Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/wWHeoCXQVaMHJRvfvd5g8noEduY.roa
File: wWHeoCXQVaMHJRvfvd5g8noEduY.roa (raw, json)
Hash identifier: 5gP9EL741iDdMePFcuuU2tz+79YiLmv5HC2MdgZLLjE=
Subject key identifier: C1:61:DE:A0:25:D0:55:A3:07:25:1B:DF:BD:DE:60:F2:7A:04:76:E6
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 019426D9424DD3D97303A0A50D15D6C7B901
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/wWHeoCXQVaMHJRvfvd5g8noEduY.roa
Signing time: Thu 02 Jan 2025 11:49:19 +0000
ROA not before: Thu 02 Jan 2025 11:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8280
IP address blocks: 46.227.56.0/21 maxlen: 24
46.227.56.0/24 maxlen: 32
46.227.57.0/24 maxlen: 24
46.227.58.0/24 maxlen: 32
46.227.59.0/24 maxlen: 24
46.227.60.0/24 maxlen: 24
46.227.61.0/24 maxlen: 32
46.227.62.0/24 maxlen: 24
46.227.63.0/24 maxlen: 24
78.108.32.0/20 maxlen: 24
78.108.32.0/24 maxlen: 24
78.108.33.0/24 maxlen: 24
78.108.34.0/24 maxlen: 24
78.108.35.0/24 maxlen: 24
78.108.36.0/24 maxlen: 24
78.108.37.0/24 maxlen: 24
78.108.38.0/24 maxlen: 24
78.108.39.0/24 maxlen: 24
78.108.40.0/24 maxlen: 24
78.108.41.0/24 maxlen: 24
78.108.42.0/24 maxlen: 24
78.108.43.0/24 maxlen: 24
78.108.44.0/24 maxlen: 24
78.108.45.0/24 maxlen: 24
78.108.46.0/24 maxlen: 24
78.108.47.0/24 maxlen: 24
185.51.132.0/22 maxlen: 24
185.51.132.0/24 maxlen: 32
185.51.133.0/24 maxlen: 24
185.51.135.0/24 maxlen: 24
2001:1548::/29 maxlen: 29
2001:1548:7000::/48 maxlen: 48
2001:1548:7001::/48 maxlen: 48
2001:1548:7002::/48 maxlen: 48
2001:1548:7003::/48 maxlen: 48
2001:1548:7004::/48 maxlen: 48
2001:1548:7005::/48 maxlen: 48
2001:1548:7006::/48 maxlen: 48
2001:1548:7007::/48 maxlen: 48
2001:1548:7008::/48 maxlen: 48
2001:1548:7009::/48 maxlen: 48
2001:1548:7010::/48 maxlen: 48
2001:1548:7011::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 Jan 2025 17:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:42:4d:d3:d9:73:03:a0:a5:0d:15:d6:c7:b9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: Jan 2 11:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c161dea025d055a307251bdfbdde60f27a0476e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:02:88:a8:1c:c3:c7:18:60:bf:05:57:86:
ca:08:5b:5c:e7:d8:45:4a:f8:46:b9:12:73:8b:f6:
89:5c:36:56:e6:e1:90:f9:01:fa:32:eb:fc:a5:df:
a3:51:01:a3:90:7a:a1:14:07:70:c9:a9:18:28:7b:
65:e1:ff:7f:f7:bf:5b:f3:0c:46:9f:db:41:13:af:
b2:c9:10:d4:5b:3f:74:63:00:f4:7c:25:28:b0:7c:
14:4e:de:4a:97:b0:c0:76:b1:59:c3:4d:1c:2d:34:
c7:fc:35:41:98:ee:15:f2:24:be:a7:cd:38:43:f2:
ef:44:87:c4:e6:aa:74:c1:a2:f8:2d:de:72:95:00:
ab:73:68:09:3c:f4:81:29:ec:ad:83:8d:2a:d7:4c:
01:97:4d:60:fd:99:a1:2f:3f:09:8d:27:fe:ad:64:
f8:9f:39:35:b2:bf:c9:c8:6a:b6:db:f2:5d:12:be:
fe:3e:e0:d5:5d:78:70:f8:be:e8:70:5f:0f:39:32:
59:1a:8e:c9:5a:d6:cb:27:2f:58:1d:1b:c5:88:32:
01:f5:a6:28:47:6e:9c:7c:01:c9:2d:8a:69:7c:ac:
a3:b4:7d:4c:4b:85:d1:85:75:9f:05:84:28:6e:1f:
33:91:fc:ee:17:39:24:c0:76:e5:09:eb:13:3b:99:
49:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:61:DE:A0:25:D0:55:A3:07:25:1B:DF:BD:DE:60:F2:7A:04:76:E6
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/wWHeoCXQVaMHJRvfvd5g8noEduY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.56.0/21
78.108.32.0/20
185.51.132.0/22
IPv6:
2001:1548::/29
Signature Algorithm: sha256WithRSAEncryption
0c:1f:6a:7e:bc:57:e5:00:35:5f:ae:00:ce:54:6d:cb:b5:c0:
93:77:34:ef:b8:7d:90:07:94:18:d1:7f:9a:d0:d1:62:b4:3f:
b6:3f:f2:b2:de:83:9d:0f:74:ff:81:aa:2e:59:f3:e6:5d:11:
6e:52:ec:07:a1:76:88:ca:2b:28:3f:57:87:e7:6a:7f:a7:e0:
f5:74:46:8d:c8:ae:e4:07:8d:89:7f:3e:b1:9f:62:bf:53:64:
41:d4:70:7d:ee:43:e1:7c:f3:96:b9:90:e4:3c:48:2d:99:15:
aa:84:88:3e:e8:f5:ee:a2:eb:e2:b6:d9:38:5b:3e:45:ea:9f:
6a:30:83:70:fd:8c:82:61:2e:76:fd:86:2c:30:31:81:95:9c:
c7:4a:43:c3:f8:8b:6e:2d:68:28:79:95:53:08:f6:4b:88:ee:
c1:6c:55:35:f4:15:ec:c4:2e:5e:93:6c:c0:d5:ab:31:f0:1c:
86:b2:d6:51:61:79:1e:8e:31:5a:3d:ab:08:48:eb:11:3c:83:
f9:e6:ac:19:4a:e4:81:0e:c2:b0:18:83:3d:32:2d:a2:c3:c2:
b6:d2:0a:9c:19:22:31:d6:eb:81:f2:2c:b1:47:6f:d7:76:93:
0e:58:d3:9f:91:a4:fe:a0:c0:8c:28:71:35:6e:ce:07:1f:12:
b0:10:e1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:51 2025 by rpki-client