Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/3MPO8ExEoX8R6QABWaQbGuwGg9E.roa
File: 3MPO8ExEoX8R6QABWaQbGuwGg9E.roa (raw, json)
Hash identifier: 5lhusFS+qA/vgQn2rpitxjL4CfZCvOGDVaUiQxUSark=
Subject key identifier: DC:C3:CE:F0:4C:44:A1:7F:11:E9:00:01:59:A4:1B:1A:EC:06:83:D1
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 018CFE6A2E3FC5D13C0A6B4ECAB5354076F7
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/3MPO8ExEoX8R6QABWaQbGuwGg9E.roa
Signing time: Fri 12 Jan 2024 16:03:40 +0000
ROA not before: Fri 12 Jan 2024 16:03:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 103.246.248.0/24 maxlen: 24
195.74.93.0/24 maxlen: 24
92.42.100.0/24 maxlen: 24
77.74.123.0/24 maxlen: 24
46.229.243.0/24 maxlen: 24
46.229.253.0/24 maxlen: 24
46.229.251.0/24 maxlen: 24
83.229.61.0/24 maxlen: 24
85.204.107.0/24 maxlen: 24
103.112.171.0/24 maxlen: 24
185.104.63.0/24 maxlen: 24
2a12:3200:4000::/36 maxlen: 36
2a12:3200:2000::/36 maxlen: 36
2a12:3200::/36 maxlen: 36
2a12:3200:1000::/36 maxlen: 36
2a12:3200:3000::/36 maxlen: 36
Validation: Failed, certificate revoked on Fri 26 Jan 2024 11:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fe:6a:2e:3f:c5:d1:3c:0a:6b:4e:ca:b5:35:40:76:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Jan 12 16:03:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcc3cef04c44a17f11e9000159a41b1aec0683d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5f:69:06:a2:8f:04:0b:d7:1e:a1:b7:94:26:
86:aa:09:4a:2a:52:f3:6d:4f:e0:77:71:c8:29:83:
00:e8:c3:4c:38:c0:bb:ef:7e:55:72:80:d5:0b:46:
eb:32:f7:25:b6:db:95:54:fa:3e:5b:ed:7d:e2:58:
0e:e8:c6:54:5c:f0:bc:fa:47:b3:c5:e1:8b:f1:9b:
c7:7f:5a:2a:7f:ad:3f:79:9d:9e:60:c2:f2:f7:b4:
85:41:91:6f:2e:66:d2:96:fb:39:73:f1:88:78:6f:
26:85:17:57:5c:3c:7d:02:3d:24:e9:39:33:67:61:
67:cf:16:52:17:be:dd:40:48:95:f2:d2:4c:a6:80:
90:c2:ae:78:e1:06:e4:1a:6d:cb:0d:7a:b5:ab:7a:
2d:68:b4:56:03:72:75:e3:66:6e:96:91:e7:9d:63:
43:21:5d:11:ee:e8:e9:d4:5b:cb:bd:30:8a:33:15:
34:ea:da:91:0a:c9:9a:df:b1:dc:c8:41:62:9e:61:
4b:ac:ec:d2:7f:07:4c:6a:95:22:b5:64:31:db:67:
04:5c:42:5d:14:44:5c:e3:43:bc:03:b4:99:76:a4:
7e:1b:3e:ab:57:e6:2b:89:96:bf:79:b2:84:96:fc:
10:97:3e:72:50:e0:e2:eb:93:95:a7:50:65:83:56:
88:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C3:CE:F0:4C:44:A1:7F:11:E9:00:01:59:A4:1B:1A:EC:06:83:D1
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/3MPO8ExEoX8R6QABWaQbGuwGg9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.243.0/24
46.229.251.0/24
46.229.253.0/24
77.74.123.0/24
83.229.61.0/24
85.204.107.0/24
92.42.100.0/24
103.112.171.0/24
103.246.248.0/24
185.104.63.0/24
195.74.93.0/24
IPv6:
2a12:3200::-2a12:3200:4fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
02:ff:51:75:4b:92:82:07:27:80:55:d3:97:c0:20:e1:58:1c:
3b:06:77:38:6a:99:6d:1f:25:e3:5a:76:fe:3e:d7:01:c9:34:
7b:07:68:57:22:4a:f9:1a:33:c1:6e:45:b1:ac:e4:71:81:15:
eb:2c:55:46:43:5e:c6:c3:da:51:81:f4:10:a2:4b:30:88:02:
d5:5c:db:31:0a:79:30:1b:e3:46:6e:53:b7:92:0c:19:28:de:
5a:0c:14:3c:b4:86:57:78:bd:32:30:16:74:d1:15:5b:34:ff:
19:2a:5d:fa:42:a3:48:5e:5f:49:6b:ef:37:0e:98:4c:47:57:
0d:fe:63:e6:46:d1:06:74:f6:5b:ab:6e:33:e7:12:90:91:a7:
cd:44:33:72:d4:c2:6a:e5:d2:d2:97:3a:d9:ce:7e:47:bf:01:
4b:16:2e:b0:40:0b:41:b9:e9:e9:5c:4f:3e:8c:ba:25:26:d1:
db:d9:b0:02:28:37:80:78:3a:42:5a:c7:34:65:40:9f:b1:54:
83:be:ef:60:42:0c:02:84:9d:06:37:c7:f9:58:19:a1:3a:0d:
be:c7:3c:ae:42:7b:46:9d:2c:f9:64:37:2d:7a:21:1f:d8:b3:
40:87:9e:3a:54:7f:f0:79:29:60:bc:b2:a7:55:6a:3b:7f:69:
ee:3c:35:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:49 2025 by rpki-client