Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/u1rrSo_Bi5BiUjZj3O2ypvMp_tA.roa
File: u1rrSo_Bi5BiUjZj3O2ypvMp_tA.roa (raw, json)
Hash identifier: kG5QoopYhSWn9NkC+g68/l3Jh7twGFj49cRbOpfH/RY=
Subject key identifier: BB:5A:EB:4A:8F:C1:8B:90:62:52:36:63:DC:ED:B2:A6:F3:29:FE:D0
Certificate issuer: /CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Certificate serial: 01938CBC49476D861BAFCFD5739BF55F5DB7
Authority key identifier: 84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/u1rrSo_Bi5BiUjZj3O2ypvMp_tA.roa
Signing time: Tue 03 Dec 2024 13:36:09 +0000
ROA not before: Tue 03 Dec 2024 13:36:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6453
IP address blocks: 46.235.88.0/21 maxlen: 24
62.204.48.0/24 maxlen: 24
77.75.224.0/24 maxlen: 24
79.110.229.0/24 maxlen: 24
88.85.224.0/19 maxlen: 24
146.19.71.0/24 maxlen: 24
176.98.32.0/22 maxlen: 24
176.241.184.0/21 maxlen: 24
178.20.144.0/21 maxlen: 24
185.10.112.0/22 maxlen: 24
193.105.25.0/24 maxlen: 24
193.242.127.0/24 maxlen: 24
194.104.226.0/24 maxlen: 24
212.12.160.0/19 maxlen: 24
212.12.160.0/24 maxlen: 24
212.12.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Dec 2024 13:41:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8c:bc:49:47:6d:86:1b:af:cf:d5:73:9b:f5:5f:5d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Validity
Not Before: Dec 3 13:36:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb5aeb4a8fc18b9062523663dcedb2a6f329fed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:57:a6:72:6f:37:d8:4d:75:d5:4f:fc:c0:01:
36:e4:62:85:3b:39:fd:94:b0:86:03:60:9d:98:ee:
0e:f9:ec:3f:2c:7d:51:8e:2e:ce:63:86:95:6a:fc:
21:0d:8d:b3:a5:74:40:87:9b:70:d6:13:b2:72:2a:
54:3e:9c:13:11:b8:d5:8a:82:d9:88:f7:76:90:6f:
2a:14:5a:8b:23:6d:15:5c:11:c6:8f:d1:37:89:86:
ab:60:b4:7f:b1:ac:70:cd:f5:26:c9:74:06:51:5c:
d7:c2:5b:d6:d1:93:a4:e8:01:27:3f:81:b7:01:1f:
04:eb:f5:d0:42:0e:09:57:f7:ee:2a:26:a1:d1:6f:
59:6d:1d:d0:82:0b:b8:5b:9d:1d:20:f5:3f:a5:25:
d7:f8:74:d5:e6:2e:e2:01:a2:0c:6d:8d:89:fd:63:
46:01:97:37:6b:a9:45:f2:94:d6:fd:35:f8:d0:23:
ac:18:e8:7e:89:a1:2b:d8:8f:98:97:97:1e:e5:bd:
0a:8d:e0:16:8c:e4:1f:c2:59:04:2e:86:46:40:5d:
ed:29:fa:17:77:03:15:ce:bb:b7:60:60:98:8b:8e:
8e:3f:e3:7b:b4:c2:47:c5:7d:a1:b4:c0:d9:9b:43:
36:89:46:8c:32:19:7f:34:d2:c9:0f:ca:1f:d0:ab:
1b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5A:EB:4A:8F:C1:8B:90:62:52:36:63:DC:ED:B2:A6:F3:29:FE:D0
X509v3 Authority Key Identifier:
keyid:84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/u1rrSo_Bi5BiUjZj3O2ypvMp_tA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.88.0/21
62.204.48.0/24
77.75.224.0/24
79.110.229.0/24
88.85.224.0/19
146.19.71.0/24
176.98.32.0/22
176.241.184.0/21
178.20.144.0/21
185.10.112.0/22
193.105.25.0/24
193.242.127.0/24
194.104.226.0/24
212.12.160.0/19
Signature Algorithm: sha256WithRSAEncryption
5f:1b:31:ee:e4:c4:fe:b0:11:0d:92:bc:1b:37:79:e2:fe:15:
8c:35:8d:b9:34:34:1f:3a:3a:43:49:3c:4a:39:fc:f3:ee:cb:
74:e7:a7:4a:ee:c7:a9:a9:66:69:fa:16:bb:65:32:18:f5:7b:
75:5d:d7:6c:38:ea:62:ae:a8:15:af:a7:f9:3f:03:58:0f:35:
f1:5e:dd:47:0b:75:b5:2f:a3:be:1b:7e:73:63:d7:65:ef:55:
0f:c4:af:9c:97:cf:1f:b5:e9:19:49:fd:ba:29:cd:0e:e1:19:
8f:47:ec:86:fd:ef:be:c2:ce:97:e1:4c:ba:c6:ae:3d:a5:c3:
d1:e0:f9:29:86:e9:e6:52:1d:f2:81:51:f9:f2:bb:45:03:50:
bc:21:a1:1f:1f:f7:98:e6:25:94:25:ce:f3:10:7d:b4:40:1f:
b0:2f:bf:07:01:0c:c1:61:f6:a0:8e:15:64:2f:1d:da:c3:1b:
d3:0f:e5:4e:6c:e7:73:b2:6c:ce:b7:c3:2d:73:a9:ba:f8:54:
80:68:da:5a:da:fa:1f:96:44:00:5c:b3:30:9d:b8:f0:81:67:
8a:17:16:83:21:78:0b:ec:7f:ab:1f:92:45:99:09:c2:f0:ea:
db:d5:27:14:25:a2:58:c0:6b:56:e1:8f:9c:a8:7e:8e:70:38:
79:de:dc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:56:29 2025 by rpki-client