Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/fOgDItGeHiUCisASoEXdI69lgAg.roa
File: fOgDItGeHiUCisASoEXdI69lgAg.roa (raw, json)
Hash identifier: scBbTBkETNNpZlie9Lal/rZ0pibP6XOfO99inpdu/rg=
Subject key identifier: 7C:E8:03:22:D1:9E:1E:25:02:8A:C0:12:A0:45:DD:23:AF:65:80:08
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 01944AF1AA13FD8C395E69B05AF64C6898F8
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/fOgDItGeHiUCisASoEXdI69lgAg.roa
Signing time: Thu 09 Jan 2025 12:02:19 +0000
ROA not before: Thu 09 Jan 2025 12:02:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44901
IP address blocks: 46.253.4.0/24 maxlen: 24
91.132.60.0/24 maxlen: 24
91.132.62.0/24 maxlen: 24
91.132.63.0/24 maxlen: 24
93.94.140.0/24 maxlen: 24
93.94.142.0/24 maxlen: 24
95.169.202.0/24 maxlen: 24
185.1.156.0/24 maxlen: 24
185.243.213.0/24 maxlen: 24
2a09:be80::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 28 Mar 2025 15:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:f1:aa:13:fd:8c:39:5e:69:b0:5a:f6:4c:68:98:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: Jan 9 12:02:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ce80322d19e1e25028ac012a045dd23af658008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1b:19:3c:e4:4c:76:b3:32:e9:8d:28:a7:39:
a9:38:9b:84:c2:80:28:2a:50:04:43:00:2b:73:ce:
2b:b6:6c:fb:41:d3:e2:d2:69:5c:33:a6:e0:5f:3a:
2d:c7:b0:eb:9b:df:07:a8:23:4d:a0:a7:e8:3e:fd:
c0:ef:85:2d:07:1f:10:80:e0:0b:14:66:72:6f:f3:
50:ff:bf:44:d8:59:a8:fa:57:30:9d:e2:b9:81:35:
58:56:4b:1f:37:37:0c:01:13:eb:e9:95:e8:3f:5d:
7e:5b:34:e2:27:82:3f:19:08:9b:bf:7c:af:d7:71:
a1:52:f6:11:9a:94:37:41:ac:bb:ac:5a:44:09:65:
72:74:10:8a:6f:a9:ad:25:ed:e6:5a:08:57:f2:cf:
e4:27:79:1b:7f:6a:b4:e7:9b:33:b6:68:dd:94:24:
63:cf:00:c6:ef:ea:d8:5c:c5:39:18:b4:11:e0:10:
c0:e1:07:32:a2:97:75:4e:56:24:08:68:37:d7:52:
5b:0c:b9:f2:ca:8e:e5:62:d5:f9:bd:00:61:39:cd:
e8:1e:7b:70:56:09:69:a4:a5:d1:8e:b4:90:6f:bf:
7b:f1:1b:47:95:fb:58:5e:92:63:f3:7a:62:84:6d:
cf:1e:08:a7:03:94:ff:51:0f:ae:b8:d5:b6:7a:db:
04:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E8:03:22:D1:9E:1E:25:02:8A:C0:12:A0:45:DD:23:AF:65:80:08
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/fOgDItGeHiUCisASoEXdI69lgAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.4.0/24
91.132.60.0/24
91.132.62.0/23
93.94.140.0/24
93.94.142.0/24
95.169.202.0/24
185.1.156.0/24
185.243.213.0/24
IPv6:
2a09:be80::/32
Signature Algorithm: sha256WithRSAEncryption
7b:f8:56:32:45:82:fa:22:79:a8:9e:3b:68:e0:bf:6a:bc:a6:
5c:27:44:7b:31:e0:db:2e:78:a2:f3:ff:c8:32:eb:66:d4:58:
1f:b4:02:e6:c5:1e:13:52:12:39:5b:52:06:38:82:5d:0f:83:
44:5f:bc:36:5d:4a:34:f4:f2:14:4f:d4:dd:8b:c8:60:69:0e:
51:c7:6e:84:40:be:30:e9:cb:0c:22:e7:2f:0d:e3:04:db:f2:
d8:91:10:99:27:4d:e6:22:df:65:85:9c:88:cd:cb:8f:e1:7a:
d1:09:16:b9:84:da:bc:f9:bc:14:e9:4e:8e:27:32:63:e6:1c:
30:2b:72:b6:ba:b9:7b:3f:a2:8a:b6:98:fc:19:04:91:33:76:
12:16:b9:7f:1d:da:de:1a:d5:93:ba:95:c5:3e:9c:4d:3f:96:
0c:8d:10:04:24:6c:96:31:45:b3:1c:5c:de:1e:d8:07:34:9a:
e2:58:1f:2a:be:2a:ab:ea:04:58:91:b0:31:cc:5d:40:18:75:
43:1f:8d:93:57:25:11:9a:5a:fc:f4:ad:86:0a:37:b7:98:c2:
ea:54:83:6c:d2:bd:13:3e:dd:a0:d9:39:15:85:cf:d9:0c:fc:
c1:8c:d8:92:7c:e6:22:ca:e2:d9:fb:63:a2:76:b9:85:92:9b:
ca:33:d7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:43:39 2025 by rpki-client