Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/ggLRf2UnektAWHRgUEmXUERrYHg.roa
File: ggLRf2UnektAWHRgUEmXUERrYHg.roa (raw, json)
Hash identifier: pGiJP1tm9NoEl8mLNpb4P/62Knq5Cm9fQ8YfrQfBYVg=
Subject key identifier: 82:02:D1:7F:65:27:7A:4B:40:58:74:60:50:49:97:50:44:6B:60:78
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 018D5C69E2999E7F3578CDEA8E0023B1CF78
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/ggLRf2UnektAWHRgUEmXUERrYHg.roa
Signing time: Tue 30 Jan 2024 22:07:39 +0000
ROA not before: Tue 30 Jan 2024 22:07:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 46.229.243.0/24 maxlen: 24
46.229.251.0/24 maxlen: 24
46.229.253.0/24 maxlen: 24
77.74.123.0/24 maxlen: 24
83.229.61.0/24 maxlen: 24
85.204.107.0/24 maxlen: 24
92.42.100.0/24 maxlen: 24
103.112.171.0/24 maxlen: 24
103.244.144.0/24 maxlen: 24
103.244.145.0/24 maxlen: 24
103.246.248.0/24 maxlen: 24
185.104.63.0/24 maxlen: 24
195.74.93.0/24 maxlen: 24
2a12:3200::/36 maxlen: 36
2a12:3200:1000::/36 maxlen: 36
2a12:3200:2000::/36 maxlen: 36
2a12:3200:3000::/36 maxlen: 36
2a12:3200:4000::/36 maxlen: 36
Validation: Failed, certificate revoked on Fri 16 Feb 2024 21:32:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5c:69:e2:99:9e:7f:35:78:cd:ea:8e:00:23:b1:cf:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Jan 30 22:07:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8202d17f65277a4b4058746050499750446b6078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:3d:5e:83:22:6b:da:aa:0d:a2:d9:06:32:
04:86:0e:ef:ca:bd:81:a2:a9:f2:1d:03:1f:3c:8b:
44:cf:fa:f2:b4:ff:b9:ea:70:38:f9:34:ec:79:01:
4b:36:aa:a8:b0:d9:1d:b9:24:ac:45:a3:52:f2:27:
36:3c:15:3a:e7:bd:df:e6:a4:70:6e:2e:ab:8d:e5:
2a:f3:55:51:d4:58:1f:33:06:4d:b5:8b:6e:8e:58:
89:9d:d6:5f:ba:09:f3:a4:65:c4:a9:94:78:cc:41:
a9:e0:ab:9b:f9:f3:cb:ac:82:ba:1c:06:85:70:4c:
4d:68:e6:06:44:1e:ed:d8:ad:37:3d:fd:eb:6b:05:
76:29:b7:27:71:b8:5e:53:f8:a1:d6:67:9d:81:79:
74:33:9d:af:89:3c:6e:e9:6a:e9:62:39:d6:fa:73:
30:53:45:b8:f7:44:0d:21:bc:1f:02:9a:4d:64:a2:
b9:f4:79:f4:68:aa:e7:9e:f5:07:a2:ba:74:b2:14:
8b:67:9d:6e:c1:c5:27:53:01:33:de:0e:f6:9e:f7:
01:ee:b8:62:9c:7a:e1:c2:8d:d9:2f:44:21:74:59:
82:88:61:8b:7d:ad:03:db:41:5c:29:68:35:9c:b7:
33:04:b3:88:30:55:df:3a:e6:d1:de:d8:65:27:0a:
7c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:02:D1:7F:65:27:7A:4B:40:58:74:60:50:49:97:50:44:6B:60:78
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/ggLRf2UnektAWHRgUEmXUERrYHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.243.0/24
46.229.251.0/24
46.229.253.0/24
77.74.123.0/24
83.229.61.0/24
85.204.107.0/24
92.42.100.0/24
103.112.171.0/24
103.244.144.0/23
103.246.248.0/24
185.104.63.0/24
195.74.93.0/24
IPv6:
2a12:3200::-2a12:3200:4fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7b:e3:c3:ff:2d:ef:87:55:69:40:ce:ff:03:7f:65:1c:38:33:
d4:78:14:54:21:f3:1f:62:ee:03:4e:1c:63:2c:2c:ba:0c:50:
53:85:ce:30:5f:91:16:4d:49:2a:5c:81:17:82:74:3f:4b:70:
b5:f2:e4:e6:9a:52:19:4b:58:7f:66:ab:09:8e:c5:e0:5a:c1:
d0:9f:f4:18:ae:04:95:f8:32:4c:81:ff:2c:53:eb:70:d3:53:
d0:ca:9f:1e:c4:d8:2f:f1:4c:97:e5:a6:27:08:18:44:a6:51:
4a:1d:87:79:ae:08:52:97:5d:fc:59:5e:28:ea:d9:d5:c3:da:
28:f0:10:0e:2b:8a:bc:1e:ed:8b:af:2e:cf:85:f0:61:94:86:
ed:21:6a:59:6e:29:9a:e2:37:55:ff:52:23:15:96:6f:b2:de:
7e:56:90:ae:f5:6a:26:72:5d:b7:d7:de:1b:65:48:7d:ef:fe:
c1:59:0f:cc:c2:1a:31:d8:00:48:22:4d:73:51:6d:59:77:93:
ff:21:99:a1:f9:43:cf:0a:69:dd:fe:a8:7a:2b:d7:8c:91:bc:
26:20:fe:71:cc:30:e3:98:c2:ea:84:c7:5e:66:9f:a3:cd:26:
1f:05:2a:a1:52:f1:fb:da:84:fd:f2:81:84:d2:75:fb:72:41:
a2:40:01:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:15 2025 by rpki-client