Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/T3453rZ4qjh0mGp5pWGwU9Gmtuw.roa
File: T3453rZ4qjh0mGp5pWGwU9Gmtuw.roa (raw, json)
Hash identifier: Tv5f4RI4GRwKhHDuHltRP7MaR5yhsoLYKLv5Nh8NoEw=
Subject key identifier: 4F:7E:39:DE:B6:78:AA:38:74:98:6A:79:A5:61:B0:53:D1:A6:B6:EC
Certificate issuer: /CN=44cf3fa7074e7304b1f32e1664ad5f7157d65d62
Certificate serial: 01934880F085CB866EEC8C69E9220E66BA05
Authority key identifier: 44:CF:3F:A7:07:4E:73:04:B1:F3:2E:16:64:AD:5F:71:57:D6:5D:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/T3453rZ4qjh0mGp5pWGwU9Gmtuw.roa
Signing time: Wed 20 Nov 2024 07:37:09 +0000
ROA not before: Wed 20 Nov 2024 07:37:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21283
IP address blocks: 46.122.0.0/15 maxlen: 15
46.122.64.0/21 maxlen: 21
46.122.96.0/21 maxlen: 21
46.164.0.0/18 maxlen: 18
62.84.224.0/20 maxlen: 20
80.95.224.0/20 maxlen: 20
85.10.0.0/19 maxlen: 19
85.10.32.0/20 maxlen: 20
90.157.128.0/17 maxlen: 17
92.37.0.0/17 maxlen: 17
94.127.24.0/21 maxlen: 21
109.239.176.0/20 maxlen: 20
146.212.0.0/16 maxlen: 18
185.28.8.0/22 maxlen: 22
185.173.52.0/22 maxlen: 22
188.64.24.0/21 maxlen: 21
212.18.32.0/19 maxlen: 19
213.157.224.0/19 maxlen: 19
2001:15c0::/29 maxlen: 29
2a00:1a20::/29 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:48:80:f0:85:cb:86:6e:ec:8c:69:e9:22:0e:66:ba:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44cf3fa7074e7304b1f32e1664ad5f7157d65d62
Validity
Not Before: Nov 20 07:37:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f7e39deb678aa3874986a79a561b053d1a6b6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a2:85:ee:98:10:92:a1:d6:eb:25:61:b7:4f:
ed:ff:2c:99:92:bd:bf:fa:15:62:d1:44:54:8c:ec:
d1:4b:a1:6d:ab:bb:48:39:eb:b5:7d:16:b0:57:78:
48:af:c3:d8:46:f7:dd:61:4f:26:24:c7:8a:85:11:
51:e1:04:5f:c1:e9:42:02:5a:ef:24:8d:85:b4:94:
50:87:cd:be:5b:db:e9:ad:46:6c:40:8e:d1:21:81:
35:94:7b:74:ad:7e:2f:21:5f:84:17:98:6e:08:90:
ae:15:1f:90:0b:3a:e4:67:2c:38:e0:1f:8f:65:15:
42:43:21:63:58:1e:5f:4b:02:73:a6:12:15:c1:24:
3c:79:ac:4b:da:b1:7b:7d:a4:87:50:2f:ad:bc:6b:
a9:64:64:9f:02:7e:a6:74:5f:ce:f8:5e:4b:06:79:
31:c6:96:54:d0:97:7d:78:38:d4:55:7f:f3:78:50:
b8:d7:63:ba:c5:d6:53:f6:0a:20:28:bb:a4:56:54:
a7:07:4a:ad:bb:0c:2c:55:1f:fa:c5:ae:19:97:a2:
83:c5:ee:7d:44:6e:80:70:38:c1:39:2d:85:90:db:
84:cc:7f:df:4f:e3:02:30:f8:5e:3e:e0:72:10:fe:
29:31:86:7e:d7:79:d8:c7:df:44:8e:3c:2d:f6:94:
59:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7E:39:DE:B6:78:AA:38:74:98:6A:79:A5:61:B0:53:D1:A6:B6:EC
X509v3 Authority Key Identifier:
keyid:44:CF:3F:A7:07:4E:73:04:B1:F3:2E:16:64:AD:5F:71:57:D6:5D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/T3453rZ4qjh0mGp5pWGwU9Gmtuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.122.0.0/15
46.164.0.0/18
62.84.224.0/20
80.95.224.0/20
85.10.0.0-85.10.47.255
90.157.128.0/17
92.37.0.0/17
94.127.24.0/21
109.239.176.0/20
146.212.0.0/16
185.28.8.0/22
185.173.52.0/22
188.64.24.0/21
212.18.32.0/19
213.157.224.0/19
IPv6:
2001:15c0::/29
2a00:1a20::/29
Signature Algorithm: sha256WithRSAEncryption
81:52:8b:d0:ad:f0:17:48:bc:93:80:d5:86:33:28:3f:4b:28:
12:dd:86:f2:4e:fb:20:8a:67:8b:03:2b:df:4e:7c:c0:66:a8:
34:8a:9f:0e:4f:ce:12:7b:ac:fb:72:95:97:0b:35:eb:c3:bf:
3e:1d:bc:ee:18:58:72:a3:02:e9:2a:39:8f:84:2b:8a:06:dc:
c7:50:fc:d1:3d:d6:1d:cd:51:73:46:7f:18:32:03:40:33:0c:
6f:5a:09:fb:39:e4:43:6b:25:2d:a8:6d:33:21:7d:ef:a7:cd:
81:af:b6:3a:d1:cb:cb:93:eb:3c:95:a5:e1:f4:86:5a:b5:e3:
ac:db:3a:7b:6c:d5:7a:bb:bb:a6:fb:0a:4a:92:c3:0a:ab:78:
a6:86:5d:e9:13:42:f6:f8:9b:dd:ca:3a:df:05:26:3e:cc:0e:
c8:50:7f:d4:11:94:ab:04:4c:bc:84:21:29:52:50:c3:7d:bc:
05:52:73:4b:9c:c5:1c:23:2d:1c:a9:25:bb:13:fe:25:9d:6c:
9d:7c:58:65:6b:53:e9:0b:b7:d4:82:71:0f:09:cb:d7:22:ac:
c1:db:da:14:83:fb:28:5a:8e:0d:c3:95:94:dc:b8:93:9b:11:
9f:06:e1:69:5e:e2:50:82:69:fa:00:98:a3:ae:b2:6f:d8:16:
3b:c8:e0:05
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgISAZNIgPCFy4Zu7Ixp6SIOZroFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0Y2YzZmE3MDc0ZTczMDRiMWYzMmUxNjY0YWQ1ZjcxNTdk
NjVkNjIwHhcNMjQxMTIwMDczNzA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjdlMzlkZWI2NzhhYTM4NzQ5ODZhNzlhNTYxYjA1M2QxYTZiNmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaKF7pgQkqHW6yVht0/t/yyZkr2/
+hVi0URUjOzRS6Ftq7tIOeu1fRawV3hIr8PYRvfdYU8mJMeKhRFR4QRfwelCAlrv
JI2FtJRQh82+W9vprUZsQI7RIYE1lHt0rX4vIV+EF5huCJCuFR+QCzrkZyw44B+P
ZRVCQyFjWB5fSwJzphIVwSQ8eaxL2rF7faSHUC+tvGupZGSfAn6mdF/O+F5LBnkx
xpZU0Jd9eDjUVX/zeFC412O6xdZT9gogKLukVlSnB0qtuwwsVR/6xa4Zl6KDxe59
RG6AcDjBOS2FkNuEzH/fT+MCMPhePuByEP4pMYZ+13nYx99Ejjwt9pRZpwIDAQAB
o4ICeTCCAnUwHQYDVR0OBBYEFE9+Od62eKo4dJhqeaVhsFPRprbsMB8GA1UdIwQY
MBaAFETPP6cHTnMEsfMuFmStX3FX1l1iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk04X3B3ZE9jd1N4OHk0V1pLMWZjVmZXWFdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84OTMxNDktZGQyNS00NTk2LWJhZDgt
MWRlOTMzZDlmODQzLzEvVDM0NTNyWjRxamgwbUdwNXBXR3dVOUdtdHV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS84OTMxNDktZGQyNS00NTk2LWJhZDgtMWRlOTMzZDlmODQz
LzEvUk04X3B3ZE9jd1N4OHk0V1pLMWZjVmZXWFdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGOBggrBgEFBQcBBwEB/wR/MH0wZQQCAAEwXwMDAS56AwQG
LqQAAwQEPlTgAwQEUF/gMAsDAwFVCgMEBFUKIAMEB1qdgAMEB1wlAAMEA15/GAME
BG3vsAMDAJLUAwQCuRwIAwQCua00AwQDvEAYAwQF1BIgAwQF1Z3gMBQEAgACMA4D
BQMgARXAAwUDKgAaIDANBgkqhkiG9w0BAQsFAAOCAQEAgVKL0K3wF0i8k4DVhjMo
P0soEt2G8k77IIpniwMr3058wGaoNIqfDk/OEnus+3KVlws168O/Ph287hhYcqMC
6So5j4Qrigbcx1D80T3WHc1Rc0Z/GDIDQDMMb1oJ+znkQ2slLahtMyF976fNga+2
OtHLy5PrPJWl4fSGWrXjrNs6e2zVeru7pvsKSpLDCqt4poZd6RNC9vib3co63wUm
PswOyFB/1BGUqwRMvIQhKVJQw328BVJzS5zFHCMtHKkluxP+JZ1snXxYZWtT6Qu3
1IJxDwnL1yKswdvaFIP7KFqODcOVlNy4k5sRnwbhaV7iUIJp+gCYo66yb9gWO8jg
BQ==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:25 2025 by rpki-client