Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/CRpPK6whHHy6NNm1mDBqHylAuJw.roa
File: CRpPK6whHHy6NNm1mDBqHylAuJw.roa (raw, json)
Hash identifier: XncLRFc5kqMXkPy38bcHFFEiDQ6CHrmhRcNoF/E9Usc=
Subject key identifier: 09:1A:4F:2B:AC:21:1C:7C:BA:34:D9:B5:98:30:6A:1F:29:40:B8:9C
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018DD082C85D7B96AE7CC5693E2AEE76A21B
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/CRpPK6whHHy6NNm1mDBqHylAuJw.roa
Signing time: Thu 22 Feb 2024 11:10:48 +0000
ROA not before: Thu 22 Feb 2024 11:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44889
IP address blocks: 46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
46.38.136.0/24 maxlen: 24
46.38.137.0/24 maxlen: 24
46.38.138.0/24 maxlen: 24
46.38.139.0/24 maxlen: 24
46.38.140.0/24 maxlen: 24
46.38.144.0/23 maxlen: 23
46.38.150.0/24 maxlen: 24
46.38.152.0/22 maxlen: 22
46.38.156.0/23 maxlen: 23
109.94.164.0/24 maxlen: 24
109.94.165.0/24 maxlen: 24
185.24.148.0/24 maxlen: 24
185.24.149.0/24 maxlen: 24
185.24.150.0/24 maxlen: 24
185.24.151.0/24 maxlen: 24
185.29.220.0/24 maxlen: 24
185.29.221.0/24 maxlen: 24
185.29.222.0/24 maxlen: 24
185.29.223.0/24 maxlen: 24
185.143.74.0/24 maxlen: 24
185.143.75.0/24 maxlen: 24
212.16.64.0/19 maxlen: 24
212.16.71.0/24 maxlen: 24
212.16.72.0/24 maxlen: 25
212.16.86.0/23 maxlen: 23
212.16.89.0/24 maxlen: 24
212.80.0.0/19 maxlen: 24
212.80.2.0/24 maxlen: 24
212.80.29.0/24 maxlen: 24
2a00:7d80::/29 maxlen: 64
Validation: Failed, certificate revoked on Sun 03 Mar 2024 07:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d0:82:c8:5d:7b:96:ae:7c:c5:69:3e:2a:ee:76:a2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Feb 22 11:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=091a4f2bac211c7cba34d9b598306a1f2940b89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0e:38:42:d6:64:48:f0:9b:41:87:fd:e9:e4:
89:d2:a1:f5:c9:b6:73:d8:42:4c:be:f4:b1:e2:9c:
d6:0f:94:73:dc:a8:e3:42:8d:41:92:3a:af:e4:d1:
f5:d1:2a:04:67:a8:a8:dd:75:25:75:ac:0a:b4:58:
ac:54:08:c2:0a:87:10:eb:82:81:bc:1d:41:15:32:
1d:a4:46:55:10:5c:2d:82:22:dc:99:d5:8d:cc:94:
04:e4:8f:8d:87:cf:3a:2b:2a:5c:10:b3:41:da:1a:
88:b4:a2:50:ab:f8:32:db:63:13:07:74:80:0c:bd:
83:81:8a:db:7a:30:d0:79:dd:3f:d4:cd:34:b5:36:
68:44:04:94:cb:bb:49:e4:56:a0:20:69:5e:f6:b0:
9f:b4:9b:e3:cf:05:19:9b:df:e5:95:95:07:4f:07:
9c:09:f2:b6:5e:b0:f8:ba:03:05:cc:a3:d3:9f:56:
1e:50:09:c1:9d:75:f0:fa:21:47:d0:05:bc:8e:51:
21:3f:9a:34:d6:af:01:9c:cb:28:fe:64:c8:e2:cf:
f7:ac:d2:f3:7f:8f:37:a8:3c:c4:c6:a9:3e:0e:bb:
10:da:a7:15:f9:cd:3c:bd:9d:3d:ec:10:95:7c:c6:
d2:1e:20:3e:16:dd:c0:22:f3:ac:96:60:97:b7:53:
87:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1A:4F:2B:AC:21:1C:7C:BA:34:D9:B5:98:30:6A:1F:29:40:B8:9C
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/CRpPK6whHHy6NNm1mDBqHylAuJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0/24
46.38.136.0-46.38.140.255
46.38.144.0/23
46.38.150.0/24
46.38.152.0-46.38.157.255
109.94.164.0/23
185.24.148.0/22
185.29.220.0/22
185.143.74.0/23
212.16.64.0/19
212.80.0.0/19
IPv6:
2a00:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
9a:40:ed:da:cf:4b:73:bd:9e:37:21:52:8f:07:8e:16:e9:1b:
ec:c7:de:8d:a4:ff:fc:60:58:d6:ad:94:4e:ab:a4:b2:5b:ba:
27:9b:ef:8b:a4:0d:6e:fc:39:c7:51:76:0e:8a:f5:39:f4:01:
b4:96:aa:73:54:fb:e2:7a:e4:e3:8d:4b:cd:6f:bf:ba:2d:bf:
c3:cc:cd:35:d0:1a:6f:d0:0e:f5:f1:23:f9:7f:25:e4:7c:f9:
f6:b1:4f:69:ad:3c:af:8b:86:73:0f:55:0c:8c:f3:8f:6e:50:
5e:5a:0c:df:67:f9:ab:4f:8f:42:f9:95:59:e0:f6:06:6a:b7:
e5:61:55:fc:05:0f:a6:34:86:7f:50:95:85:48:88:3b:8d:be:
fd:25:94:71:2e:e9:ed:ae:e8:8c:ee:31:b4:9c:3a:ad:3e:23:
b1:b2:0c:21:5f:f3:46:6e:e1:32:cf:1a:fa:46:e9:a8:54:aa:
3a:6b:d0:90:f9:99:b0:9e:74:02:7c:80:19:f9:fa:10:52:bb:
aa:50:1e:cf:df:c3:04:9e:aa:a6:15:67:82:4c:6c:1e:be:fd:
39:95:86:84:bd:2b:f4:e9:42:85:be:9e:13:a5:46:46:fd:6f:
d5:1e:e3:a6:5a:27:7f:44:b9:42:b6:aa:e3:a1:22:0a:a3:e9:
e0:71:5f:47
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgISAY3Qgshde5aufMVpPirudqIbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjQwMjIyMTExMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTFhNGYyYmFjMjExYzdjYmEzNGQ5YjU5ODMwNmExZjI5NDBiODljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ44QtZkSPCbQYf96eSJ0qH1ybZz
2EJMvvSx4pzWD5Rz3KjjQo1Bkjqv5NH10SoEZ6io3XUldawKtFisVAjCCocQ64KB
vB1BFTIdpEZVEFwtgiLcmdWNzJQE5I+Nh886KypcELNB2hqItKJQq/gy22MTB3SA
DL2DgYrbejDQed0/1M00tTZoRASUy7tJ5FagIGle9rCftJvjzwUZm9/llZUHTwec
CfK2XrD4ugMFzKPTn1YeUAnBnXXw+iFH0AW8jlEhP5o01q8BnMso/mTI4s/3rNLz
f483qDzExqk+DrsQ2qcV+c08vZ097BCVfMbSHiA+Ft3AIvOslmCXt1OHgwIDAQAB
o4ICazCCAmcwHQYDVR0OBBYEFAkaTyusIRx8ujTZtZgwah8pQLicMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvQ1JwUEs2d2hISHk2Tk5tMW1EQnFIeWxBdUp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGABggrBgEFBQcBBwEB/wRxMG8wXgQCAAEwWAMEAC4mgQME
AC4mgzAMAwQDLiaIAwQALiaMAwQBLiaQAwQALiaWMAwDBAMuJpgDBAEuJpwDBAFt
XqQDBAK5GJQDBAK5HdwDBAG5j0oDBAXUEEADBAXUUAAwDQQCAAIwBwMFAyoAfYAw
DQYJKoZIhvcNAQELBQADggEBAJpA7drPS3O9njchUo8HjhbpG+zH3o2k//xgWNat
lE6rpLJbuieb74ukDW78OcdRdg6K9Tn0AbSWqnNU++J65OONS81vv7otv8PMzTXQ
Gm/QDvXxI/l/JeR8+faxT2mtPK+LhnMPVQyM849uUF5aDN9n+atPj0L5lVng9gZq
t+VhVfwFD6Y0hn9QlYVIiDuNvv0llHEu6e2u6IzuMbScOq0+I7GyDCFf80Zu4TLP
GvpG6ahUqjpr0JD5mbCedAJ8gBn5+hBSu6pQHs/fwwSeqqYVZ4JMbB6+/TmVhoS9
K/TpQoW+nhOlRkb9b9Ue46ZaJ39EuUK2quOhIgqj6eBxX0c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:06 2024 by rpki-client on console-ams.rpki-client.org