Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/bPLx9UhRGtZ67fjAqOl7mAGBAho.roa
File: bPLx9UhRGtZ67fjAqOl7mAGBAho.roa (raw, json)
Hash identifier: tukb3RsFHzaKXqPmJgLBtwZffj7u8hpUX0e89uXCsZY=
Subject key identifier: 6C:F2:F1:F5:48:51:1A:D6:7A:ED:F8:C0:A8:E9:7B:98:01:81:02:1A
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 0191D643E47C5465213B35D492B0A2ABF0C4
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/bPLx9UhRGtZ67fjAqOl7mAGBAho.roa
Signing time: Mon 09 Sep 2024 10:10:59 +0000
ROA not before: Mon 09 Sep 2024 10:10:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44600
IP address blocks: 46.182.80.0/22 maxlen: 22
46.182.84.0/22 maxlen: 22
91.202.72.0/22 maxlen: 22
94.131.244.0/24 maxlen: 24
94.131.245.0/24 maxlen: 24
94.131.248.0/24 maxlen: 24
94.131.249.0/24 maxlen: 24
94.131.250.0/23 maxlen: 23
94.131.250.0/24 maxlen: 24
94.131.252.0/24 maxlen: 24
94.131.253.0/24 maxlen: 24
94.131.254.0/24 maxlen: 24
94.131.255.0/24 maxlen: 24
185.41.248.0/22 maxlen: 22
185.46.148.0/22 maxlen: 22
185.128.232.0/22 maxlen: 22
185.128.235.0/24 maxlen: 24
185.156.52.0/24 maxlen: 24
185.156.53.0/24 maxlen: 24
185.156.54.0/24 maxlen: 24
185.156.55.0/24 maxlen: 24
194.42.201.0/24 maxlen: 24
2a03:a600::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d6:43:e4:7c:54:65:21:3b:35:d4:92:b0:a2:ab:f0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Sep 9 10:10:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cf2f1f548511ad67aedf8c0a8e97b980181021a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8b:cd:89:6e:4a:25:1e:ab:0f:0c:ea:39:19:
ad:23:97:e4:89:c2:87:f5:c2:34:ad:5d:fa:49:0f:
30:0d:02:29:72:d4:b2:b8:26:8b:da:08:7b:dd:b1:
c4:fd:76:cd:16:d8:d1:53:38:8e:ab:6c:9f:ef:68:
0f:0f:2c:23:d7:6a:0b:65:ce:b3:b3:05:0a:69:b3:
49:cc:8f:ed:c3:33:ae:7a:f7:e6:7c:65:ad:97:54:
4f:bf:15:19:bd:10:16:5d:bc:25:d0:fe:9e:26:d0:
84:b4:b8:dc:f9:9e:37:bb:17:bf:af:74:7e:7a:9a:
ee:9c:15:7e:fc:9e:0b:fa:b1:a2:1b:d3:72:c2:e3:
f7:3b:99:6a:b5:57:bc:89:57:f4:d7:e2:e3:f9:d8:
4a:32:9d:b2:73:59:ac:7b:3f:22:4a:42:48:2c:bd:
5d:32:79:31:95:d2:20:22:50:fe:97:44:b0:06:d3:
b0:9f:3e:5e:2b:bd:ff:fd:17:0a:57:63:5b:29:6c:
de:9f:d2:9d:ae:1e:0a:36:72:01:05:bc:a4:f7:fa:
b7:4c:65:33:be:6a:56:94:fe:11:80:e3:50:32:b2:
97:6e:69:e3:5e:0a:ee:ce:da:a8:56:3b:9c:c5:1a:
fd:3f:d3:e3:25:dc:d5:29:0f:91:7b:bf:70:97:fe:
8e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F2:F1:F5:48:51:1A:D6:7A:ED:F8:C0:A8:E9:7B:98:01:81:02:1A
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/bPLx9UhRGtZ67fjAqOl7mAGBAho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.80.0/21
91.202.72.0/22
94.131.244.0/23
94.131.248.0/21
185.41.248.0/22
185.46.148.0/22
185.128.232.0/22
185.156.52.0/22
194.42.201.0/24
IPv6:
2a03:a600::/29
Signature Algorithm: sha256WithRSAEncryption
37:98:54:88:2b:dc:fe:c4:3c:e7:3a:e8:9e:96:32:06:e8:95:
d4:9c:09:ae:fe:c5:79:e4:25:a8:03:b1:2e:79:2b:ab:77:72:
a9:a4:7d:b3:76:f5:3b:09:b5:2b:39:9c:05:8c:99:d9:a2:ff:
dd:ec:31:a3:d5:21:03:a5:f5:1c:ba:bc:f4:8e:76:04:68:b2:
35:d4:85:c7:ca:1e:91:bc:b1:e2:27:33:82:28:41:29:ed:42:
06:6f:53:65:0f:5e:cb:e4:63:76:01:58:6c:4d:ca:06:3b:54:
bf:82:e8:a7:34:ad:e2:24:45:d7:70:f2:25:88:06:c4:7a:79:
28:78:39:34:10:5f:20:90:2f:7d:02:fb:84:76:59:24:a0:26:
3f:db:b5:99:cb:ab:31:78:52:77:5c:d0:b5:cc:c3:ca:01:4f:
5d:5e:db:86:87:bd:d1:c8:f2:f5:44:e7:eb:d3:ee:63:4b:40:
44:f5:67:80:6b:82:45:9e:71:29:b2:1e:ca:b4:7f:9e:b6:b2:
2c:6a:99:32:54:b0:85:47:3a:ab:86:4d:3b:fd:20:19:77:70:
ce:ca:5f:1a:a1:72:40:10:df:cf:29:f1:db:45:57:f4:c7:bf:
c2:92:a5:d2:fd:fd:40:33:85:95:72:51:b7:cd:82:6a:65:37:
e0:57:c8:0a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgISAZHWQ+R8VGUhOzXUkrCiq/DEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNmIwYzAwMWE5OWFiNjI5NmUyNDIxNzNiZjdlN2ZkY2Yw
M2MwMTkwHhcNMjQwOTA5MTAxMDU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2YyZjFmNTQ4NTExYWQ2N2FlZGY4YzBhOGU5N2I5ODAxODEwMjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4vNiW5KJR6rDwzqORmtI5fkicKH
9cI0rV36SQ8wDQIpctSyuCaL2gh73bHE/XbNFtjRUziOq2yf72gPDywj12oLZc6z
swUKabNJzI/twzOuevfmfGWtl1RPvxUZvRAWXbwl0P6eJtCEtLjc+Z43uxe/r3R+
eprunBV+/J4L+rGiG9NywuP3O5lqtVe8iVf01+Lj+dhKMp2yc1msez8iSkJILL1d
MnkxldIgIlD+l0SwBtOwnz5eK73//RcKV2NbKWzen9Kdrh4KNnIBBbyk9/q3TGUz
vmpWlP4RgONQMrKXbmnjXgruztqoVjucxRr9P9PjJdzVKQ+Re79wl/6O8wIDAQAB
o4ICSDCCAkQwHQYDVR0OBBYEFGzy8fVIURrWeu34wKjpe5gBgQIaMB8GA1UdIwQY
MBaAFFxrDAAamatiluJCFzv35/3PA8AZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMt
YzE4ZTNjY2M3NDJiLzEvYlBMeDlVaFJHdFo2N2ZqQXFPbDdtQUdCQWhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jODk2NzctMWQ5YS00MThkLTg1OTMtYzE4ZTNjY2M3NDJi
LzEvWEdzTUFCcVpxMktXNGtJWE9fZm5fYzhEd0JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDLrZQAwQC
W8pIAwQBXoP0AwQDXoP4AwQCuSn4AwQCuS6UAwQCuYDoAwQCuZw0AwQAwirJMA0E
AgACMAcDBQMqA6YAMA0GCSqGSIb3DQEBCwUAA4IBAQA3mFSIK9z+xDznOuieljIG
6JXUnAmu/sV55CWoA7EueSurd3KppH2zdvU7CbUrOZwFjJnZov/d7DGj1SEDpfUc
urz0jnYEaLI11IXHyh6RvLHiJzOCKEEp7UIGb1NlD17L5GN2AVhsTcoGO1S/guin
NK3iJEXXcPIliAbEenkoeDk0EF8gkC99AvuEdlkkoCY/27WZy6sxeFJ3XNC1zMPK
AU9dXtuGh73RyPL1ROfr0+5jS0BE9WeAa4JFnnEpsh7KtH+etrIsapkyVLCFRzqr
hk07/SAZd3DOyl8aoXJAEN/PKfHbRVf0x7/CkqXS/f1AM4WVclG3zYJqZTfgV8gK
-----END CERTIFICATE-----
Generated at Sun Apr 13 03:26:59 2025 by rpki-client