Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/q8huDhldvlQIqLSdXQk74N6Pq8k.roa
File: q8huDhldvlQIqLSdXQk74N6Pq8k.roa (raw, json)
Hash identifier: YolCkO3iB/DpV4S+HrDzVPZrRHdHkO8ZHC6Q64MpHOg=
Subject key identifier: AB:C8:6E:0E:19:5D:BE:54:08:A8:B4:9D:5D:09:3B:E0:DE:8F:AB:C9
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 01925C9D59601FB6180374985C804C125BBF
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/q8huDhldvlQIqLSdXQk74N6Pq8k.roa
Signing time: Sat 05 Oct 2024 12:17:48 +0000
ROA not before: Sat 05 Oct 2024 12:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 46.229.243.0/24 maxlen: 24
46.229.251.0/24 maxlen: 24
46.229.253.0/24 maxlen: 24
76.164.200.0/24 maxlen: 24
76.164.201.0/24 maxlen: 24
77.74.123.0/24 maxlen: 24
83.229.61.0/24 maxlen: 24
85.204.107.0/24 maxlen: 24
92.42.100.0/24 maxlen: 24
103.112.171.0/24 maxlen: 24
103.121.48.0/24 maxlen: 24
103.121.49.0/24 maxlen: 24
103.126.50.0/24 maxlen: 24
103.126.51.0/24 maxlen: 24
103.244.144.0/24 maxlen: 24
103.244.145.0/24 maxlen: 24
103.246.248.0/24 maxlen: 24
185.104.63.0/24 maxlen: 24
195.74.93.0/24 maxlen: 24
203.14.32.0/24 maxlen: 24
203.25.108.0/24 maxlen: 24
2a12:3200::/36 maxlen: 36
2a12:3200:1000::/36 maxlen: 36
2a12:3200:2000::/36 maxlen: 36
2a12:3200:3000::/36 maxlen: 36
2a12:3200:4000::/36 maxlen: 36
2a12:3200:5000::/36 maxlen: 36
2a12:3200:6000::/36 maxlen: 36
Validation: Failed, certificate revoked on Sun 10 Nov 2024 14:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:5c:9d:59:60:1f:b6:18:03:74:98:5c:80:4c:12:5b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Oct 5 12:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abc86e0e195dbe5408a8b49d5d093be0de8fabc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7d:92:50:8b:41:e7:9b:61:dc:a7:49:25:ff:
03:f9:f7:2f:18:13:12:3b:90:a6:fc:28:e1:da:15:
af:0f:8e:3e:8f:e5:e1:3d:a3:45:56:29:38:ca:0c:
c4:d8:d8:0e:ba:9c:2e:da:23:ff:b5:83:a7:de:17:
af:f6:30:fb:a6:6e:89:f7:9b:c8:44:4b:56:bc:97:
ad:23:a5:7e:b8:90:5b:57:fc:39:af:72:33:cc:3d:
4f:99:4c:83:31:16:1f:d9:bf:c8:02:5b:2d:5c:bf:
8c:0a:b2:37:88:97:13:18:ea:61:93:02:24:bf:a7:
a1:92:67:73:67:f6:a6:9f:9c:27:a9:b9:e3:eb:10:
0e:0c:d7:06:36:11:25:3e:9f:66:02:7f:c7:41:99:
7b:1c:ca:b6:25:e7:fd:5f:6e:50:55:47:f7:5c:13:
fc:37:6d:eb:f2:fb:a0:0c:cf:92:0c:56:ef:6f:08:
da:38:e4:fe:f7:41:44:2e:83:f0:0c:dc:b0:b0:91:
5b:7b:7e:00:1c:2a:ec:21:cd:f1:64:00:25:d1:27:
bb:92:d5:63:b7:fc:11:19:8e:32:7b:df:a0:2c:35:
88:4a:ac:2c:79:de:b9:24:e3:41:c4:7d:ec:3d:df:
0f:bb:70:b2:ad:d9:46:5c:fb:be:1b:07:5e:d4:00:
7f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C8:6E:0E:19:5D:BE:54:08:A8:B4:9D:5D:09:3B:E0:DE:8F:AB:C9
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/q8huDhldvlQIqLSdXQk74N6Pq8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.243.0/24
46.229.251.0/24
46.229.253.0/24
76.164.200.0/23
77.74.123.0/24
83.229.61.0/24
85.204.107.0/24
92.42.100.0/24
103.112.171.0/24
103.121.48.0/23
103.126.50.0/23
103.244.144.0/23
103.246.248.0/24
185.104.63.0/24
195.74.93.0/24
203.14.32.0/24
203.25.108.0/24
IPv6:
2a12:3200::-2a12:3200:6fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
e7:06:64:06:1c:80:07:40:9e:07:3f:bf:94:7c:f9:e9:a1:38:
79:e6:43:d9:52:bd:ab:b1:cf:dd:9e:e2:1b:e3:52:90:84:bf:
49:9f:dc:23:1e:f0:39:21:ba:22:32:b7:34:66:7b:fa:96:33:
11:69:05:67:2e:cb:04:23:b1:8f:a4:2f:1b:ab:5d:fb:ef:c5:
44:b7:d2:6b:c4:ed:58:68:e5:18:50:4e:cd:14:8c:fe:65:fd:
bd:10:e8:61:82:e7:1f:18:e3:1e:85:ca:b1:74:60:73:54:a7:
40:7b:63:13:c1:5f:44:42:7c:d8:8a:04:2d:88:c6:c1:99:b1:
ca:3f:66:cf:bf:64:eb:0e:cb:00:f1:70:9a:e1:35:a2:14:82:
82:db:70:f1:8c:74:15:da:a5:13:74:78:3d:19:e6:3b:e3:56:
8f:42:04:a8:89:12:74:09:40:35:aa:9b:d1:af:56:80:2c:ff:
d1:b4:ba:d6:aa:a4:8f:40:b8:1a:89:b7:cd:5e:98:3f:50:c3:
17:c6:3d:4c:ff:9e:ce:77:5d:e0:56:40:73:c4:82:6e:2d:35:
be:d5:5c:0d:65:e2:f4:61:f6:14:2e:dd:96:fd:1c:46:c9:8a:
e7:6e:b5:81:89:9a:69:10:7a:0f:61:c7:6e:c4:25:3b:ba:23:
27:14:d5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:21:01 2025 by rpki-client