Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/MUsz8Z61qNPFN1Gn9BRh66pPIQE.roa
File: MUsz8Z61qNPFN1Gn9BRh66pPIQE.roa (raw, json)
Hash identifier: 3e3vaxDQXnoq2XCaNnVIlSbcb9sEGLDxR6jNwVtN6nY=
Subject key identifier: 31:4B:33:F1:9E:B5:A8:D3:C5:37:51:A7:F4:14:61:EB:AA:4F:21:01
Certificate issuer: /CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Certificate serial: 018D2C0CC82FACA9FDE04FC6CD9CA5610C5B
Authority key identifier: 5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/MUsz8Z61qNPFN1Gn9BRh66pPIQE.roa
Signing time: Sun 21 Jan 2024 12:44:11 +0000
ROA not before: Sun 21 Jan 2024 12:44:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60460
IP address blocks: 46.231.24.0/24 maxlen: 24
46.231.25.0/24 maxlen: 24
46.231.26.0/24 maxlen: 24
46.231.27.0/24 maxlen: 24
46.231.28.0/24 maxlen: 24
46.231.29.0/24 maxlen: 24
46.231.30.0/24 maxlen: 24
46.231.31.0/24 maxlen: 24
176.227.170.0/23 maxlen: 23
176.227.172.0/22 maxlen: 22
185.88.240.0/23 maxlen: 23
2a04:2640::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:2c:0c:c8:2f:ac:a9:fd:e0:4f:c6:cd:9c:a5:61:0c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Validity
Not Before: Jan 21 12:44:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=314b33f19eb5a8d3c53751a7f41461ebaa4f2101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:35:16:f8:22:d2:8b:a8:d0:76:03:43:e4:41:
ad:13:03:b4:f5:01:d4:66:76:18:f7:1f:a3:ee:e4:
26:75:b9:42:0e:07:5b:cb:44:bb:89:b3:f4:90:7d:
7b:2e:60:32:7a:64:28:e2:f8:cb:1d:eb:bf:af:da:
24:68:1b:8c:1f:52:40:52:17:2f:ed:be:b5:e4:f3:
24:00:ba:0f:53:a2:95:da:35:73:5d:48:dd:57:88:
26:da:b2:50:d0:0f:7f:3c:fb:d1:ff:80:38:d2:2a:
39:07:fa:38:af:15:91:c0:c2:b1:10:b6:dc:96:12:
56:8d:d3:63:83:27:a6:ae:51:5e:01:a3:0b:e6:25:
85:a2:2d:ea:39:b3:23:06:d6:04:fc:2f:69:a2:25:
d5:6a:90:1e:f4:7d:6e:91:d6:b0:a9:99:0f:01:66:
37:a5:15:94:d1:e3:7a:cf:ad:72:48:ec:0b:20:1f:
3a:0e:c6:16:6a:27:a4:29:86:42:f1:e2:08:27:8e:
a8:34:3c:fd:28:f6:2c:6b:da:26:e2:a2:34:6e:70:
5f:45:49:7e:57:ef:5c:30:d8:99:6d:44:46:40:9b:
97:6e:d1:1f:28:c7:5e:ae:a5:4a:41:4e:08:22:de:
20:c8:a0:2b:06:fd:01:b8:2e:cc:09:20:1d:c1:cc:
df:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4B:33:F1:9E:B5:A8:D3:C5:37:51:A7:F4:14:61:EB:AA:4F:21:01
X509v3 Authority Key Identifier:
keyid:5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/MUsz8Z61qNPFN1Gn9BRh66pPIQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.24.0/21
176.227.170.0-176.227.175.255
185.88.240.0/23
IPv6:
2a04:2640::/29
Signature Algorithm: sha256WithRSAEncryption
1b:44:21:1a:ac:46:80:e1:2a:31:9f:45:c3:c8:64:e6:f5:36:
46:1b:69:17:fd:31:75:56:d8:a3:8e:c5:51:0e:82:25:ff:06:
23:2e:5e:69:24:1d:1c:4d:04:14:5e:46:1b:ea:0e:2c:73:e2:
12:97:c5:c0:e4:a5:d5:f8:22:1d:55:64:da:5f:63:ad:fd:7a:
ad:dd:7d:66:23:d3:2d:aa:36:5e:19:9c:05:4a:9a:44:b7:84:
f2:c7:2d:10:2b:db:05:c6:03:de:cc:09:c4:bd:2a:67:e0:74:
28:8a:fb:33:ea:62:3c:03:7b:01:24:92:97:cb:a2:c5:ec:82:
c8:df:7a:2c:d9:af:c3:f2:9a:a7:82:98:a7:4e:9e:c0:57:0a:
27:4c:89:20:44:33:f1:89:66:b8:b6:7f:12:e8:01:52:ac:c8:
5d:6c:e5:44:1c:56:a3:3b:df:67:a1:b1:3b:8f:bd:42:3b:62:
03:4a:0a:4a:43:cc:55:20:31:2d:d6:52:b5:80:e7:9e:7a:4c:
d9:15:bb:6d:61:ab:28:93:19:c4:92:52:55:09:f5:a8:14:2b:
98:f2:6e:77:49:70:62:b6:f7:be:8e:14:21:04:b8:12:50:ed:
23:41:08:91:51:b6:67:fc:5d:e8:f1:5b:ce:75:4f:1a:f7:a6:
03:6d:97:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:45 2025 by rpki-client