Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/qq6s1vTaHkVDP8gh52fhNDCAnRk.roa
File: qq6s1vTaHkVDP8gh52fhNDCAnRk.roa (raw, json)
Hash identifier: /DhDbXafmNG6U8TgLWqeTyu4JRy1vWkbdlGygiN07wQ=
Subject key identifier: AA:AE:AC:D6:F4:DA:1E:45:43:3F:C8:21:E7:67:E1:34:30:80:9D:19
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 01941F8C0522A70BF601FBAF256E0CC1DB6F
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/qq6s1vTaHkVDP8gh52fhNDCAnRk.roa
Signing time: Wed 01 Jan 2025 01:47:37 +0000
ROA not before: Wed 01 Jan 2025 01:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 46.229.243.0/24 maxlen: 24
46.229.251.0/24 maxlen: 24
46.229.253.0/24 maxlen: 24
76.164.200.0/24 maxlen: 24
76.164.201.0/24 maxlen: 24
76.164.202.0/24 maxlen: 24
76.164.203.0/24 maxlen: 24
77.74.123.0/24 maxlen: 24
83.229.61.0/24 maxlen: 24
85.204.107.0/24 maxlen: 24
92.42.100.0/24 maxlen: 24
103.112.171.0/24 maxlen: 24
103.121.48.0/24 maxlen: 24
103.121.49.0/24 maxlen: 24
103.126.50.0/24 maxlen: 24
103.126.51.0/24 maxlen: 24
103.244.144.0/24 maxlen: 24
103.244.145.0/24 maxlen: 24
103.246.248.0/24 maxlen: 24
185.104.63.0/24 maxlen: 24
195.74.93.0/24 maxlen: 24
203.14.32.0/24 maxlen: 24
203.25.108.0/24 maxlen: 24
2a12:3200::/36 maxlen: 36
2a12:3200:1000::/36 maxlen: 36
2a12:3200:2000::/36 maxlen: 36
2a12:3200:3000::/36 maxlen: 36
2a12:3200:4000::/36 maxlen: 36
2a12:3200:5000::/36 maxlen: 36
2a12:3200:6000::/36 maxlen: 36
2a12:3200:7000::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 13 Feb 2025 16:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:05:22:a7:0b:f6:01:fb:af:25:6e:0c:c1:db:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Jan 1 01:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aaaeacd6f4da1e45433fc821e767e13430809d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4f:a9:95:42:b2:47:56:fb:13:ea:b3:5e:61:
42:cc:be:fa:a8:ed:13:49:90:99:20:66:ff:14:01:
9d:6c:73:1a:ff:b7:fe:5e:19:80:54:18:ee:e3:48:
d1:1b:7e:95:9c:d0:74:4e:9c:8c:7c:82:10:fa:ed:
30:f9:36:06:42:1c:d4:86:88:da:a4:9b:ba:ca:35:
20:7f:26:43:a3:98:69:10:d2:dc:c5:55:13:eb:3e:
18:0a:1d:ff:b8:17:d4:f5:13:e5:4d:e5:ed:63:c0:
03:1f:f1:de:cc:f8:f1:c6:de:85:68:c8:ee:79:43:
2b:ac:5f:a4:c6:eb:9d:44:4f:40:d4:76:0c:8a:dc:
5a:0f:56:7a:c3:24:66:08:64:04:26:e2:87:a9:23:
87:33:d5:25:93:cb:76:bd:96:92:25:30:d1:10:14:
f2:d3:b1:f7:41:cc:98:a5:d9:27:24:49:bc:1c:1e:
48:b9:37:e5:18:9a:27:9b:3d:44:bc:77:ff:19:a2:
8f:6a:52:94:85:82:fd:c6:6b:18:48:32:26:e3:66:
a8:ff:68:bc:4b:01:91:e1:4e:6d:3f:89:04:20:77:
66:93:23:4c:3e:a4:8f:33:1e:62:b7:16:da:ce:b4:
5f:ac:b7:50:90:69:0a:ad:ea:f0:88:53:dd:c7:71:
7a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AE:AC:D6:F4:DA:1E:45:43:3F:C8:21:E7:67:E1:34:30:80:9D:19
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/qq6s1vTaHkVDP8gh52fhNDCAnRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.243.0/24
46.229.251.0/24
46.229.253.0/24
76.164.200.0/22
77.74.123.0/24
83.229.61.0/24
85.204.107.0/24
92.42.100.0/24
103.112.171.0/24
103.121.48.0/23
103.126.50.0/23
103.244.144.0/23
103.246.248.0/24
185.104.63.0/24
195.74.93.0/24
203.14.32.0/24
203.25.108.0/24
IPv6:
2a12:3200::/33
Signature Algorithm: sha256WithRSAEncryption
c9:96:f4:79:9e:bb:a1:bf:84:99:3a:88:b5:b5:9b:d1:de:d3:
e0:3e:ca:20:dd:d8:10:92:d1:14:51:1e:c3:93:f0:70:9d:48:
e6:c9:44:b4:4b:78:ba:a1:90:8e:31:68:86:b2:41:d8:09:74:
e6:8d:54:17:57:91:09:b3:df:08:67:3d:c3:22:cf:49:d6:2f:
c3:9a:fd:cc:de:15:70:69:d0:e9:6e:c4:5c:77:0d:81:89:5d:
ad:71:2b:ad:12:c9:5d:2b:fc:a6:29:e3:f7:2a:8d:49:07:4d:
b6:d3:f4:27:74:82:36:e2:4f:3d:7e:cc:c8:6b:89:1e:2b:1d:
f7:76:82:7c:54:c6:75:8d:92:a2:4b:da:26:46:96:0e:a9:ab:
80:0a:9c:c3:74:3c:fd:9d:13:aa:40:8d:45:da:fe:8b:f8:7a:
e0:18:a9:15:e3:33:22:36:25:4a:b5:67:e2:a2:e6:af:d1:c0:
63:36:82:0d:97:b7:be:0d:a8:12:04:d4:8c:13:05:77:26:ce:
b6:5c:fd:3d:62:4f:37:a4:13:89:40:65:d5:e0:69:f5:6e:13:
cc:fc:a9:f9:66:c1:29:aa:46:d7:f3:09:d9:13:5b:f0:4d:fd:
43:30:94:bc:44:e8:f4:e7:e9:56:62:85:03:e9:7c:d0:03:53:
84:9c:39:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:17:35 2025 by rpki-client