Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/mxn4MJvulZYJPvidXGrnDRUQ-RI.roa
File: mxn4MJvulZYJPvidXGrnDRUQ-RI.roa (raw, json)
Hash identifier: 9VQHZNz4Jtk+PbizX3ohfwZCIuv1hwSkhNej8dDfsN4=
Subject key identifier: 9B:19:F8:30:9B:EE:95:96:09:3E:F8:9D:5C:6A:E7:0D:15:10:F9:12
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018DB29454E8CA5437D12268E11D8357B1B1
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/mxn4MJvulZYJPvidXGrnDRUQ-RI.roa
Signing time: Fri 16 Feb 2024 15:41:21 +0000
ROA not before: Fri 16 Feb 2024 15:41:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44889
IP address blocks: 46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
46.38.136.0/24 maxlen: 24
46.38.137.0/24 maxlen: 24
46.38.138.0/24 maxlen: 24
46.38.139.0/24 maxlen: 24
46.38.140.0/24 maxlen: 24
46.38.144.0/23 maxlen: 23
46.38.150.0/24 maxlen: 24
46.38.152.0/22 maxlen: 22
46.38.156.0/23 maxlen: 23
109.94.164.0/24 maxlen: 24
109.94.165.0/24 maxlen: 24
185.24.148.0/24 maxlen: 24
185.24.149.0/24 maxlen: 24
185.24.150.0/24 maxlen: 24
185.24.151.0/24 maxlen: 24
185.29.220.0/24 maxlen: 24
185.29.221.0/24 maxlen: 24
185.29.222.0/24 maxlen: 24
185.29.223.0/24 maxlen: 24
185.143.74.0/24 maxlen: 24
185.143.75.0/24 maxlen: 24
212.16.64.0/19 maxlen: 24
212.16.71.0/24 maxlen: 24
212.16.72.0/24 maxlen: 25
212.16.78.0/24 maxlen: 24
212.16.79.0/24 maxlen: 24
212.16.86.0/23 maxlen: 23
212.16.89.0/24 maxlen: 24
212.80.0.0/19 maxlen: 24
212.80.2.0/24 maxlen: 24
212.80.29.0/24 maxlen: 24
2a00:7d80::/29 maxlen: 64
Validation: Failed, certificate revoked on Thu 22 Feb 2024 07:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b2:94:54:e8:ca:54:37:d1:22:68:e1:1d:83:57:b1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Feb 16 15:41:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b19f8309bee9596093ef89d5c6ae70d1510f912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:be:47:af:35:fa:e2:b1:31:b0:71:c7:4c:93:
83:f5:6f:0d:0e:8e:36:01:dd:92:ae:8f:bf:2a:45:
55:27:23:e7:a0:6a:2a:7b:b2:45:6d:38:2e:85:aa:
7f:c0:99:04:4d:44:83:c4:70:8b:2d:12:06:5f:41:
6e:76:db:74:78:d3:6b:89:b9:53:73:5e:1a:be:8e:
b9:83:48:b5:67:ae:60:11:12:6a:df:1b:aa:51:6f:
4b:8f:3d:b5:63:a2:c0:49:38:89:50:ba:e4:ba:75:
8b:96:5c:8e:4b:3f:36:82:bd:84:b1:93:8a:11:19:
e5:56:a0:70:db:74:f9:d2:17:2a:87:da:aa:83:ce:
fa:2e:3d:9d:96:7c:9e:21:62:8a:a1:d1:78:b0:cc:
c6:32:f4:a6:12:3d:77:f5:89:57:17:f8:19:ff:9a:
de:aa:a1:b6:0b:3c:8f:ae:5f:bf:0e:c3:4f:37:42:
2f:fb:0a:d2:6a:cb:c5:d0:e7:96:43:9b:ec:c8:c4:
98:8c:bc:84:25:a1:a3:78:a6:c0:8e:c9:d2:e8:18:
48:5a:eb:82:7f:42:f5:07:99:54:7c:a8:04:97:d4:
41:54:46:f9:2c:89:d0:0d:83:3d:88:34:89:1f:e1:
ce:73:2f:1d:e7:29:73:96:05:dc:71:3b:a6:b4:5e:
ea:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:19:F8:30:9B:EE:95:96:09:3E:F8:9D:5C:6A:E7:0D:15:10:F9:12
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/mxn4MJvulZYJPvidXGrnDRUQ-RI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0/24
46.38.136.0-46.38.140.255
46.38.144.0/23
46.38.150.0/24
46.38.152.0-46.38.157.255
109.94.164.0/23
185.24.148.0/22
185.29.220.0/22
185.143.74.0/23
212.16.64.0/19
212.80.0.0/19
IPv6:
2a00:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
6e:3e:bc:70:4a:99:a4:aa:47:69:b4:de:28:86:da:7b:11:ba:
c7:d8:a7:d6:61:b9:a1:39:90:28:30:84:a8:e8:16:1e:ed:f5:
31:88:02:62:44:2a:d7:6c:38:45:91:d9:e7:9f:b6:87:c7:79:
b7:d5:68:96:1c:11:42:98:3c:4a:27:93:91:b2:a3:07:db:aa:
04:f1:cb:c6:0e:e8:65:7f:2f:2c:9f:29:13:07:b6:5f:2f:bc:
96:b1:7f:81:17:89:b0:4b:38:7c:de:bc:80:a4:16:57:3f:9a:
d0:69:40:56:b4:cd:fb:04:3e:26:e9:d2:87:77:4a:31:6f:6d:
2c:31:1d:ff:57:56:55:37:f7:a1:66:df:47:31:ff:df:e7:b8:
87:cc:89:0a:86:48:38:1a:7e:cd:27:db:b6:62:38:b8:79:93:
f5:7d:78:02:80:65:52:5e:f2:b0:47:a9:4b:80:06:7f:8a:a4:
0a:e5:c5:27:87:c5:6b:75:bc:b3:31:5e:ec:a5:b7:4c:fd:5f:
58:85:af:32:40:da:16:76:13:8a:8a:4e:45:c0:6b:35:ab:9e:
27:10:1c:d0:73:22:a1:98:6d:72:77:f4:1a:91:95:da:7e:37:
99:00:be:3c:7a:70:94:e5:20:7d:66:df:36:c3:dd:8f:2c:de:
33:e1:ef:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:07 2024 by rpki-client on console-ams.rpki-client.org