Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/g3r0VuiGppwYhUFPtXx0Qkc_giY.roa
File: g3r0VuiGppwYhUFPtXx0Qkc_giY.roa (raw, json)
Hash identifier: stk4i8eSOoVRqzAhW8+aNDG9dUzagFGVdvhgeq9iy+M=
Subject key identifier: 83:7A:F4:56:E8:86:A6:9C:18:85:41:4F:B5:7C:74:42:47:3F:82:26
Certificate issuer: /CN=3d8a553e05f0319bf452fa206c14ccda87304654
Certificate serial: 019374666D8E5EC4A743C1335A6FEB6B85CB
Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/g3r0VuiGppwYhUFPtXx0Qkc_giY.roa
Signing time: Thu 28 Nov 2024 20:11:29 +0000
ROA not before: Thu 28 Nov 2024 20:11:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8368
IP address blocks: 46.243.24.0/21 maxlen: 24
78.41.64.0/21 maxlen: 24
82.146.96.0/19 maxlen: 24
85.158.208.0/21 maxlen: 24
88.82.32.0/19 maxlen: 24
89.250.176.0/20 maxlen: 24
94.158.248.0/24 maxlen: 24
178.132.8.0/21 maxlen: 24
185.47.0.0/22 maxlen: 24
188.64.72.0/21 maxlen: 24
188.118.0.0/18 maxlen: 24
2001:4c40::/32 maxlen: 48
Validation: Failed, certificate revoked on Sun 01 Dec 2024 11:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:74:66:6d:8e:5e:c4:a7:43:c1:33:5a:6f:eb:6b:85:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654
Validity
Not Before: Nov 28 20:11:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=837af456e886a69c1885414fb57c7442473f8226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:12:26:fc:23:c9:56:c6:99:c1:df:b9:9b:
96:4b:68:c9:67:a1:56:64:02:65:05:7d:21:ae:26:
20:24:7e:06:91:e3:96:96:3e:e9:74:e4:42:2b:1e:
42:13:67:fb:6e:9a:d3:a1:4f:97:8c:c1:9b:82:d1:
f6:bd:f5:60:49:1b:5f:24:88:d7:4f:a5:9c:15:f9:
0f:7f:11:9e:b4:b9:12:96:39:ce:39:f3:4e:6f:45:
6f:98:65:ca:ce:d7:50:6a:ea:8c:8f:d4:7e:dd:bf:
29:0c:78:71:45:0f:c0:d3:46:09:7a:26:34:ca:aa:
f8:a4:4b:77:23:88:15:58:0f:bc:3f:86:58:73:94:
f0:42:41:7b:18:0e:6f:17:14:84:a5:6a:5b:1f:bd:
9c:99:7a:eb:71:91:c3:de:59:2c:e4:b5:0b:0a:6e:
b3:bc:51:fe:f8:5f:33:a7:b8:c8:ce:8b:45:0b:6b:
70:d0:08:ae:0b:39:61:ea:a8:2c:75:07:ab:17:96:
79:57:a6:5c:2e:a2:a4:7e:62:d2:a8:82:18:11:98:
95:09:51:8a:49:e2:cf:84:de:56:c9:d5:fe:87:d5:
15:c4:30:a8:a7:1b:e2:79:1d:61:35:e4:64:be:53:
ae:81:58:ef:df:3b:58:95:04:31:b4:5c:8a:33:b2:
27:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7A:F4:56:E8:86:A6:9C:18:85:41:4F:B5:7C:74:42:47:3F:82:26
X509v3 Authority Key Identifier:
keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/g3r0VuiGppwYhUFPtXx0Qkc_giY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.24.0/21
78.41.64.0/21
82.146.96.0/19
85.158.208.0/21
88.82.32.0/19
89.250.176.0/20
94.158.248.0/24
178.132.8.0/21
185.47.0.0/22
188.64.72.0/21
188.118.0.0/18
IPv6:
2001:4c40::/32
Signature Algorithm: sha256WithRSAEncryption
89:6e:61:00:5a:7e:8c:1a:a2:44:46:fe:9a:9a:33:9b:20:a2:
e6:45:2c:04:89:27:99:49:8e:5a:39:72:1f:4e:ee:80:72:bb:
04:3d:ba:e1:8e:f7:72:20:2d:1c:67:c5:41:0f:30:e0:27:b4:
6f:77:59:e4:19:60:86:c6:26:d2:ff:62:a9:6b:ad:56:92:3f:
78:4d:ea:9a:c6:17:41:13:89:35:3d:70:22:34:cd:7b:e7:38:
9b:71:0d:6a:5d:d6:c4:1e:87:af:35:dd:06:2f:48:df:60:55:
9e:72:45:47:70:cc:c3:5d:be:e7:52:c1:17:a3:78:a2:72:ce:
05:1d:bf:f7:73:e1:e4:5f:02:bc:7e:60:88:37:7b:54:5c:59:
97:3d:08:d2:64:6c:c4:0e:0a:68:3e:a9:9a:f3:b9:fb:44:23:
33:7c:68:e2:4c:1c:b3:45:53:c3:d9:fb:bc:65:20:8a:d2:f5:
6b:e6:2b:0d:65:9e:97:e2:f2:de:e2:de:11:3e:8f:c4:bb:4c:
88:26:c9:6f:66:3c:e0:87:de:75:89:52:92:f3:a7:77:a4:00:
08:c3:d0:23:a3:c5:c3:94:8f:0d:c1:be:79:f0:dc:bd:3f:f1:
c6:ba:6b:c1:9a:e1:3d:26:58:b6:b2:f4:d2:70:5a:3f:0e:46:
33:b4:70:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:57:57 2025 by rpki-client