Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/k8Dz6NmypAE7yAOdxHUYgE_aDRY.roa
File: k8Dz6NmypAE7yAOdxHUYgE_aDRY.roa (raw, json)
Hash identifier: dltgDK4oTkCuw4X5dA+HMkandsN/u7cQU7g+hvwiO5o=
Subject key identifier: 93:C0:F3:E8:D9:B2:A4:01:3B:C8:03:9D:C4:75:18:80:4F:DA:0D:16
Certificate issuer: /CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
Certificate serial: 0193878A06620B2AD7C45798AA3E3F3D1103
Authority key identifier: 33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/k8Dz6NmypAE7yAOdxHUYgE_aDRY.roa
Signing time: Mon 02 Dec 2024 13:23:09 +0000
ROA not before: Mon 02 Dec 2024 13:23:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39545
IP address blocks: 46.247.0.0/19 maxlen: 19
46.247.110.0/23 maxlen: 23
46.247.112.0/20 maxlen: 20
77.89.128.0/18 maxlen: 18
77.89.145.0/24 maxlen: 24
89.105.96.0/19 maxlen: 19
2a00:f18::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:87:8a:06:62:0b:2a:d7:c4:57:98:aa:3e:3f:3d:11:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
Validity
Not Before: Dec 2 13:23:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93c0f3e8d9b2a4013bc8039dc47518804fda0d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bb:10:48:fa:1f:b4:0e:24:e5:f2:8b:48:3f:
69:c5:50:5d:06:c0:e0:2c:27:77:9d:c6:f5:58:c3:
15:0d:90:df:68:2a:11:b1:81:93:33:20:94:71:e7:
23:fd:c7:a2:77:ef:db:17:c9:56:17:55:5f:53:9a:
26:7a:77:3f:10:a0:eb:b7:17:46:76:f0:cc:f1:f7:
08:74:1c:b4:cc:29:c5:10:82:53:f8:2e:8c:05:4b:
f5:3f:d6:1c:3e:84:f6:78:1e:7d:76:97:ed:8e:06:
28:53:7e:6d:bf:4b:13:72:8b:d8:a3:4b:97:08:97:
dd:32:bb:24:52:63:f9:26:72:40:f2:25:a0:53:c9:
1a:17:bb:4a:9c:6f:b2:ea:d2:62:05:7b:3d:8b:66:
08:13:1a:97:72:4a:ec:79:aa:6a:1b:41:29:68:15:
df:bb:c8:06:a5:4d:4c:9f:66:0c:ea:ba:63:d2:44:
25:97:39:45:c3:74:1c:29:d7:4d:ee:f3:95:5d:31:
42:5c:13:7e:0e:ef:86:f1:97:76:90:35:8a:e6:07:
f2:9f:2b:14:94:f8:a1:d3:87:34:2c:87:5a:0d:38:
4a:da:8c:36:bd:25:d9:8c:0a:58:71:ef:95:1b:13:
e2:f2:34:09:93:ef:f1:69:7c:aa:79:0c:af:a0:8c:
00:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C0:F3:E8:D9:B2:A4:01:3B:C8:03:9D:C4:75:18:80:4F:DA:0D:16
X509v3 Authority Key Identifier:
keyid:33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/k8Dz6NmypAE7yAOdxHUYgE_aDRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.247.0.0/19
46.247.110.0-46.247.127.255
77.89.128.0/18
89.105.96.0/19
IPv6:
2a00:f18::/32
Signature Algorithm: sha256WithRSAEncryption
8a:39:d0:b8:f1:9b:35:6f:0d:1b:77:48:1e:df:9e:b5:77:e8:
cf:c1:59:75:36:be:b9:6d:5d:8a:2b:aa:b8:89:2c:f3:8b:d7:
94:b5:68:b3:28:ee:42:f8:09:5f:c2:59:53:b3:ca:c8:90:d7:
94:b8:64:fa:a9:9e:d8:19:94:68:71:12:b4:60:43:cf:28:a2:
b4:c4:c0:e3:b5:89:27:6b:77:c8:01:e5:1f:bb:43:51:8f:0f:
19:78:aa:79:0d:97:50:88:65:2b:4e:72:fd:4c:4d:0b:84:8e:
6c:83:80:3b:cf:40:e0:b4:20:80:96:42:50:83:87:da:e4:d1:
64:a5:8d:ad:e6:6f:9e:b1:c4:6b:eb:8f:e2:61:c6:77:ff:11:
f2:77:72:5e:6a:6a:ed:0e:26:83:55:f5:90:bf:67:95:21:d7:
80:a1:d9:ec:af:2e:9a:7f:34:e8:0a:a5:33:ea:72:76:f9:c5:
1b:f1:83:eb:83:ab:68:fc:82:4b:9b:3d:f5:84:be:c4:ac:80:
a9:9e:70:37:16:75:f1:0a:0b:8d:48:5d:2e:01:99:8b:91:dc:
6a:9d:a0:d0:ec:1d:44:83:24:d0:d0:a5:53:0a:1d:1b:7b:bd:
99:61:a1:0d:fd:de:66:0f:ab:0b:da:9c:59:77:a0:53:7e:a9:
2d:37:bb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:26:56 2025 by rpki-client