Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/h3xAW6RI5VsDsW7rGD5FD_aqH6c.roa
File: h3xAW6RI5VsDsW7rGD5FD_aqH6c.roa (raw, json)
Hash identifier: S98vldJuoxWYyBOWK2eHxDbPixaGGF61w8XUFVKqqK4=
Subject key identifier: 87:7C:40:5B:A4:48:E5:5B:03:B1:6E:EB:18:3E:45:0F:F6:AA:1F:A7
Certificate issuer: /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Certificate serial: 0195B52894668D49F383B5274C921159B5A6
Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/h3xAW6RI5VsDsW7rGD5FD_aqH6c.roa
Signing time: Thu 20 Mar 2025 20:04:50 +0000
ROA not before: Thu 20 Mar 2025 20:04:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49318
IP address blocks: 46.28.248.0/21 maxlen: 21
46.28.248.0/23 maxlen: 23
46.28.248.0/24 maxlen: 24
46.28.249.0/24 maxlen: 24
46.28.250.0/24 maxlen: 24
46.28.251.0/24 maxlen: 24
46.28.252.0/24 maxlen: 24
46.28.253.0/24 maxlen: 24
46.28.254.0/24 maxlen: 24
46.28.255.0/24 maxlen: 24
188.93.176.0/21 maxlen: 21
188.93.176.0/24 maxlen: 24
188.93.177.0/24 maxlen: 24
188.93.178.0/24 maxlen: 24
188.93.179.0/24 maxlen: 24
188.93.180.0/24 maxlen: 24
188.93.181.0/24 maxlen: 24
188.93.182.0/24 maxlen: 24
188.93.183.0/24 maxlen: 24
194.110.124.0/23 maxlen: 23
194.110.124.0/24 maxlen: 24
194.110.125.0/24 maxlen: 24
194.110.130.0/23 maxlen: 23
194.110.130.0/24 maxlen: 24
194.110.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Mar 2025 22:53:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b5:28:94:66:8d:49:f3:83:b5:27:4c:92:11:59:b5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Validity
Not Before: Mar 20 20:04:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=877c405ba448e55b03b16eeb183e450ff6aa1fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f5:91:88:54:98:08:be:6f:e2:dd:61:6b:17:
1f:ba:30:d1:c5:c5:b5:c6:c8:c3:af:36:47:0a:f6:
eb:a6:3c:46:01:79:0d:3b:1f:06:01:ad:99:92:d8:
92:37:27:cd:8a:66:06:77:c5:d3:ff:d3:31:8f:7b:
b8:7e:db:a8:14:3d:51:31:09:5d:0d:1f:31:e1:7a:
67:d3:f0:21:91:0d:01:f1:18:bd:79:fc:4f:a1:70:
37:70:a4:ab:0a:c9:df:1e:12:b4:6c:c0:52:2f:af:
f0:52:bf:06:ae:d2:33:fa:ff:42:d3:53:e2:66:76:
d2:b7:6a:a2:90:74:98:b2:0e:e0:cd:e5:63:29:8c:
28:b4:41:b3:50:a0:86:ca:d8:57:2c:6d:84:8b:f9:
97:e5:66:3c:41:7d:c4:19:e1:4d:fd:96:59:73:27:
ef:fd:23:77:8d:f2:9e:63:30:01:3e:d2:9c:ba:4a:
03:71:ac:2c:88:b8:7b:98:3c:ae:e4:25:45:26:4d:
9e:4f:00:52:7d:90:f9:49:e9:dc:94:2d:72:60:9a:
e0:be:e8:6c:db:fa:e7:f5:61:9f:01:29:7c:7e:0e:
a0:1a:32:e1:b6:c3:8e:0d:9a:39:e0:fb:7e:14:cc:
a5:a8:5d:19:e9:e9:d3:2a:3b:ec:f7:29:c4:ec:f1:
fe:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7C:40:5B:A4:48:E5:5B:03:B1:6E:EB:18:3E:45:0F:F6:AA:1F:A7
X509v3 Authority Key Identifier:
keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/h3xAW6RI5VsDsW7rGD5FD_aqH6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.248.0/21
188.93.176.0/21
194.110.124.0/23
194.110.130.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:a9:d4:7e:df:89:a8:6f:2f:58:d2:fb:9f:2a:e4:3f:5e:66:
d9:7a:88:b1:52:14:a5:8d:3f:c6:90:bd:45:b5:66:47:14:82:
b2:ea:0d:4d:75:a3:8f:ae:f9:90:a2:49:67:6b:00:34:a6:7e:
70:16:c1:eb:65:cb:8e:7d:26:1d:73:bd:83:b8:c0:2d:6e:fd:
c8:b7:00:ae:e0:c9:1f:79:0d:d6:ef:59:53:a9:a1:4d:c4:eb:
8d:b8:a4:fd:79:72:ac:ba:1d:3b:7a:fe:a5:17:8b:e8:da:89:
3d:c8:0f:97:b4:93:f5:06:0d:b4:5f:41:11:4f:e7:8a:03:1d:
53:d6:7a:96:3b:a4:f9:a2:da:3a:80:db:aa:5e:66:1c:34:6d:
2a:d4:e0:95:03:d5:bb:29:bc:6e:05:d3:32:f2:8a:f0:89:55:
94:d1:06:2a:24:85:cb:ea:e1:12:1b:80:78:f8:4c:94:bc:4c:
fe:86:bd:e8:0e:b2:5e:a4:a4:be:51:11:0b:9b:96:3b:f8:85:
12:5f:03:c2:2a:6c:f4:c2:78:99:71:a0:f7:70:9d:e7:be:77:
7c:50:5d:e9:b9:43:a0:1b:46:69:2c:cf:34:fb:c4:40:72:85:
5b:99:ec:68:f6:23:f2:15:14:9e:e9:87:7e:4e:f0:65:b5:66:
8b:bc:42:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:17:57 2025 by rpki-client