Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/hBRyUTJBCuXE_twm0LLpORboIkM.roa
File: hBRyUTJBCuXE_twm0LLpORboIkM.roa (raw, json)
Hash identifier: iUWI7aFW+DL+bz58hv+NB5aG5XBzDSg8QxTRUlIBgkU=
Subject key identifier: 84:14:72:51:32:41:0A:E5:C4:FE:DC:26:D0:B2:E9:39:16:E8:22:43
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 01918492DD0D4E68604639C5F842161EE1D6
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/hBRyUTJBCuXE_twm0LLpORboIkM.roa
Signing time: Sat 24 Aug 2024 13:28:22 +0000
ROA not before: Sat 24 Aug 2024 13:28:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48449
IP address blocks: 46.20.99.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.160.195.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Sep 2024 20:07:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:84:92:dd:0d:4e:68:60:46:39:c5:f8:42:16:1e:e1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Aug 24 13:28:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8414725132410ae5c4fedc26d0b2e93916e82243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bd:7b:23:23:ee:65:ba:25:7c:9b:c9:a8:9a:
f4:87:f1:d8:d6:f5:f1:42:93:e8:65:ec:b2:a3:77:
4b:77:e5:38:16:a5:85:38:d4:2e:35:9d:d5:8a:44:
a1:d9:53:8e:c8:9a:c0:2b:02:cc:c6:ba:f7:57:cc:
16:c8:cf:70:ea:a9:46:90:7d:50:60:4c:cc:e5:81:
78:82:f7:74:6b:25:cd:a8:33:3c:b8:fc:36:0e:0b:
42:87:16:ae:1a:ef:35:4b:f4:be:56:91:8f:fa:64:
3d:f9:c7:e5:db:75:36:fb:84:83:ed:d0:d3:47:37:
2a:55:a9:b2:96:44:e5:c6:5f:42:bb:d6:c3:69:89:
46:2f:a5:97:85:19:55:0f:e5:c6:59:0e:a2:c6:24:
13:75:08:e2:a2:92:c9:df:ec:03:4f:be:4b:dd:fd:
71:0f:8b:f8:71:94:ac:29:3e:09:fe:a5:11:60:76:
54:24:16:5a:78:90:7e:31:d1:90:d8:5a:ac:51:79:
5b:d8:ac:7e:41:25:77:d7:53:b0:9e:e1:9e:0e:ed:
66:aa:fc:04:da:0c:3f:ea:52:a1:67:ac:88:7c:d8:
c8:59:f5:25:4f:a2:93:d5:58:89:7c:5c:7c:dd:8d:
cb:3f:a4:b0:db:ae:35:f1:15:60:ec:13:9c:2a:07:
d3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:14:72:51:32:41:0A:E5:C4:FE:DC:26:D0:B2:E9:39:16:E8:22:43
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/hBRyUTJBCuXE_twm0LLpORboIkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.99.0/24
185.160.194.0/23
185.169.221.0-185.169.223.255
Signature Algorithm: sha256WithRSAEncryption
9f:f5:50:2b:67:1f:ae:92:66:44:5d:94:7a:aa:5d:23:bd:c7:
2c:54:bc:fb:f6:18:b6:a9:be:63:af:a7:bb:1c:7f:f9:1d:7c:
0f:56:3e:57:73:02:da:ae:34:24:69:de:13:ed:5e:21:0a:b4:
0b:9e:1f:89:5b:60:1e:ee:f5:14:20:4f:96:ae:d0:b5:7b:1f:
ff:33:93:95:06:9c:4b:01:b0:89:36:f9:68:05:48:9e:e9:b6:
80:8c:c4:8b:4e:3d:12:7f:92:be:64:fe:7e:81:8b:8b:29:4b:
91:d2:4b:d8:31:70:dd:4d:c5:21:55:d4:d1:4c:79:55:34:bf:
95:82:50:74:47:2a:27:c3:85:ce:85:d6:14:6e:99:d7:a4:00:
c4:d2:ff:fa:12:15:18:59:84:bf:cd:a5:97:1e:85:be:7c:0e:
f3:a8:57:f3:62:1d:e7:dc:5c:0f:47:6e:37:48:13:fc:94:0e:
3a:0f:b4:c8:3f:ce:eb:64:97:9b:d0:79:c1:5b:38:94:32:1a:
b6:da:58:c1:fa:7c:0e:35:2b:4a:a3:78:bb:f2:10:55:96:c8:
bc:de:87:c8:c3:10:ba:5d:3a:80:d3:72:57:c2:b4:80:50:00:
02:46:dd:13:53:a4:ee:9e:dd:ea:58:24:94:31:7b:b3:e1:f3:
3f:01:26:0f
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZGEkt0NTmhgRjnF+EIWHuHWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx
ZTllNjUwHhcNMjQwODI0MTMyODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDE0NzI1MTMyNDEwYWU1YzRmZWRjMjZkMGIyZTkzOTE2ZTgyMjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL17IyPuZbolfJvJqJr0h/HY1vXx
QpPoZeyyo3dLd+U4FqWFONQuNZ3VikSh2VOOyJrAKwLMxrr3V8wWyM9w6qlGkH1Q
YEzM5YF4gvd0ayXNqDM8uPw2DgtChxauGu81S/S+VpGP+mQ9+cfl23U2+4SD7dDT
RzcqVamylkTlxl9Cu9bDaYlGL6WXhRlVD+XGWQ6ixiQTdQjiopLJ3+wDT75L3f1x
D4v4cZSsKT4J/qURYHZUJBZaeJB+MdGQ2FqsUXlb2Kx+QSV311OwnuGeDu1mqvwE
2gw/6lKhZ6yIfNjIWfUlT6KT1ViJfFx83Y3LP6Sw26418RVg7BOcKgfTpwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFIQUclEyQQrlxP7cJtCy6TkW6CJDMB8GA1UdIwQY
MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct
MzU1MDgwNDE2NTJkLzEvaEJSeVVUSkJDdVhFX3R3bTBMTHBPUmJvSWtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk
LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQALhRjAwQB
uaDCMAwDBAC5qd0DBAW5qcAwDQYJKoZIhvcNAQELBQADggEBAJ/1UCtnH66SZkRd
lHqqXSO9xyxUvPv2GLapvmOvp7scf/kdfA9WPldzAtquNCRp3hPtXiEKtAueH4lb
YB7u9RQgT5au0LV7H/8zk5UGnEsBsIk2+WgFSJ7ptoCMxItOPRJ/kr5k/n6Bi4sp
S5HSS9gxcN1NxSFV1NFMeVU0v5WCUHRHKifDhc6F1hRumdekAMTS//oSFRhZhL/N
pZcehb58DvOoV/NiHefcXA9HbjdIE/yUDjoPtMg/zutkl5vQecFbOJQyGrbaWMH6
fA41K0qjeLvyEFWWyLzeh8jDELpdOoDTclfCtIBQAAJG3RNTpO6e3epYJJQxe7Ph
8z8BJg8=
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:18:36 2025 by rpki-client