Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/o7ViYIxXznhzu5z0PLa83fA783Q.roa
File: o7ViYIxXznhzu5z0PLa83fA783Q.roa (raw, json)
Hash identifier: RO22hPZ2w5kMPUUQGetNuncuPzAfyW5upFUrpnnf7Ag=
Subject key identifier: A3:B5:62:60:8C:57:CE:78:73:BB:9C:F4:3C:B6:BC:DD:F0:3B:F3:74
Certificate issuer: /CN=7a6735b7a553a1680c11add3e48c3635b53979ca
Certificate serial: 018D4C96AD026EE07129DA28FD6049E387B1
Authority key identifier: 7A:67:35:B7:A5:53:A1:68:0C:11:AD:D3:E4:8C:36:35:B5:39:79:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/o7ViYIxXznhzu5z0PLa83fA783Q.roa
Signing time: Sat 27 Jan 2024 20:22:39 +0000
ROA not before: Sat 27 Jan 2024 20:22:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49604
IP address blocks: 45.151.6.0/23 maxlen: 23
85.222.232.0/22 maxlen: 24
85.234.242.0/23 maxlen: 23
85.234.244.0/23 maxlen: 23
85.234.246.0/23 maxlen: 24
185.31.240.0/22 maxlen: 24
217.146.64.0/20 maxlen: 24
2a02:29e8::/32 maxlen: 32
2a02:29ea:a::/48 maxlen: 48
2a02:29ea:14::/48 maxlen: 48
2a02:29ea:1e::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 29 Jan 2024 09:54:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4c:96:ad:02:6e:e0:71:29:da:28:fd:60:49:e3:87:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a6735b7a553a1680c11add3e48c3635b53979ca
Validity
Not Before: Jan 27 20:22:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3b562608c57ce7873bb9cf43cb6bcddf03bf374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:94:87:8e:8c:46:c8:2a:09:31:0f:c4:01:
6d:99:0e:09:43:82:65:fd:a3:4a:03:c7:13:9e:ca:
23:20:da:a0:81:7c:69:69:60:f6:4e:57:be:2d:ad:
77:d2:dd:c3:db:b7:71:26:d9:8b:24:2b:ff:b6:b0:
a8:44:7f:1d:c1:95:20:c1:d9:aa:b7:ef:1f:d9:f1:
da:80:f4:ac:2c:a4:93:55:c4:00:b7:f9:40:e2:68:
4a:62:87:0c:3b:b4:00:81:cf:cc:eb:1b:35:b7:b8:
4b:75:2d:17:4c:2b:31:5b:ab:79:1a:01:21:cb:9a:
ed:3d:7a:4b:b7:dc:b7:f4:2b:90:3e:58:68:d6:09:
59:95:24:57:33:23:69:22:4c:bb:2d:9a:d5:69:9d:
1d:88:23:f0:7d:c6:bc:2f:44:1a:9f:73:a3:6f:aa:
9b:79:57:26:26:77:31:a8:9c:1c:32:4a:dc:1d:b3:
08:71:02:0d:bd:49:f0:5a:e4:79:32:23:a9:8d:29:
92:bf:f4:9a:20:47:6a:4e:aa:a0:7b:fe:52:18:3c:
43:c8:a3:98:bf:81:4e:f0:00:3b:e8:0b:16:1f:d4:
6e:df:72:0a:8b:87:94:5e:a9:e0:b5:ca:67:cb:35:
14:76:ec:e7:dc:6c:8b:c4:24:5b:9c:8e:dc:25:41:
b1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B5:62:60:8C:57:CE:78:73:BB:9C:F4:3C:B6:BC:DD:F0:3B:F3:74
X509v3 Authority Key Identifier:
keyid:7A:67:35:B7:A5:53:A1:68:0C:11:AD:D3:E4:8C:36:35:B5:39:79:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/o7ViYIxXznhzu5z0PLa83fA783Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.6.0/23
85.222.232.0/22
85.234.242.0-85.234.247.255
185.31.240.0/22
217.146.64.0/20
IPv6:
2a02:29e8::/32
2a02:29ea:a::/48
2a02:29ea:14::/48
2a02:29ea:1e::/48
Signature Algorithm: sha256WithRSAEncryption
57:73:9b:55:53:7d:c1:0d:05:59:70:95:ed:47:38:bf:03:a8:
29:4e:54:56:97:de:06:e1:97:04:0c:8d:f1:c1:ca:c4:63:b6:
f4:75:9c:e2:69:5c:be:51:c7:fd:a9:2a:41:19:82:66:c4:ce:
f9:02:23:6d:54:b3:4c:8b:7f:b9:4e:20:66:02:16:3c:53:cd:
18:e4:87:a4:85:ae:21:19:f9:c8:db:71:46:24:24:a2:6c:fe:
b4:b2:c9:d3:22:63:f3:43:c7:78:e1:b9:34:e9:8d:5c:83:ea:
65:85:d3:6e:92:72:25:ad:00:07:c7:a4:f1:9c:c7:d9:52:8c:
7d:24:a3:7f:5d:49:94:dd:90:2f:64:0a:4f:38:4d:e4:95:87:
f8:0c:38:02:ec:9d:a2:9d:16:2a:0d:a4:c2:a1:b1:1d:5c:b7:
85:bc:5c:f3:7b:7e:22:9d:42:0c:8a:39:52:69:04:91:ad:41:
aa:57:47:b8:0a:5e:fd:d3:e3:d7:6e:88:a5:ad:a6:c7:85:69:
60:c2:56:3e:a9:d7:63:e4:a6:27:a5:0c:62:c8:72:9c:7b:47:
c0:4e:0a:52:20:34:ef:b5:c2:e0:3f:2c:25:16:85:6f:8d:77:
b0:20:c7:50:6e:73:74:8d:99:02:8f:8d:31:2c:c8:98:63:a7:
b0:98:7b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:27:38 2025 by rpki-client