Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/lRtnOFpYXCMt7lZy4vQN8xD4oF8.roa
File: lRtnOFpYXCMt7lZy4vQN8xD4oF8.roa (raw, json)
Hash identifier: Kl0fn5lkcgkGxBkz3s4J11AJ+gOGejR7NW9Pecz9BS0=
Subject key identifier: 95:1B:67:38:5A:58:5C:23:2D:EE:56:72:E2:F4:0D:F3:10:F8:A0:5F
Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Certificate serial: 018CC794CCAD6A98529E53C1F712EE8A3627
Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/lRtnOFpYXCMt7lZy4vQN8xD4oF8.roa
Signing time: Tue 02 Jan 2024 00:31:06 +0000
ROA not before: Tue 02 Jan 2024 00:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 123.100.227.0/24 maxlen: 24
64.225.244.0/23 maxlen: 23
148.222.40.0/22 maxlen: 22
104.225.253.0/24 maxlen: 24
216.183.120.0/24 maxlen: 24
64.95.150.0/23 maxlen: 23
167.234.38.0/24 maxlen: 24
63.251.117.0/24 maxlen: 24
216.203.15.0/24 maxlen: 24
198.49.103.0/24 maxlen: 24
46.17.217.0/24 maxlen: 24
91.198.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Jul 2024 02:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:cc:ad:6a:98:52:9e:53:c1:f7:12:ee:8a:36:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Validity
Not Before: Jan 2 00:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=951b67385a585c232dee5672e2f40df310f8a05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b9:71:10:50:1e:65:50:1b:33:c7:01:aa:05:
a1:8b:23:5a:47:80:9e:86:c6:75:78:75:68:b7:70:
9e:ae:b0:33:81:97:5d:92:dd:e3:ce:9e:76:17:98:
90:44:0b:30:8f:37:b7:36:55:53:ca:3d:05:28:eb:
18:3e:70:57:f6:24:fc:9e:6c:45:7b:35:58:62:43:
4b:6b:56:da:8a:3d:d7:98:44:9b:81:04:88:df:c4:
8f:12:02:09:9c:d1:7d:0b:89:7b:dd:b1:1f:cc:9d:
79:02:c4:6c:c1:43:07:85:bb:20:a8:06:e9:9f:b5:
69:77:c9:e5:46:2f:24:e9:92:70:d4:be:2d:52:73:
a0:3e:70:bb:fb:17:9c:5a:7c:29:98:58:4b:8e:fe:
66:f7:97:f7:49:7a:28:bc:23:d9:db:4a:7d:53:27:
78:96:78:07:57:dc:07:c1:14:18:2b:83:68:0f:f9:
ec:af:67:fb:c8:6d:b6:d6:2a:61:63:d8:0c:a9:ed:
25:66:13:2d:fa:77:59:1f:f2:ea:7f:11:be:c4:b1:
b1:c4:c4:1b:78:26:8e:d7:f0:fe:07:95:24:8a:bb:
8d:84:d7:b1:d0:b4:ef:31:c4:9e:46:16:35:0b:2f:
05:7f:75:10:33:a4:7e:df:8d:9b:0b:0b:83:95:25:
36:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1B:67:38:5A:58:5C:23:2D:EE:56:72:E2:F4:0D:F3:10:F8:A0:5F
X509v3 Authority Key Identifier:
keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/lRtnOFpYXCMt7lZy4vQN8xD4oF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.217.0/24
63.251.117.0/24
64.95.150.0/23
64.225.244.0/23
91.198.19.0/24
104.225.253.0/24
123.100.227.0/24
148.222.40.0/22
167.234.38.0/24
198.49.103.0/24
216.183.120.0/24
216.203.15.0/24
Signature Algorithm: sha256WithRSAEncryption
e8:c8:3f:fb:dc:af:98:bf:f6:aa:84:f0:f9:f5:0d:5a:72:ab:
00:e8:dd:82:ca:54:4a:ce:e4:54:37:66:31:96:dd:d0:16:23:
51:30:59:55:ad:05:16:78:0f:1f:50:dd:80:01:e2:46:ea:82:
a1:7b:68:10:9b:4f:07:c4:ac:e0:d0:90:f2:03:44:fd:29:7f:
53:b1:24:d4:b8:ea:fd:b5:9c:d8:6d:e1:bd:8b:47:70:1a:ac:
be:f3:87:7e:65:85:2c:b5:1f:f3:c4:3f:cb:82:9d:da:b1:9a:
b4:32:1c:4a:1f:94:81:32:dd:e7:74:7f:94:60:df:0d:5e:db:
c2:f1:a2:68:82:bc:bb:18:29:a6:e2:ba:00:08:5a:fb:54:88:
27:19:03:ab:f1:92:7c:30:b8:2c:ce:43:2f:5b:a2:fe:e6:04:
a1:cb:66:8a:2a:d7:db:cd:6d:3e:97:bb:58:b8:34:16:d4:8b:
0e:45:af:eb:48:10:68:2f:f5:e1:aa:0a:81:5d:4d:1f:4b:15:
9b:08:08:65:4c:9d:04:8b:5d:8c:c4:48:37:b7:d9:01:c7:6c:
82:f0:49:a6:3e:53:12:70:dc:38:66:de:7d:3c:33:d1:90:50:
e4:e8:29:52:ed:aa:a8:54:a8:cd:59:a5:ad:40:c8:42:f3:34:
72:c2:f2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:40:05 2025 by rpki-client