Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/afwUSUP0BmKy8iJ5sbo-6OfTodU.roa
File: afwUSUP0BmKy8iJ5sbo-6OfTodU.roa (raw, json)
Hash identifier: YidU+ILyI1SFmYXX3w25KPK3lC1KLBG0Aj89t1ioLmk=
Subject key identifier: 69:FC:14:49:43:F4:06:62:B2:F2:22:79:B1:BA:3E:E8:E7:D3:A1:D5
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 018CC3B6E95D99F19A3FD7343C24E1391153
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/afwUSUP0BmKy8iJ5sbo-6OfTodU.roa
Signing time: Mon 01 Jan 2024 06:29:53 +0000
ROA not before: Mon 01 Jan 2024 06:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44901
IP address blocks: 46.253.1.0/24 maxlen: 24
46.253.3.0/24 maxlen: 24
46.253.2.0/24 maxlen: 24
46.253.4.0/24 maxlen: 24
46.253.0.0/24 maxlen: 24
46.253.7.0/24 maxlen: 24
46.253.5.0/24 maxlen: 24
46.253.6.0/24 maxlen: 24
91.132.60.0/24 maxlen: 24
91.132.63.0/24 maxlen: 24
91.132.62.0/24 maxlen: 24
185.243.213.0/24 maxlen: 24
95.169.203.0/24 maxlen: 24
95.169.202.0/24 maxlen: 24
2a09:be80::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:51:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:e9:5d:99:f1:9a:3f:d7:34:3c:24:e1:39:11:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: Jan 1 06:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69fc144943f40662b2f22279b1ba3ee8e7d3a1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2d:2e:34:4e:49:10:4f:69:94:49:49:b5:a0:
b1:1b:c6:6b:c5:65:f9:8f:10:76:e6:8f:fa:1a:3c:
58:5e:7e:18:50:0a:b0:3d:e1:1d:92:13:3c:48:40:
f1:a5:39:61:ba:b6:80:d8:82:1d:a0:47:96:b7:c3:
63:57:0e:f2:a1:53:84:78:f1:70:2f:ec:85:fd:cf:
ad:38:b6:0f:7e:6e:d7:72:e8:c4:56:3b:77:46:ce:
46:16:b1:98:1e:e7:42:d1:cf:50:e7:d3:54:9f:45:
ae:a4:35:00:d7:9b:bc:e2:23:44:46:70:54:20:bd:
dc:6c:f7:2c:65:3d:11:b6:9f:56:d5:6d:dc:aa:c7:
83:0e:f8:16:4d:92:5b:04:ad:0a:a2:f8:2e:4d:b8:
92:d1:e4:04:9c:98:4d:1f:79:c0:9e:0d:ca:56:44:
db:36:ec:d5:14:5c:78:99:47:a2:49:7d:a9:91:93:
70:43:b2:bc:39:1f:c4:4f:ed:07:1f:c9:2d:f0:c4:
82:8a:8f:ec:9e:fd:3e:30:51:12:d6:39:c9:8f:d4:
65:bc:8f:db:20:bf:c5:51:a4:d8:d1:a5:aa:d1:0c:
cb:ce:22:b7:bb:d9:95:1b:7b:b6:11:8c:f2:c3:86:
7c:2f:0e:59:f4:64:f2:55:5f:ca:53:67:05:3c:81:
2c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FC:14:49:43:F4:06:62:B2:F2:22:79:B1:BA:3E:E8:E7:D3:A1:D5
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/afwUSUP0BmKy8iJ5sbo-6OfTodU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.0.0/21
91.132.60.0/24
91.132.62.0/23
95.169.202.0/23
185.243.213.0/24
IPv6:
2a09:be80::/32
Signature Algorithm: sha256WithRSAEncryption
51:df:8d:75:7a:1b:6a:fb:6c:1f:0b:59:d7:60:7e:9a:ac:2f:
a8:c4:66:cc:eb:ae:8c:dd:a8:be:d3:a1:9d:c6:95:7f:0b:19:
6c:87:2a:13:d0:ca:88:29:ed:62:81:c5:9f:6d:9c:e1:80:91:
77:b8:78:d9:52:e2:21:8d:e8:f9:d1:22:8f:b6:cd:ad:67:67:
e2:00:35:31:ae:3e:c3:a1:b8:2f:e9:dd:6f:d2:4c:0d:53:1b:
21:95:89:be:67:1d:b3:af:cd:ec:c0:c8:53:62:27:66:eb:28:
39:dc:74:b9:16:8d:65:57:bf:57:d3:9f:2b:14:0a:27:e5:2d:
4a:34:3e:70:b9:e1:49:dc:9c:8b:de:d4:ba:9b:e0:f5:01:ee:
e0:ef:47:19:1f:e4:60:28:79:8d:5a:58:c6:e9:13:8b:f3:69:
88:5a:0c:72:10:34:13:5a:ea:63:99:ff:1d:11:b6:1f:ce:4e:
e4:f5:d2:ff:e7:a3:62:65:1c:d5:33:90:f2:25:2e:22:c1:b6:
f5:8f:ef:9f:c3:66:1c:8a:9c:7d:f0:36:6b:10:d6:e3:9b:3d:
fe:28:fe:9e:d6:8c:e6:b8:c0:77:0d:55:4e:04:b0:fe:dd:f8:
49:a0:67:93:40:52:14:a0:a6:4f:ac:6c:db:c2:bf:4d:84:e2:
7d:f0:d4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:59:40 2025 by rpki-client