Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/PrtJ5xFA8PNqgPsZJFpMwSDrUgI.roa
File: PrtJ5xFA8PNqgPsZJFpMwSDrUgI.roa (raw, json)
Hash identifier: La/fkgLqE8kVwg1AQKZA1wC8u1C7NQHAkg6HYV1GGeg=
Subject key identifier: 3E:BB:49:E7:11:40:F0:F3:6A:80:FB:19:24:5A:4C:C1:20:EB:52:02
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 019427B548563943E0CB7B6342B990B977B2
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/PrtJ5xFA8PNqgPsZJFpMwSDrUgI.roa
Signing time: Thu 02 Jan 2025 15:49:39 +0000
ROA not before: Thu 02 Jan 2025 15:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48449
IP address blocks: 46.20.97.0/24 maxlen: 24
46.20.103.0/24 maxlen: 24
185.100.168.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.160.195.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Jan 2025 16:33:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:48:56:39:43:e0:cb:7b:63:42:b9:90:b9:77:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jan 2 15:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ebb49e71140f0f36a80fb19245a4cc120eb5202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e0:5d:96:98:43:be:e8:c8:b0:59:e9:f2:97:
b4:3c:1f:9f:3f:26:74:67:30:44:34:44:4b:3b:e0:
c1:01:5d:48:f5:72:0b:c9:f0:49:e4:a8:23:e7:a4:
be:07:c1:10:ca:55:1a:ce:47:7b:04:d9:b4:49:d9:
1b:51:de:8e:88:3d:a7:15:b3:46:de:fd:c7:09:e9:
8b:e0:98:e1:83:17:8c:62:b0:41:1c:3d:5b:fc:11:
06:f4:eb:c1:94:47:84:c3:c2:65:2d:bb:bf:db:b7:
ff:16:19:a1:19:2a:19:8a:5b:75:98:42:14:9b:01:
6f:df:ba:f2:e5:82:25:b8:34:20:b5:f0:ac:d9:e8:
a9:4b:56:02:dd:1d:4c:12:bd:4f:65:32:02:42:5f:
1f:7d:be:1b:82:43:17:aa:32:2c:a2:cf:bc:69:be:
23:fb:97:b1:59:f9:c9:1f:53:91:b1:ad:79:a8:db:
6d:da:56:43:fb:55:52:c7:94:08:05:29:93:5d:a4:
67:67:22:0b:e6:e3:8e:27:54:b6:b3:cb:9d:15:9f:
f8:3e:f0:de:c3:49:25:06:a2:5a:86:08:71:63:10:
56:4e:48:4c:a5:cd:6c:aa:8d:28:27:62:2c:77:b1:
8d:43:f8:a0:0a:89:ac:67:68:b3:01:4b:5f:03:d8:
57:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BB:49:E7:11:40:F0:F3:6A:80:FB:19:24:5A:4C:C1:20:EB:52:02
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/PrtJ5xFA8PNqgPsZJFpMwSDrUgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.97.0/24
46.20.103.0/24
185.100.168.0/24
185.160.194.0/23
185.169.221.0-185.169.223.255
Signature Algorithm: sha256WithRSAEncryption
02:e8:3c:f8:35:42:14:94:98:d1:51:ef:b8:bf:87:bd:3d:a7:
2c:3d:ce:74:13:66:9b:79:ce:05:89:c8:0b:29:e0:ca:5e:c7:
d4:d1:67:86:d7:e5:47:3b:2f:6d:24:d0:a9:5f:4b:45:ce:1b:
32:dd:41:eb:92:b4:3a:5a:4e:7a:26:e4:a4:ea:3b:ff:73:5e:
39:0a:7b:22:7d:4a:77:e7:eb:da:46:06:15:d6:97:af:a5:75:
22:2b:ff:b5:2e:dd:bf:c9:41:85:7a:0a:25:bd:9c:b5:05:aa:
3f:5f:f6:e8:82:f3:05:34:58:37:af:a4:bc:a6:c9:a0:27:4f:
f1:0c:f6:eb:0c:e2:fc:e8:59:f0:37:6b:33:5f:b0:84:83:e2:
ca:bd:80:c6:dc:90:00:ce:ae:5c:cb:76:0e:76:7d:e6:9b:e0:
53:ee:1f:3f:43:ff:2f:a8:75:ee:ae:f7:ea:6b:5a:42:ac:04:
cb:e3:34:15:15:33:fb:c5:a3:79:3b:cc:7b:2f:f3:29:a3:40:
6e:77:bb:43:ff:3d:c6:ed:1c:53:ad:fc:35:da:e7:48:65:05:
08:a5:81:2a:a7:6c:f4:eb:73:1b:1f:ab:25:5e:11:15:55:bf:
47:59:12:5e:21:ae:19:7d:9b:fb:72:74:18:e4:8e:f1:07:56:
47:3f:06:35
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZQntUhWOUPgy3tjQrmQuXeyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx
ZTllNjUwHhcNMjUwMTAyMTU0OTM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWJiNDllNzExNDBmMGYzNmE4MGZiMTkyNDVhNGNjMTIwZWI1MjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuBdlphDvujIsFnp8pe0PB+fPyZ0
ZzBENERLO+DBAV1I9XILyfBJ5Kgj56S+B8EQylUazkd7BNm0SdkbUd6OiD2nFbNG
3v3HCemL4JjhgxeMYrBBHD1b/BEG9OvBlEeEw8JlLbu/27f/FhmhGSoZilt1mEIU
mwFv37ry5YIluDQgtfCs2eipS1YC3R1MEr1PZTICQl8ffb4bgkMXqjIsos+8ab4j
+5exWfnJH1ORsa15qNtt2lZD+1VSx5QIBSmTXaRnZyIL5uOOJ1S2s8udFZ/4PvDe
w0klBqJahghxYxBWTkhMpc1sqo0oJ2Isd7GNQ/igComsZ2izAUtfA9hXAwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFD67SecRQPDzaoD7GSRaTMEg61ICMB8GA1UdIwQY
MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct
MzU1MDgwNDE2NTJkLzEvUHJ0SjV4RkE4UE5xZ1BzWkpGcE13U0RyVWdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk
LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQALhRhAwQA
LhRnAwQAuWSoAwQBuaDCMAwDBAC5qd0DBAW5qcAwDQYJKoZIhvcNAQELBQADggEB
AALoPPg1QhSUmNFR77i/h709pyw9znQTZpt5zgWJyAsp4Mpex9TRZ4bX5Uc7L20k
0KlfS0XOGzLdQeuStDpaTnom5KTqO/9zXjkKeyJ9Snfn69pGBhXWl6+ldSIr/7Uu
3b/JQYV6CiW9nLUFqj9f9uiC8wU0WDevpLymyaAnT/EM9usM4vzoWfA3azNfsISD
4sq9gMbckADOrlzLdg52feab4FPuHz9D/y+ode6u9+prWkKsBMvjNBUVM/vFo3k7
zHsv8ymjQG53u0P/PcbtHFOt/DXa50hlBQilgSqnbPTrcxsfqyVeERVVv0dZEl4h
rhl9m/tydBjkjvEHVkc/BjU=
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:23:39 2025 by rpki-client