Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/mRvR04Vo8bdVq6u4azrcSb0QqKs.roa
File: mRvR04Vo8bdVq6u4azrcSb0QqKs.roa (raw, json)
Hash identifier: o8puWvWOya03oF11cLbo7fuHEUvW19W85X59bgXNkBc=
Subject key identifier: 99:1B:D1:D3:85:68:F1:B7:55:AB:AB:B8:6B:3A:DC:49:BD:10:A8:AB
Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Certificate serial: 0194282554431382F3DB34C79768901BA0FB
Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/mRvR04Vo8bdVq6u4azrcSb0QqKs.roa
Signing time: Thu 02 Jan 2025 17:52:02 +0000
ROA not before: Thu 02 Jan 2025 17:52:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62214
IP address blocks: 46.29.136.0/21 maxlen: 21
79.139.56.0/21 maxlen: 21
92.119.120.0/22 maxlen: 22
185.43.204.0/22 maxlen: 22
185.80.48.0/22 maxlen: 22
185.187.72.0/22 maxlen: 22
193.39.12.0/22 maxlen: 22
193.201.184.0/21 maxlen: 21
2a01:6ee0::/32 maxlen: 32
2a01:6ee0::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 06 Feb 2025 16:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:54:43:13:82:f3:db:34:c7:97:68:90:1b:a0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Validity
Not Before: Jan 2 17:52:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=991bd1d38568f1b755ababb86b3adc49bd10a8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f0:bc:40:16:2f:17:c4:d4:d2:f7:04:f9:72:
dc:3e:a7:f1:10:b2:4d:a1:8f:ed:57:26:a3:69:ff:
79:a0:c2:b7:80:e6:c2:71:4a:3e:dd:43:e2:4a:d3:
9e:82:ca:29:4b:ad:3b:ff:83:8a:10:5f:9f:fc:4a:
f2:2c:79:4e:ce:06:34:89:d2:96:c7:bc:b0:51:fb:
46:29:7f:e9:fd:21:94:a7:fa:60:14:38:17:2a:0d:
e4:51:da:24:4f:e1:5f:80:df:41:4c:0f:19:73:34:
71:65:e4:72:ce:c3:82:c3:02:13:ec:c9:ff:47:ec:
3e:dd:77:eb:f2:8c:02:0e:b0:2c:25:d4:08:45:68:
2a:b0:65:e0:a1:60:34:7c:a1:34:e8:eb:65:06:89:
f4:bd:ad:a4:68:01:d9:04:7b:ea:7d:51:bc:01:fa:
6f:91:d1:7f:b5:02:bc:50:28:5d:db:6a:ac:79:50:
ef:2c:a5:29:8e:ff:ca:49:15:23:f2:e5:51:1b:39:
fd:53:12:3d:23:1a:eb:e4:ac:e7:05:14:08:fc:6d:
66:f8:4f:ed:a7:c4:10:19:b8:ab:b1:e8:0b:80:3b:
e6:dd:f0:b9:52:63:e0:f9:41:3e:ec:97:4d:38:61:
10:9d:85:94:b9:15:f3:77:d6:14:75:b8:d0:dd:33:
d3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1B:D1:D3:85:68:F1:B7:55:AB:AB:B8:6B:3A:DC:49:BD:10:A8:AB
X509v3 Authority Key Identifier:
keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/mRvR04Vo8bdVq6u4azrcSb0QqKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.136.0/21
79.139.56.0/21
92.119.120.0/22
185.43.204.0/22
185.80.48.0/22
185.187.72.0/22
193.39.12.0/22
193.201.184.0/21
IPv6:
2a01:6ee0::/32
Signature Algorithm: sha256WithRSAEncryption
43:6e:97:ef:5e:90:53:06:bc:5a:b6:c4:be:62:9a:62:d2:d3:
ce:a2:c0:d0:98:8a:98:be:1f:22:c2:53:e9:87:4d:a4:23:5c:
5e:5a:ff:30:6b:bb:b7:60:3a:10:02:55:70:a8:16:b4:62:9e:
b4:97:c2:ae:1b:78:75:2e:51:b9:81:07:f8:4c:cb:8d:1f:39:
ce:d4:fd:03:98:fa:dd:52:4d:7f:7e:58:2e:9e:cd:e6:96:14:
de:02:db:75:7e:b5:9e:58:ae:ea:c0:04:99:e5:29:43:83:c0:
29:f4:1c:51:89:48:a9:a9:2a:07:6b:e1:ef:5a:b5:f7:53:a6:
05:9e:74:80:6c:51:90:43:e6:8d:2c:6e:60:bd:a2:82:ff:ea:
cc:92:55:e2:49:2b:26:f2:ac:a9:05:27:87:f0:a4:03:90:7e:
a9:8b:bb:aa:e5:ef:71:e6:69:b5:bd:79:4b:d0:dd:25:8f:05:
f7:a6:86:82:05:19:ee:5c:39:a9:c7:72:0f:bf:a5:5f:27:3b:
03:7a:d7:cb:55:ba:fa:95:1f:13:a5:99:e5:54:e2:fa:71:47:
6c:5e:46:5b:ce:1f:a8:8b:71:4c:0a:b9:4e:70:3d:63:36:cd:
e7:ad:b6:ed:c4:a3:a5:6e:4a:92:24:37:9e:76:1f:76:53:93:
9a:7e:fb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:16:19 2025 by rpki-client