Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/tLNtbRw8SZzuhGg0pRSnq7J51x0.roa
File: tLNtbRw8SZzuhGg0pRSnq7J51x0.roa (raw, json)
Hash identifier: oDsL/LrOQMSN081uiYXkSfgyse2x4Vku8nsVjcpoMNY=
Subject key identifier: B4:B3:6D:6D:1C:3C:49:9C:EE:84:68:34:A5:14:A7:AB:B2:79:D7:1D
Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Certificate serial: 0195F300CA1F21D22D1DCEE1E5274B9ECE16
Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/tLNtbRw8SZzuhGg0pRSnq7J51x0.roa
Signing time: Tue 01 Apr 2025 20:17:49 +0000
ROA not before: Tue 01 Apr 2025 20:17:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43541
IP address blocks: 46.243.48.0/21 maxlen: 21
46.243.48.0/24 maxlen: 24
46.243.49.0/24 maxlen: 24
46.243.50.0/24 maxlen: 24
46.243.53.0/24 maxlen: 24
46.243.55.0/24 maxlen: 24
78.24.8.0/21 maxlen: 21
93.185.96.0/20 maxlen: 20
178.251.184.0/21 maxlen: 21
185.14.252.0/22 maxlen: 22
185.59.208.0/22 maxlen: 22
185.64.216.0/22 maxlen: 22
185.115.1.0/24 maxlen: 24
185.115.2.0/24 maxlen: 24
217.16.176.0/20 maxlen: 20
2a00:1ed0::/32 maxlen: 32
2a00:1ed1::/32 maxlen: 32
2a00:1ed2::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 02 Apr 2025 06:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f3:00:ca:1f:21:d2:2d:1d:ce:e1:e5:27:4b:9e:ce:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Validity
Not Before: Apr 1 20:17:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4b36d6d1c3c499cee846834a514a7abb279d71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:21:38:49:b5:5c:b8:2c:e4:af:cf:05:42:
de:41:fa:e2:de:9d:31:9b:07:4e:35:af:2b:61:60:
6e:0c:c2:b8:8c:44:c7:0e:37:c7:24:b9:e9:73:0c:
53:63:08:17:de:70:76:4b:b9:bb:33:c6:c8:96:de:
a4:3a:6b:b4:cd:ff:fc:48:0a:2d:7f:ff:ad:8b:50:
84:9a:0c:63:e3:c6:27:6b:b5:f5:1e:d0:4e:63:cf:
df:a4:b7:9f:7d:ff:08:53:05:08:b2:a6:4b:14:5c:
c5:eb:1f:d8:96:00:2e:b2:d9:8f:a7:ed:d7:58:f5:
4e:34:dc:f9:de:9c:4e:e3:59:11:99:e1:d4:e9:39:
ad:49:9f:22:3b:b5:0d:ff:29:3d:d7:29:60:16:a1:
ab:41:52:21:c5:9d:c2:07:df:0c:be:05:dd:00:ac:
7e:49:e4:dc:5f:12:92:0b:1e:1b:a2:fc:01:2a:ef:
77:90:a6:e8:f3:16:38:2a:ca:4d:11:a0:fb:ef:6f:
3d:76:df:09:01:57:c9:df:c8:4e:d5:c5:8b:f0:1f:
a4:bd:79:c2:a1:b4:8b:28:93:eb:b5:70:e6:78:2d:
5e:fe:7d:16:84:b0:f8:e5:09:4d:ef:9b:63:1e:4c:
55:2d:d0:8b:9c:66:31:bd:73:95:ec:c5:74:fc:72:
05:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B3:6D:6D:1C:3C:49:9C:EE:84:68:34:A5:14:A7:AB:B2:79:D7:1D
X509v3 Authority Key Identifier:
keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/tLNtbRw8SZzuhGg0pRSnq7J51x0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.48.0/21
78.24.8.0/21
93.185.96.0/20
178.251.184.0/21
185.14.252.0/22
185.59.208.0/22
185.64.216.0/22
185.115.1.0-185.115.2.255
217.16.176.0/20
IPv6:
2a00:1ed0::-2a00:1ed2:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9a:01:fc:70:a5:17:95:bf:5b:97:35:4d:a6:71:07:cc:b8:7a:
e4:29:82:7b:f7:4a:9c:d1:44:d6:8e:22:9c:7a:3e:8a:8a:9f:
b0:ad:c5:28:29:ce:d9:da:3d:c5:08:4f:33:ac:a8:50:a1:0b:
bf:08:56:12:ca:a8:8c:b6:0d:f6:00:47:e8:13:a3:90:3c:a7:
22:3f:7f:13:b4:40:23:08:4e:b9:fc:6a:11:a8:2e:63:05:97:
39:95:ce:77:04:63:a5:da:e5:bf:fa:4f:69:56:9b:8c:14:f0:
e8:28:28:4e:9f:e2:80:2c:f7:ce:e3:ea:c6:79:be:70:79:5a:
39:07:bf:8b:80:2f:cd:1e:78:ac:50:8d:2b:a1:87:1b:e3:a7:
2a:25:31:9c:b9:03:8f:ae:35:cc:fb:9b:c9:d1:b9:b7:8c:98:
01:ba:3a:08:f4:eb:b5:3f:17:3c:3c:8c:08:f1:34:06:c2:fd:
e1:c7:02:09:ad:99:81:71:af:b1:bc:a4:03:7d:1f:35:c9:0e:
55:d3:8e:f6:95:c0:e4:4a:6a:74:f8:62:3b:1d:f5:f1:29:ea:
38:3a:2b:fb:ce:1c:4e:76:e7:48:b4:34:84:3f:45:b6:2a:b8:
a3:96:d2:ac:9d:f3:95:cc:dc:1d:25:c3:5f:bd:24:17:72:5f:
16:64:ef:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 12:01:58 2025 by rpki-client