Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/MbVp5Nvi8S9-qytOqzRl1d5sa9k.roa
File: MbVp5Nvi8S9-qytOqzRl1d5sa9k.roa (raw, json)
Hash identifier: mej4MnKW+QRNXaT09k556Ws+/Ke5355bNtN6E51bzV8=
Subject key identifier: 31:B5:69:E4:DB:E2:F1:2F:7E:AB:2B:4E:AB:34:65:D5:DE:6C:6B:D9
Certificate issuer: /CN=12a657f3424c8dd55215af853b93307c366c538a
Certificate serial: 01914D2DE6D83C0B9EE2AB547648DE17F293
Authority key identifier: 12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/MbVp5Nvi8S9-qytOqzRl1d5sa9k.roa
Signing time: Tue 13 Aug 2024 19:18:59 +0000
ROA not before: Tue 13 Aug 2024 19:18:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211995
IP address blocks: 46.22.225.0/24 maxlen: 24
46.22.226.0/24 maxlen: 24
46.22.227.0/24 maxlen: 24
46.22.228.0/24 maxlen: 24
46.22.229.0/24 maxlen: 24
46.22.230.0/24 maxlen: 24
46.22.231.0/24 maxlen: 24
46.28.237.0/24 maxlen: 24
93.114.130.0/24 maxlen: 24
109.237.112.0/20 maxlen: 20
109.237.112.0/24 maxlen: 24
109.237.113.0/24 maxlen: 24
185.77.3.0/24 maxlen: 24
185.136.207.0/24 maxlen: 24
185.233.35.0/24 maxlen: 24
194.164.222.0/24 maxlen: 24
213.142.158.0/24 maxlen: 24
2a10:d880::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 14 Aug 2024 19:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4d:2d:e6:d8:3c:0b:9e:e2:ab:54:76:48:de:17:f2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12a657f3424c8dd55215af853b93307c366c538a
Validity
Not Before: Aug 13 19:18:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31b569e4dbe2f12f7eab2b4eab3465d5de6c6bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:18:04:9e:f8:4f:04:f1:b6:88:d4:5b:79:
e9:06:68:8e:bb:88:19:ce:9d:23:9c:dd:38:63:73:
89:7f:b7:ad:13:0b:ff:25:c0:e2:9e:ce:8f:9c:dc:
13:16:6c:6d:2f:8e:51:33:de:5b:39:3d:ea:ff:b0:
89:2d:35:d8:e9:93:a9:0c:e7:7a:24:45:80:b9:f5:
26:dd:7e:7f:f2:9f:05:09:01:4f:23:ca:a1:7d:ca:
77:83:b5:3c:b2:4d:92:46:ff:2e:6d:f7:69:49:f0:
3e:39:fd:fa:54:60:25:92:85:50:35:99:e9:63:33:
a2:ba:01:66:f4:7d:38:6b:1e:d3:b3:b7:0e:56:13:
53:5b:e0:d7:50:87:8a:d6:a3:ee:ad:2c:3a:11:5c:
50:4c:12:1d:1f:40:4b:86:b0:3c:10:f2:0a:fe:7c:
bf:ee:3b:02:1f:51:18:7e:22:1c:87:e9:d4:19:b3:
d7:c9:0e:24:71:55:b3:3b:2a:b4:b2:9e:81:96:da:
5f:cb:1e:0f:6e:60:5c:1c:d8:b9:12:d8:c7:99:6e:
86:35:fd:87:57:9e:cc:57:f0:46:15:32:41:67:0a:
9c:0a:d4:83:44:fd:06:1a:a7:42:72:63:88:32:6a:
5c:65:8a:cf:b5:4e:c1:ea:c6:7c:df:58:15:12:97:
f2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B5:69:E4:DB:E2:F1:2F:7E:AB:2B:4E:AB:34:65:D5:DE:6C:6B:D9
X509v3 Authority Key Identifier:
keyid:12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/MbVp5Nvi8S9-qytOqzRl1d5sa9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.225.0-46.22.231.255
46.28.237.0/24
93.114.130.0/24
109.237.112.0/20
185.77.3.0/24
185.136.207.0/24
185.233.35.0/24
194.164.222.0/24
213.142.158.0/24
IPv6:
2a10:d880::/29
Signature Algorithm: sha256WithRSAEncryption
64:55:2f:9e:5c:28:45:6f:3f:14:a4:ba:a9:de:3e:3f:eb:6a:
0e:e4:73:b1:92:69:33:d7:21:62:0a:96:77:d4:c1:59:da:3b:
0e:8d:9f:fb:76:79:c6:7f:db:58:95:ff:f4:37:2b:04:da:e5:
b9:c9:11:35:6b:44:f5:46:4b:4d:a6:34:d8:70:76:fd:53:2b:
0a:38:c0:64:29:c8:d9:5a:31:b7:e3:f0:4d:cb:71:09:fa:f4:
d8:bb:a8:62:e6:96:f8:32:bc:01:3c:48:f6:6b:3d:df:df:bc:
fc:84:3b:f1:06:3d:51:c9:a9:a0:84:0c:b1:f2:47:75:43:a9:
45:5f:ca:c4:92:18:73:53:a6:a6:2a:88:cb:15:a3:f7:81:19:
41:46:68:e2:9d:30:fb:85:7a:d8:ff:ed:98:07:fc:87:ef:7a:
7e:d2:cb:88:9a:24:41:cd:59:60:be:ee:fa:cd:92:48:c1:95:
cc:e3:63:06:36:f8:91:76:30:7f:fd:c0:ad:fc:b8:06:56:3c:
7c:47:25:84:11:4f:25:c4:be:91:3f:ed:49:0e:69:e5:10:43:
03:bf:62:2b:0f:3b:04:a5:05:5f:ca:2b:2e:6e:3a:f0:79:65:
c8:fb:44:2e:69:46:67:cd:9a:5b:ea:61:0b:53:83:00:a9:ba:
0a:2a:62:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:58:09 2025 by rpki-client