlen: 24
94.74.156.0/24 maxlen: 24
109.203.160.0/24 maxlen: 24
109.203.168.0/21 maxlen: 24
109.203.176.0/21 maxlen: 24
109.203.184.0/21 maxlen: 24
176.46.132.0/24 maxlen: 24
176.46.133.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.138.0/24 maxlen: 24
176.46.139.0/24 maxlen: 24
176.46.140.0/24 maxlen: 24
176.46.141.0/24 maxlen: 24
176.46.142.0/24 maxlen: 24
176.46.145.0/24 maxlen: 24
176.46.147.0/24 maxlen: 24
176.46.148.0/24 maxlen: 24
176.46.150.0/24 maxlen: 24
176.46.151.0/24 maxlen: 24
176.46.153.0/24 maxlen: 24
176.46.154.0/24 maxlen: 24
176.46.155.0/24 maxlen: 24
176.46.156.0/24 maxlen: 24
176.46.157.0/24 maxlen: 24
176.46.158.0/24 maxlen: 24
185.34.160.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 16:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1b:86:21:84:8b:35:bf:e0:ab:b2:be:96:11:f7:99:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 18 07:43:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd32984fb21f933504b1566b02c37b30dd0015b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:06:0d:56:c7:33:a3:e9:10:84:f2:f9:94:03:
8d:eb:e0:66:47:f2:09:43:2a:58:b5:0c:ea:59:4a:
aa:b8:1b:a1:65:05:bb:7e:db:c2:66:bf:05:8d:15:
c3:87:74:53:95:2f:7a:88:85:08:b8:ce:67:56:2f:
ea:d0:6c:54:22:d5:0e:a7:45:95:38:44:d4:dc:79:
d4:a5:a6:26:70:42:20:79:01:52:94:6f:b2:fe:0d:
09:d4:58:f8:d8:26:bc:08:b4:5b:df:0c:19:56:d4:
e7:c2:4e:ee:bd:f0:45:2a:e9:e5:2b:51:ac:9c:08:
df:53:88:ae:52:b4:52:5e:a2:81:78:eb:9b:11:95:
33:e2:28:97:ee:5c:2d:0d:ad:2a:34:78:df:68:74:
e1:18:91:b9:7b:aa:fc:08:87:ef:fd:4b:6e:15:12:
d5:a0:2f:d8:5d:97:f9:16:5c:e0:8e:03:f3:c2:93:
f5:21:f9:94:e0:f6:5f:13:5f:a8:49:1d:83:80:3b:
5b:96:7c:66:fb:31:18:d7:81:a7:71:9d:b1:ec:0a:
48:81:a9:47:6e:d3:e9:ef:8b:e5:f2:75:ec:15:ef:
5e:5c:66:d1:67:0a:e3:6d:cd:0f:c0:4f:4d:0e:81:
7c:18:e3:11:18:3f:ab:1e:fb:a5:22:86:7d:ae:3f:
d0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:32:98:4F:B2:1F:93:35:04:B1:56:6B:02:C3:7B:30:DD:00:15:B0
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/3TKYT7IfkzUEsVZrAsN7MN0AFbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
94.74.152.0-94.74.156.255
109.203.160.0/24
109.203.168.0-109.203.191.255
176.46.132.0/23
176.46.136.0/24
176.46.138.0-176.46.142.255
176.46.145.0/24
176.46.147.0-176.46.148.255
176.46.150.0/23
176.46.153.0-176.46.158.255
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
16:1a:3d:38:bb:34:a7:37:b8:12:83:b8:66:ae:30:a1:22:99:
e0:33:a6:30:9a:7c:d8:45:2d:c8:9e:62:e2:cd:2a:ef:b3:cf:
1a:91:e7:9f:94:8f:ff:17:15:ab:e2:7e:6a:41:4c:0d:bb:85:
b8:3a:c2:0d:fe:a5:d2:a7:ab:1c:c2:84:85:ba:3f:d5:49:a1:
9a:c0:f1:41:be:00:d0:bd:6c:e6:e7:a5:7a:17:5d:fa:6a:9c:
96:8c:64:26:fe:a0:4d:94:8b:7a:42:81:52:0a:ea:f3:f1:63:
94:27:67:15:7e:95:af:f0:63:57:09:09:b9:0f:3d:e3:83:1f:
5b:e2:03:10:d7:68:3a:ff:4a:e8:a2:c0:71:bb:0c:01:a3:48:
07:7d:5e:5d:d3:b7:d6:60:f5:d1:e6:5f:a2:2b:70:17:be:34:
ea:9c:e0:6c:2b:63:89:44:c5:fc:11:68:22:dc:10:33:8b:70:
63:e2:82:4c:b3:d9:70:5b:b6:c7:cd:27:4a:63:27:1c:af:9d:
89:6b:9a:c4:d6:60:f6:d6:2e:f9:3f:58:e6:eb:6a:aa:94:b7:
82:b7:4a:71:0a:2b:d7:80:c0:e2:d6:a0:89:a8:c0:84:1e:20:
56:b8:20:58:aa:58:ea:08:e6:b8:a5:cd:a9:4b:11:eb:ea:62:
6e:d6:66:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:23 2025 by rpki-client