Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/CyQdCbieCKtKo-ZlvsS-D7KRwtU.roa
File: CyQdCbieCKtKo-ZlvsS-D7KRwtU.roa (raw, json)
Hash identifier: eNhUQG9WYpGdBN70Uf3qhCa/vzZHo+fHKzPrkVu/9Gg=
Subject key identifier: 0B:24:1D:09:B8:9E:08:AB:4A:A3:E6:65:BE:C4:BE:0F:B2:91:C2:D5
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01942220050BD0E01C9CE3CAC0063C99D7AC
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/CyQdCbieCKtKo-ZlvsS-D7KRwtU.roa
Signing time: Wed 01 Jan 2025 13:48:31 +0000
ROA not before: Wed 01 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204104
IP address blocks: 46.38.136.0/24 maxlen: 24
46.38.137.0/24 maxlen: 24
46.38.138.0/24 maxlen: 24
109.94.164.0/24 maxlen: 24
212.80.8.0/24 maxlen: 24
212.80.9.0/24 maxlen: 24
212.80.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:05:0b:d0:e0:1c:9c:e3:ca:c0:06:3c:99:d7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 1 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b241d09b89e08ab4aa3e665bec4be0fb291c2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:f3:5e:da:a2:40:3c:d1:68:06:92:fd:84:
03:6c:a7:79:81:1f:b6:d5:63:04:2c:8f:24:95:82:
6b:49:53:15:74:6e:27:ba:5c:76:e5:87:b2:a9:2e:
e2:bb:12:8f:5f:da:af:9c:19:a0:3a:57:d4:c0:3f:
63:d4:a1:32:e5:2e:ad:81:c0:99:7c:71:57:16:7a:
29:d7:d3:a5:2b:61:8b:36:e1:48:4f:70:94:9a:39:
a6:10:b4:fa:dc:e8:d8:3f:0f:c2:59:2b:f9:69:bf:
db:93:e2:78:a8:ef:41:03:dc:b9:1a:fa:d8:58:8d:
e2:af:f4:38:84:b7:05:7b:e5:3c:4b:fb:53:2b:16:
f4:3b:f8:07:d4:ad:67:c9:e0:64:e8:54:4d:bd:f2:
47:62:b9:36:27:de:de:04:8a:28:df:78:a0:9b:9b:
6a:92:2e:8f:b2:32:30:aa:d0:77:91:d2:d7:b9:b2:
2f:5b:b9:5e:52:cf:62:68:ab:44:af:39:aa:6a:78:
8d:4d:03:83:e3:88:ca:85:9f:af:09:e9:b1:37:49:
2d:a4:3b:7a:f7:e3:62:aa:af:e4:83:83:7c:2e:0b:
da:07:26:0c:3b:6c:c6:70:bf:ac:86:84:e2:9d:61:
fa:15:ba:67:fd:d3:9e:35:6c:27:e3:bd:cf:d3:09:
b3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:24:1D:09:B8:9E:08:AB:4A:A3:E6:65:BE:C4:BE:0F:B2:91:C2:D5
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/CyQdCbieCKtKo-ZlvsS-D7KRwtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.136.0-46.38.138.255
109.94.164.0/24
212.80.8.0-212.80.10.255
Signature Algorithm: sha256WithRSAEncryption
bb:53:51:86:cb:75:1c:d3:f9:83:8c:2d:26:64:f0:86:33:c6:
b1:17:c6:ab:b3:df:0a:73:05:dd:e4:92:56:57:30:5d:21:d5:
8e:6d:05:e7:4e:bc:67:bb:31:c7:95:cc:c7:d1:2a:c2:f5:ac:
7c:36:80:b4:b3:0b:1a:19:9b:70:e3:23:05:14:10:06:c6:54:
4c:2f:6f:e8:36:44:55:0c:9e:14:50:88:41:06:3b:e6:6b:de:
a6:6b:68:62:32:e2:67:43:66:d5:77:0e:0f:ee:89:7e:e0:3f:
ed:93:1f:95:84:a3:ce:35:86:4c:be:1b:86:89:e4:2a:16:6a:
69:71:d9:2b:74:6c:ee:4c:2b:f0:a9:6c:8e:d3:47:55:55:11:
39:1e:b9:af:37:0c:03:f2:e9:a4:ae:e1:80:cf:87:c6:f5:73:
e2:64:da:eb:29:d6:17:82:4f:c2:15:c4:6a:15:43:24:b7:29:
94:41:bf:e3:ca:53:1c:cc:e8:56:14:9f:10:2f:55:85:3a:3c:
95:d9:4c:ec:c3:6f:7e:2a:c9:da:b3:a9:25:d1:dd:70:d3:3a:
2b:d9:35:00:22:d0:11:75:d3:8e:4a:47:a3:69:cb:34:7b:c1:
ca:e4:5d:96:cb:50:21:dd:6c:e5:93:fa:1b:96:66:76:8f:66:
cf:2f:80:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:37:35 2025 by rpki-client