Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/ux1IuoLuHmi_BIQjM1yf7dPhFjI.roa
File: ux1IuoLuHmi_BIQjM1yf7dPhFjI.roa (raw, json)
Hash identifier: ppvc39COdWvV0aIrHW49gkGKDx4V6EJxT62/aYApquo=
Subject key identifier: BB:1D:48:BA:82:EE:1E:68:BF:04:84:23:33:5C:9F:ED:D3:E1:16:32
Certificate issuer: /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Certificate serial: 018CC8DE403BB84F4222A606BFDFDF753658
Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/ux1IuoLuHmi_BIQjM1yf7dPhFjI.roa
Signing time: Tue 02 Jan 2024 06:30:57 +0000
ROA not before: Tue 02 Jan 2024 06:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12301
IP address blocks: 77.243.208.0/20 maxlen: 20
46.31.176.0/22 maxlen: 22
46.31.182.0/24 maxlen: 24
46.31.180.0/23 maxlen: 23
185.91.143.0/24 maxlen: 24
185.91.142.0/24 maxlen: 24
185.91.141.0/24 maxlen: 24
2a00:df80:1::/48 maxlen: 48
2a00:df80::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 09 Jan 2024 08:24:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:40:3b:b8:4f:42:22:a6:06:bf:df:df:75:36:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Validity
Not Before: Jan 2 06:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb1d48ba82ee1e68bf048423335c9fedd3e11632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:60:fb:30:d4:0f:69:0e:31:4f:12:a3:a8:2f:
8c:9a:b8:4a:b6:ae:16:46:60:92:11:8e:8a:70:7c:
70:19:74:6c:03:64:02:e7:82:d3:58:89:0e:21:e0:
0d:09:d2:76:88:e2:26:5b:43:8c:b2:24:d2:29:02:
80:4e:98:c9:2d:83:21:62:51:59:54:e3:0c:d7:ed:
d9:c9:8a:7d:17:a9:61:e5:d7:e0:e9:06:c8:2e:74:
03:52:b8:32:62:de:7e:c0:d3:5c:0e:25:f0:7f:39:
c8:96:4f:af:28:b5:cd:10:62:fc:de:64:bc:6c:51:
a6:36:bb:f9:cd:28:a2:05:de:fe:1d:55:cf:5d:39:
2a:35:e5:63:29:10:45:db:12:7e:28:ea:64:22:e8:
3e:b5:63:b8:b1:55:77:a5:f6:72:bf:e6:76:09:08:
9f:0d:7e:9a:1d:67:67:c7:20:d3:33:d8:2e:41:55:
17:f6:35:4e:1c:84:2c:b4:7d:b5:b2:ee:87:0b:21:
3e:80:0c:21:11:2b:c1:6d:ca:e5:66:31:3f:ca:e9:
ec:02:e6:c6:40:1d:a6:ee:c2:c7:8b:14:2c:44:b9:
73:73:3f:65:5b:8d:dd:f2:96:ce:cd:07:93:dc:d5:
2c:ca:6a:d1:3b:d0:c7:d0:77:bb:40:03:61:ff:62:
f1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1D:48:BA:82:EE:1E:68:BF:04:84:23:33:5C:9F:ED:D3:E1:16:32
X509v3 Authority Key Identifier:
keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/ux1IuoLuHmi_BIQjM1yf7dPhFjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.176.0-46.31.182.255
77.243.208.0/20
185.91.141.0-185.91.143.255
IPv6:
2a00:df80::/47
Signature Algorithm: sha256WithRSAEncryption
06:09:73:9b:bb:6a:37:b6:1e:25:6b:04:c9:24:03:44:b0:b4:
69:fc:6a:6d:fe:65:95:cc:39:ca:27:a6:a0:b7:0a:a5:e9:d5:
65:52:2b:8f:a1:45:9f:2f:85:5f:03:9a:6d:ad:0b:f5:f9:44:
ba:4b:46:66:64:e4:b5:e6:35:8b:56:ff:e5:2c:bb:e3:ef:d6:
7e:50:fc:d5:8e:f8:37:89:9a:24:d3:e2:df:a1:a2:b1:3e:05:
f8:f3:fd:44:de:7b:b8:4e:3b:d1:5a:ef:60:ef:91:9c:7a:e9:
ae:a3:4a:67:a8:d0:9d:ff:76:3d:25:87:24:2b:32:57:8c:f0:
21:b9:67:b4:f8:0d:c1:8c:4a:56:bd:2d:a7:d8:3e:f6:ff:1e:
dc:9a:0a:8b:36:cc:33:7c:ba:b6:d5:42:8e:61:d7:45:0d:45:
0a:51:d4:a5:51:98:86:1f:10:d6:01:7c:49:85:13:27:47:17:
38:c5:5e:d2:29:65:c1:e1:0f:05:37:80:cd:a2:ec:59:ae:8c:
88:8b:86:45:44:54:5b:7d:64:7f:8f:fb:ee:f6:24:fe:37:79:
1f:05:c1:01:a9:48:b1:4f:7f:23:ca:5c:99:46:2e:7e:2a:e6:
53:4a:d3:0d:22:c8:e1:3c:bc:d9:64:f9:f4:9e:66:89:be:fa:
ae:e6:8f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:17:56 2025 by rpki-client