Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/1-alCAKAtKr0QXDJeK3V0JBmtPtg.roa
File: 1-alCAKAtKr0QXDJeK3V0JBmtPtg.roa (raw, json)
Hash identifier: 1s5WkbvnNXwJzOuUuN/DDgD6+qXzGCLgQB8bpdpdCqs=
Subject key identifier: F9:A9:42:00:A0:2D:2A:BD:10:5C:32:5E:2B:75:74:24:19:AD:3E:D8
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01906983B9B1B92811C81E4F386013E54033
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/1-alCAKAtKr0QXDJeK3V0JBmtPtg.roa
Signing time: Sun 30 Jun 2024 14:19:18 +0000
ROA not before: Sun 30 Jun 2024 14:19:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44889
IP address blocks: 46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
46.38.136.0/24 maxlen: 24
46.38.137.0/24 maxlen: 24
46.38.138.0/24 maxlen: 24
46.38.139.0/24 maxlen: 24
46.38.140.0/24 maxlen: 24
46.38.144.0/23 maxlen: 23
46.38.150.0/24 maxlen: 24
109.94.165.0/24 maxlen: 24
185.24.149.0/24 maxlen: 24
185.24.150.0/24 maxlen: 24
185.29.220.0/24 maxlen: 24
185.29.221.0/24 maxlen: 24
185.29.222.0/24 maxlen: 24
185.29.223.0/24 maxlen: 24
185.143.74.0/24 maxlen: 24
185.143.75.0/24 maxlen: 24
212.16.64.0/19 maxlen: 24
212.16.71.0/24 maxlen: 24
212.16.72.0/24 maxlen: 25
212.16.86.0/23 maxlen: 23
212.16.89.0/24 maxlen: 24
212.80.0.0/19 maxlen: 24
212.80.2.0/24 maxlen: 24
212.80.12.0/24 maxlen: 24
212.80.13.0/24 maxlen: 24
212.80.14.0/24 maxlen: 24
212.80.15.0/24 maxlen: 24
2a00:7d80::/29 maxlen: 64
Validation: Failed, certificate revoked on Sat 13 Jul 2024 10:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:69:83:b9:b1:b9:28:11:c8:1e:4f:38:60:13:e5:40:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jun 30 14:19:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9a94200a02d2abd105c325e2b75742419ad3ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:3e:41:c7:df:e1:56:8f:3f:8a:65:29:e4:
8e:89:37:ce:c4:94:2e:7a:de:ab:ce:38:55:09:9b:
1b:ba:53:a0:bf:f6:e1:6a:2e:93:c2:3e:fa:fb:25:
9d:13:04:3a:b1:7a:f8:73:31:6a:3c:ea:2d:6a:c3:
07:1a:cb:70:2d:ff:b9:69:d0:b2:30:6d:99:63:b0:
0c:bb:c0:32:04:b9:10:25:9f:f9:54:53:8d:9e:11:
d8:9c:81:5c:d8:0f:f7:30:b7:fc:1e:10:1f:f3:60:
d5:16:b5:f1:9a:20:b3:7b:7c:4b:48:af:f2:a5:6b:
1c:a4:a5:d7:9d:ce:dc:0c:16:3c:8b:ad:3c:de:5b:
e8:50:ed:dd:7c:63:6c:ef:24:7f:01:00:1c:5c:9c:
bd:99:27:de:08:51:96:24:53:c6:73:ea:c4:82:53:
f6:59:5e:0f:eb:d0:20:55:1b:c6:e9:ad:89:94:f2:
95:14:b3:6a:5f:7e:30:13:44:ca:98:ed:d7:9e:35:
d8:63:eb:8a:05:23:99:b1:d9:d7:a2:08:ad:16:00:
68:7b:90:b4:ef:ae:d8:a4:f7:87:16:ec:e4:d8:25:
52:a0:ad:24:e7:fc:c1:3a:ef:55:c5:d7:2e:76:2b:
c7:b1:a4:cc:e5:ad:4b:e1:36:e7:39:8b:39:ab:57:
bb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A9:42:00:A0:2D:2A:BD:10:5C:32:5E:2B:75:74:24:19:AD:3E:D8
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/1-alCAKAtKr0QXDJeK3V0JBmtPtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0/24
46.38.136.0-46.38.140.255
46.38.144.0/23
46.38.150.0/24
109.94.165.0/24
185.24.149.0-185.24.150.255
185.29.220.0/22
185.143.74.0/23
212.16.64.0/19
212.80.0.0/19
IPv6:
2a00:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
1c:6d:73:6a:0e:52:f6:ce:06:1a:b2:0e:65:66:8e:4e:1e:f9:
6b:c0:44:3f:04:e6:94:50:74:8e:46:89:49:48:46:2b:14:52:
0b:7f:eb:d4:93:9f:6f:e0:20:93:a7:71:35:d3:90:3c:38:cc:
3b:5c:aa:ec:29:8b:5e:d7:ef:40:4a:6b:76:e3:4d:75:d1:ce:
cc:b6:0e:6e:45:09:49:d8:51:7f:aa:b5:10:b3:f9:de:2a:ef:
3a:5f:42:57:6d:79:50:37:d5:88:00:78:e4:4c:a2:84:db:54:
ed:e0:56:a8:7d:54:13:e0:16:9a:73:0e:3e:6d:64:28:fa:12:
28:26:4b:ca:22:be:89:9a:b1:e9:1e:84:f8:59:92:2d:a5:68:
f6:a2:11:d7:42:98:8e:bc:3b:e8:b9:7d:16:38:09:95:a5:99:
a4:68:78:94:c3:27:0c:1e:3e:27:2d:72:ad:c3:b3:11:9b:9c:
71:6a:94:57:98:b8:37:7b:32:36:8c:50:0c:8c:ed:76:82:da:
57:60:50:69:bc:76:44:33:de:37:a3:82:bc:03:e3:ac:bf:6d:
0b:de:e8:75:bc:7c:38:c4:81:56:9a:09:76:ed:86:4a:a1:35:
6d:3c:a3:4a:52:ac:b9:57:8b:9e:50:ac:21:d8:b9:6d:dd:d8:
91:79:43:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 13 12:47:21 2024 by rpki-client on console-fra.rpki-client.org