Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/fXQQFieQAcqjCgRIOPbO2I777XM.roa
File: fXQQFieQAcqjCgRIOPbO2I777XM.roa (raw, json)
Hash identifier: M/EfC5Q8jDCt9riP9spzAlsO3W+OSbgvi7HG+EdHUn4=
Subject key identifier: 7D:74:10:16:27:90:01:CA:A3:0A:04:48:38:F6:CE:D8:8E:FB:ED:73
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01941190065E61E8DDB3A65A33C3DDA50B19
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/fXQQFieQAcqjCgRIOPbO2I777XM.roa
Signing time: Sun 29 Dec 2024 08:37:18 +0000
ROA not before: Sun 29 Dec 2024 08:37:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34918
IP address blocks: 46.38.139.0/24 maxlen: 24
46.38.148.0/24 maxlen: 24
185.29.222.0/24 maxlen: 24
212.80.11.0/24 maxlen: 24
212.80.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:11:90:06:5e:61:e8:dd:b3:a6:5a:33:c3:dd:a5:0b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Dec 29 08:37:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d741016279001caa30a044838f6ced88efbed73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c4:b9:3b:7b:c0:c0:d7:6e:fb:af:eb:94:a6:
6e:f8:c5:61:c4:a0:a1:8c:50:73:a9:ee:21:6d:fc:
7f:8c:79:3f:61:6e:29:0d:9a:be:e3:1b:7b:6f:13:
3f:1f:b6:42:e4:c8:8f:69:6b:6d:1f:a6:87:af:6b:
82:26:28:af:b5:08:09:4a:7e:30:f6:61:55:b4:af:
15:b4:11:0e:eb:7e:d1:6e:4b:fe:f2:18:2e:69:b4:
74:2b:42:81:f5:2d:2b:85:be:63:fa:52:60:67:21:
0a:0f:ec:6e:35:86:10:96:06:46:85:9f:4d:bb:50:
31:13:01:5b:24:4f:51:4a:fa:e4:6d:02:9b:25:12:
f2:6b:8f:b9:3d:81:35:b8:20:7d:77:c7:60:5a:21:
17:1c:14:4f:d7:5d:06:18:39:42:2d:b0:0b:4b:b4:
4b:6c:17:91:93:dc:a8:68:63:b6:37:b2:c5:a0:0c:
be:0b:05:3b:8d:1d:e2:f7:f5:1d:b6:99:ae:15:0b:
b7:f5:6b:6f:d1:76:96:e6:37:af:5f:92:ea:a5:df:
12:69:cc:b4:49:90:39:bd:ed:e5:50:eb:71:7d:2c:
8d:e3:43:ed:75:d1:9b:c5:84:33:cc:c9:77:50:a8:
98:37:fb:b4:3c:8a:81:b1:5b:7e:df:77:fa:7b:8c:
33:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:74:10:16:27:90:01:CA:A3:0A:04:48:38:F6:CE:D8:8E:FB:ED:73
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/fXQQFieQAcqjCgRIOPbO2I777XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.139.0/24
46.38.148.0/24
185.29.222.0/24
212.80.11.0/24
212.80.29.0/24
Signature Algorithm: sha256WithRSAEncryption
67:60:f4:7c:a5:ed:f5:56:06:18:eb:6b:7e:24:bd:7e:72:91:
b8:00:d1:ed:b6:f0:e1:95:51:80:fa:03:a2:ae:6f:4c:9e:b1:
77:46:48:73:0b:73:80:0d:6d:35:c7:f0:56:76:bd:91:48:7e:
9b:43:45:36:ba:08:03:65:dd:eb:b2:8e:3b:6f:b1:f4:ea:a7:
16:29:e0:ed:4a:92:45:93:28:9d:ca:18:80:5d:63:11:f7:a4:
9f:7c:d1:b2:46:50:63:2b:fa:78:81:51:e3:87:33:88:1c:2a:
b0:ac:ea:b3:1e:a2:10:04:dc:bd:53:54:c5:39:d8:81:41:5f:
18:21:fe:fc:e4:0f:9d:71:9d:e9:16:b8:64:b7:8f:a2:fb:69:
0e:fc:ba:df:43:d2:9a:68:a6:78:11:d1:3d:87:1a:e3:b4:a0:
ad:d9:06:b3:78:18:d6:97:85:e2:f5:38:76:ba:22:be:76:8d:
1b:b8:be:51:00:9d:ac:93:ae:6d:42:76:ce:21:b6:50:31:fb:
a6:a1:a8:cc:d5:6c:bc:a1:10:bc:25:dd:71:a0:57:f9:84:b1:
41:06:c6:17:bf:75:85:28:f5:fa:b9:34:80:67:d2:e6:b2:62:
ab:46:97:5c:a2:35:d2:55:03:fd:71:08:ba:f8:f8:86:c3:76:
50:c1:cf:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:34:31 2025 by rpki-client