Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/wARG9QlHPdviYK55dKEhN1FBRr8.roa
File: wARG9QlHPdviYK55dKEhN1FBRr8.roa (raw, json)
Hash identifier: JowqSP/pLfSNtz5JYbT2K46gtILEHCRUYRh1e3oHWck=
Subject key identifier: C0:04:46:F5:09:47:3D:DB:E2:60:AE:79:74:A1:21:37:51:41:46:BF
Certificate issuer: /CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Certificate serial: 018CC2DAC0AEE3124913EA0F268949D1F26D
Authority key identifier: 29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/wARG9QlHPdviYK55dKEhN1FBRr8.roa
Signing time: Mon 01 Jan 2024 02:29:25 +0000
ROA not before: Mon 01 Jan 2024 02:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25106
IP address blocks: 176.60.4.0/22 maxlen: 22
176.60.0.0/18 maxlen: 24
176.60.44.0/22 maxlen: 22
176.60.40.0/22 maxlen: 22
46.56.114.0/23 maxlen: 23
46.56.125.0/24 maxlen: 24
176.60.128.0/18 maxlen: 24
176.60.132.0/22 maxlen: 22
176.60.64.0/18 maxlen: 24
176.60.80.0/23 maxlen: 23
46.56.56.0/22 maxlen: 24
46.56.60.0/23 maxlen: 24
46.56.60.0/24 maxlen: 24
46.56.62.0/23 maxlen: 23
46.56.64.0/19 maxlen: 24
46.56.96.0/19 maxlen: 24
46.56.40.0/24 maxlen: 24
46.56.41.0/24 maxlen: 24
46.56.42.0/24 maxlen: 24
46.56.40.0/21 maxlen: 21
46.216.184.0/21 maxlen: 21
46.216.192.0/21 maxlen: 21
46.216.192.0/18 maxlen: 24
46.216.128.0/18 maxlen: 24
46.216.144.0/21 maxlen: 21
134.17.208.0/22 maxlen: 24
134.17.208.0/20 maxlen: 24
46.216.152.0/21 maxlen: 21
134.17.224.0/20 maxlen: 24
46.216.246.0/24 maxlen: 24
134.17.16.0/21 maxlen: 21
134.17.17.0/24 maxlen: 24
185.20.112.0/23 maxlen: 23
178.168.160.0/21 maxlen: 21
185.20.114.0/23 maxlen: 23
178.168.168.0/21 maxlen: 24
134.17.24.0/21 maxlen: 21
134.17.24.0/22 maxlen: 22
134.17.28.0/24 maxlen: 24
134.17.32.0/19 maxlen: 19
134.17.32.0/22 maxlen: 22
178.168.180.0/22 maxlen: 22
178.168.192.0/19 maxlen: 24
134.17.64.0/20 maxlen: 20
176.60.176.0/23 maxlen: 23
178.168.128.0/18 maxlen: 24
176.60.184.0/22 maxlen: 24
176.60.192.0/20 maxlen: 20
178.168.144.0/23 maxlen: 23
176.60.192.0/18 maxlen: 24
134.17.0.0/20 maxlen: 24
176.60.208.0/23 maxlen: 23
134.17.124.0/24 maxlen: 24
134.17.128.0/19 maxlen: 19
134.17.128.0/21 maxlen: 21
134.17.136.0/21 maxlen: 21
134.17.144.0/20 maxlen: 20
134.17.160.0/19 maxlen: 19
46.216.0.0/17 maxlen: 24
178.168.220.0/22 maxlen: 22
178.168.224.0/19 maxlen: 24
134.17.79.0/24 maxlen: 24
134.17.80.0/21 maxlen: 21
134.17.80.0/22 maxlen: 22
134.17.88.0/21 maxlen: 24
134.17.89.0/24 maxlen: 24
178.168.242.0/23 maxlen: 23
134.17.96.0/19 maxlen: 19
178.168.253.0/24 maxlen: 24
2a02:bf0:1000::/36 maxlen: 36
2a02:bf0::/32 maxlen: 32
2a02:bf0:6000::/36 maxlen: 44
2a02:bf0:5000::/36 maxlen: 44
2a02:bf0:3000::/36 maxlen: 44
2a02:bf0:7000::/36 maxlen: 44
2a02:bf0:4000::/36 maxlen: 44
2a02:bf0:27::/48 maxlen: 48
2a02:bf0:1002::/48 maxlen: 48
2a02:bf0:2::/48 maxlen: 48
2a02:bf0:26::/48 maxlen: 48
2a02:bf0:29::/48 maxlen: 48
2a02:bf0:10::/44 maxlen: 44
2a02:bf0:1::/48 maxlen: 48
2a02:bf0:25::/48 maxlen: 48
2a02:bf0::/48 maxlen: 48
2a02:bf0:7::/48 maxlen: 48
2a02:bf0:6::/48 maxlen: 48
2a02:bf0:28::/48 maxlen: 48
2a02:bf0:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 17 Jan 2024 12:38:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:c0:ae:e3:12:49:13:ea:0f:26:89:49:d1:f2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Validity
Not Before: Jan 1 02:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c00446f509473ddbe260ae7974a12137514146bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8d:35:79:da:d5:e5:d9:86:54:34:93:5d:be:
2a:4f:48:b7:64:14:00:5c:89:d1:5d:28:8e:28:3f:
fb:74:ee:78:8a:ce:ce:06:6e:f3:ca:0d:9f:41:69:
88:76:f2:f8:3a:be:02:1d:77:68:b9:6e:8b:fa:cd:
6b:ff:ed:7d:c5:47:71:64:b0:a6:42:c4:eb:cc:a6:
7f:e9:d7:03:6a:16:a0:df:6f:fb:db:77:ff:b5:c8:
a9:99:9f:d4:f4:8c:04:ae:d8:a5:fd:aa:2b:63:ea:
6b:d7:30:cd:9c:5f:f8:09:b1:81:fb:cb:ce:fd:8b:
1d:3f:3b:af:91:a2:41:5f:c5:8f:f5:e2:45:bb:42:
ad:b2:58:27:bc:dd:08:1d:94:a5:a0:80:93:42:64:
65:66:53:a4:db:d1:1b:97:69:60:b9:dd:c2:33:97:
8d:7f:9d:35:ee:3e:10:2b:8f:a3:75:53:23:bc:c3:
12:f4:c0:db:dd:c4:28:ec:50:53:74:27:2f:fa:b3:
90:4e:e0:b6:5a:5f:68:1b:e1:14:2c:ec:17:af:14:
97:1b:6e:b6:eb:fe:17:7b:7e:f5:83:66:85:40:5f:
e2:6e:bf:72:87:08:02:a9:48:fd:20:07:c2:b4:c1:
45:0a:0c:a1:fe:f2:aa:ab:10:13:47:a3:24:7e:9f:
6a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:04:46:F5:09:47:3D:DB:E2:60:AE:79:74:A1:21:37:51:41:46:BF
X509v3 Authority Key Identifier:
keyid:29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/wARG9QlHPdviYK55dKEhN1FBRr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.56.40.0/21
46.56.56.0-46.56.127.255
46.216.0.0/16
134.17.0.0-134.17.191.255
134.17.208.0-134.17.239.255
176.60.0.0/16
178.168.128.0/17
185.20.112.0/22
IPv6:
2a02:bf0::/32
Signature Algorithm: sha256WithRSAEncryption
73:91:57:93:f0:44:62:2a:a6:6f:b9:6b:85:f0:ff:6c:dc:00:
5d:e0:d2:64:c7:f2:7e:e5:b9:29:be:fc:5b:f4:8c:7b:20:f6:
60:6c:e8:e1:0d:c3:60:f7:4b:6c:1c:2c:0e:4f:71:07:2d:ef:
fd:80:01:68:37:38:71:42:b5:59:c0:d8:ca:1a:82:e7:2f:13:
d9:15:4f:cd:f7:f8:ee:09:01:14:ee:3e:53:e0:c7:1a:4a:48:
6c:2d:3d:ba:c0:0f:b6:90:e0:38:73:67:eb:12:ff:c8:be:9f:
d1:2c:f4:3e:e5:6a:f1:56:39:e7:33:ef:c3:08:73:f8:ec:94:
86:d0:e7:cb:28:c1:90:24:2f:c6:af:7b:3f:cb:35:83:aa:04:
f9:14:d1:19:20:e6:d7:7e:18:fe:d4:16:66:2e:e2:07:99:03:
60:a3:86:26:d1:75:59:8e:20:ea:45:96:c9:04:df:b5:99:cc:
8d:c0:2f:1f:8d:21:59:f5:cf:9d:c2:51:85:60:df:c5:8a:45:
55:f9:78:ba:7a:fd:a3:3f:da:44:c3:b6:9d:f5:88:cc:27:0d:
29:c0:2b:d1:9f:06:aa:ee:96:74:1c:d9:4a:5f:f4:13:f0:8d:
9b:30:16:26:12:ec:f9:55:f4:5a:8e:7e:03:0c:64:69:81:bd:
3b:c0:f2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:11:19 2025 by rpki-client