Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/RNPk-nkHZKPJltQuJ_MPGL4cir0.roa
File: RNPk-nkHZKPJltQuJ_MPGL4cir0.roa (raw, json)
Hash identifier: rpdb0Q+usdbA8GDLZUx1z/1SXk8daqDyVv/7TAZ/O9k=
Subject key identifier: 44:D3:E4:FA:79:07:64:A3:C9:96:D4:2E:27:F3:0F:18:BE:1C:8A:BD
Certificate issuer: /CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Certificate serial: 018D176E3128E18E61A862F4BFC18C8F3CCE
Authority key identifier: 29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/RNPk-nkHZKPJltQuJ_MPGL4cir0.roa
Signing time: Wed 17 Jan 2024 12:38:33 +0000
ROA not before: Wed 17 Jan 2024 12:38:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25106
IP address blocks: 46.56.40.0/21 maxlen: 21
46.56.40.0/24 maxlen: 24
46.56.41.0/24 maxlen: 24
46.56.42.0/24 maxlen: 24
46.56.56.0/22 maxlen: 24
46.56.60.0/23 maxlen: 24
46.56.60.0/24 maxlen: 24
46.56.62.0/23 maxlen: 23
46.56.64.0/19 maxlen: 24
46.56.96.0/19 maxlen: 24
46.56.114.0/23 maxlen: 23
46.56.125.0/24 maxlen: 24
46.216.0.0/17 maxlen: 24
46.216.128.0/18 maxlen: 24
46.216.144.0/21 maxlen: 21
46.216.152.0/21 maxlen: 21
46.216.184.0/21 maxlen: 21
46.216.192.0/18 maxlen: 24
46.216.192.0/21 maxlen: 21
46.216.246.0/24 maxlen: 24
134.17.0.0/20 maxlen: 24
134.17.16.0/21 maxlen: 21
134.17.17.0/24 maxlen: 24
134.17.24.0/21 maxlen: 21
134.17.24.0/22 maxlen: 22
134.17.28.0/24 maxlen: 24
134.17.32.0/19 maxlen: 19
134.17.32.0/22 maxlen: 22
134.17.64.0/20 maxlen: 20
134.17.79.0/24 maxlen: 24
134.17.80.0/21 maxlen: 21
134.17.80.0/22 maxlen: 22
134.17.88.0/21 maxlen: 24
134.17.89.0/24 maxlen: 24
134.17.96.0/19 maxlen: 19
134.17.124.0/24 maxlen: 24
134.17.128.0/19 maxlen: 19
134.17.128.0/21 maxlen: 21
134.17.136.0/21 maxlen: 21
134.17.144.0/20 maxlen: 20
134.17.160.0/19 maxlen: 19
134.17.208.0/20 maxlen: 24
134.17.208.0/22 maxlen: 24
134.17.224.0/20 maxlen: 24
176.60.0.0/18 maxlen: 24
176.60.4.0/22 maxlen: 22
176.60.40.0/22 maxlen: 22
176.60.44.0/22 maxlen: 22
176.60.64.0/18 maxlen: 24
176.60.80.0/23 maxlen: 23
176.60.128.0/18 maxlen: 24
176.60.132.0/22 maxlen: 22
176.60.176.0/23 maxlen: 23
176.60.184.0/22 maxlen: 24
176.60.192.0/18 maxlen: 24
176.60.192.0/20 maxlen: 20
176.60.208.0/23 maxlen: 23
178.168.128.0/18 maxlen: 24
178.168.144.0/23 maxlen: 23
178.168.160.0/21 maxlen: 21
178.168.168.0/21 maxlen: 24
178.168.180.0/22 maxlen: 22
178.168.192.0/19 maxlen: 24
178.168.220.0/22 maxlen: 22
178.168.224.0/19 maxlen: 24
178.168.242.0/23 maxlen: 23
178.168.253.0/24 maxlen: 24
185.20.112.0/23 maxlen: 23
185.20.114.0/23 maxlen: 23
2a02:bf0::/32 maxlen: 32
2a02:bf0::/48 maxlen: 48
2a02:bf0:1::/48 maxlen: 48
2a02:bf0:2::/48 maxlen: 48
2a02:bf0:3::/48 maxlen: 48
2a02:bf0:6::/48 maxlen: 48
2a02:bf0:7::/48 maxlen: 48
2a02:bf0:10::/44 maxlen: 44
2a02:bf0:25::/48 maxlen: 48
2a02:bf0:26::/48 maxlen: 48
2a02:bf0:27::/48 maxlen: 48
2a02:bf0:28::/48 maxlen: 48
2a02:bf0:29::/48 maxlen: 48
2a02:bf0:1000::/36 maxlen: 36
2a02:bf0:1002::/48 maxlen: 48
2a02:bf0:1003::/48 maxlen: 48
2a02:bf0:3000::/36 maxlen: 44
2a02:bf0:4000::/36 maxlen: 44
2a02:bf0:5000::/36 maxlen: 44
2a02:bf0:6000::/36 maxlen: 44
2a02:bf0:7000::/36 maxlen: 44
Validation: Failed, certificate revoked on Fri 23 Feb 2024 09:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:17:6e:31:28:e1:8e:61:a8:62:f4:bf:c1:8c:8f:3c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Validity
Not Before: Jan 17 12:38:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44d3e4fa790764a3c996d42e27f30f18be1c8abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:38:77:7e:11:d7:b7:8c:43:1d:63:c8:aa:0d:
04:d0:5c:02:14:1e:77:f6:bb:f5:72:3f:bc:16:9d:
22:04:98:ba:64:40:90:f1:74:98:66:90:77:2f:28:
12:63:ad:bc:f8:d5:00:85:77:d0:be:22:0c:7e:87:
c4:9f:59:43:12:21:ea:71:e7:59:1d:a9:a6:cc:52:
5d:ae:47:84:50:61:70:f2:15:7d:a2:29:ab:33:ed:
2d:be:f9:c3:b2:3b:6e:76:91:56:55:65:ff:68:d8:
35:be:c1:b8:fa:53:a9:7d:88:2c:19:e0:1d:d1:b6:
e7:e4:53:48:e5:cb:93:7c:5e:4c:38:f2:ad:93:bc:
19:a5:8f:62:a1:4e:3f:30:37:ba:01:87:c9:2c:d6:
e9:f6:41:47:43:31:c6:00:e3:61:a9:98:14:72:b2:
40:69:f8:00:5c:f7:8f:5e:dd:9e:ef:55:5e:7a:d9:
65:bd:a4:ea:76:7f:2e:18:5f:78:70:07:54:37:66:
8f:b1:46:ec:74:9d:a6:1f:18:92:49:0f:ea:d1:0d:
d6:08:2b:82:3f:ae:e6:80:37:6e:31:4e:0e:55:bb:
0a:e7:2f:8d:5e:eb:98:e4:77:7e:96:01:f1:69:ca:
14:1b:e1:84:7c:04:1c:5e:47:c8:91:49:8d:bd:c7:
d4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D3:E4:FA:79:07:64:A3:C9:96:D4:2E:27:F3:0F:18:BE:1C:8A:BD
X509v3 Authority Key Identifier:
keyid:29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/RNPk-nkHZKPJltQuJ_MPGL4cir0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.56.40.0/21
46.56.56.0-46.56.127.255
46.216.0.0/16
134.17.0.0-134.17.191.255
134.17.208.0-134.17.239.255
176.60.0.0/16
178.168.128.0/17
185.20.112.0/22
IPv6:
2a02:bf0::/32
Signature Algorithm: sha256WithRSAEncryption
0f:19:6a:6f:47:3e:06:4d:9a:ad:1c:dd:85:75:e7:d5:38:c5:
f8:29:a0:af:6b:0e:0c:39:48:6a:9b:82:b7:b1:ec:74:c3:30:
2b:33:d2:1c:97:8f:a5:49:ef:9e:cd:5c:fc:a0:e8:e6:d0:cc:
2e:aa:a1:54:d6:c1:c4:f8:e2:2e:b1:fe:5d:fa:60:62:bc:5b:
c4:61:41:a3:98:ed:f5:a6:e5:fa:ef:5d:55:25:c8:d9:67:8f:
d4:b1:9f:f3:ea:74:90:f6:e3:bc:61:34:c1:db:3b:43:1f:77:
f4:d7:76:48:b2:b9:52:60:d3:d2:1b:4a:70:3c:c3:b1:0d:be:
dc:2a:76:75:84:b1:c5:88:ca:47:09:99:92:44:02:7b:43:f1:
38:bd:99:1d:01:30:72:55:56:82:de:09:28:2c:cb:d4:ef:dc:
10:c8:2b:66:90:7d:46:1c:47:20:8c:c0:72:55:11:a5:ea:63:
00:df:5e:c3:ae:75:17:f8:1c:2c:96:03:6d:0e:d0:d5:b7:13:
c4:02:98:cf:f6:6e:33:5f:5c:3f:30:a2:b7:12:4a:2b:8d:e1:
06:4f:a3:80:ad:98:46:81:2c:fe:0b:51:a4:44:ff:10:56:17:
2b:f9:3e:8f:d1:ba:f8:43:90:3e:89:80:54:02:44:1b:f2:96:
06:59:a9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:16:02 2025 by rpki-client