Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/knyFVNIs49oUQvZ8kBoPOVZEyuo.roa
File: knyFVNIs49oUQvZ8kBoPOVZEyuo.roa (raw, json)
Hash identifier: x0tQg3/d7v2c2gWpXMwJzhvNXf1+eVVsjH2jFPME2/w=
Subject key identifier: 92:7C:85:54:D2:2C:E3:DA:14:42:F6:7C:90:1A:0F:39:56:44:CA:EA
Certificate issuer: /CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
Certificate serial: 0191E040CCDB94AD7BDC070E8779F3B6247E
Authority key identifier: 61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/knyFVNIs49oUQvZ8kBoPOVZEyuo.roa
Signing time: Wed 11 Sep 2024 08:43:48 +0000
ROA not before: Wed 11 Sep 2024 08:43:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51790
IP address blocks: 46.19.8.0/23 maxlen: 24
46.19.10.0/23 maxlen: 24
46.19.12.0/23 maxlen: 24
46.19.14.0/23 maxlen: 24
185.57.144.0/23 maxlen: 23
185.57.145.0/24 maxlen: 24
185.57.146.0/24 maxlen: 24
185.92.228.0/24 maxlen: 24
185.97.52.0/22 maxlen: 24
193.3.59.0/24 maxlen: 24
209.16.152.0/22 maxlen: 23
217.61.252.0/24 maxlen: 24
2a02:28b0::/32 maxlen: 32
2a02:28b1::/32 maxlen: 32
2a02:28b2::/32 maxlen: 32
2a02:28b7::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 19 Sep 2024 09:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e0:40:cc:db:94:ad:7b:dc:07:0e:87:79:f3:b6:24:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614c9585889f98e0c77f9b6cd80361aa02bdd68e
Validity
Not Before: Sep 11 08:43:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=927c8554d22ce3da1442f67c901a0f395644caea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b4:1d:0f:4c:c6:60:b6:f6:3e:81:18:b5:08:
b6:bc:bd:60:ff:a0:47:08:26:4e:78:7a:6e:89:b0:
30:d6:91:2a:f7:d1:f2:8b:63:7b:c9:63:17:a6:f5:
1d:a1:68:52:89:41:39:90:d4:9a:40:5d:d2:95:6c:
09:45:17:c2:3a:0e:54:1f:42:fa:8c:54:f3:b0:65:
fe:c4:20:08:c0:e6:c8:d5:65:bc:d4:46:b6:cd:e5:
b1:8b:c7:b6:07:31:97:a9:3c:6e:d1:ac:3f:3d:83:
10:b7:6d:84:36:da:78:79:7c:c5:9e:22:d0:b5:af:
a1:a7:b3:a4:d4:52:31:a2:25:9c:c3:70:5c:ba:a4:
13:28:1e:f3:91:93:14:ce:96:81:2a:32:18:4e:76:
1a:83:20:dc:c5:73:8e:ae:90:67:cc:6f:18:27:cd:
26:c5:f1:b8:e7:72:10:e0:0b:d5:fe:74:65:2f:e3:
0f:34:3b:b3:a1:92:b0:68:61:f4:cc:0a:31:8d:32:
3e:43:50:c7:b9:98:49:b6:6d:39:f4:9f:7a:4e:d2:
48:c1:6c:30:be:08:e0:bd:fc:15:92:e5:c8:c1:f4:
eb:6a:fa:11:43:68:e5:a8:e5:61:d3:10:86:aa:dc:
1c:b9:dc:c5:45:cc:29:de:51:b0:36:37:7b:ff:33:
86:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7C:85:54:D2:2C:E3:DA:14:42:F6:7C:90:1A:0F:39:56:44:CA:EA
X509v3 Authority Key Identifier:
keyid:61:4C:95:85:88:9F:98:E0:C7:7F:9B:6C:D8:03:61:AA:02:BD:D6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyVhYifmODHf5ts2ANhqgK91o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/knyFVNIs49oUQvZ8kBoPOVZEyuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/bb6f38-2369-446f-88f2-0b4575b69c57/1/YUyVhYifmODHf5ts2ANhqgK91o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.8.0/21
185.57.144.0-185.57.146.255
185.92.228.0/24
185.97.52.0/22
193.3.59.0/24
209.16.152.0/22
217.61.252.0/24
IPv6:
2a02:28b0::-2a02:28b2:ffff:ffff:ffff:ffff:ffff:ffff
2a02:28b7::/32
Signature Algorithm: sha256WithRSAEncryption
85:93:f4:fe:80:bc:43:04:8a:6c:08:d4:22:eb:83:be:b3:d9:
a7:3e:21:26:16:58:e6:ad:56:c2:75:ce:bf:8b:76:41:58:27:
ac:42:2f:6c:a6:d7:5e:1c:17:4c:26:2b:52:f3:c0:2c:46:39:
cf:4e:4f:80:bb:a2:91:cb:98:b9:f5:1d:0a:2b:82:ee:86:54:
7a:11:e3:f5:73:1d:70:69:be:18:25:8d:e2:f6:d6:4a:52:9e:
dc:07:e8:9c:38:ef:e8:3c:d2:77:d0:aa:20:72:44:39:b3:81:
eb:5a:73:f2:c2:be:a1:d8:98:6b:82:ad:35:05:b5:79:0f:a1:
09:37:cb:49:68:00:e5:c6:54:15:85:da:73:a9:1b:48:c8:68:
e0:84:e9:d1:83:d5:b9:00:e9:f0:21:d8:63:a2:30:58:f4:e7:
b7:e2:f1:95:3d:a9:63:c1:7f:fa:d3:e1:28:48:9a:06:fc:e6:
28:cc:73:33:6b:24:e5:c7:3b:2e:8b:f0:76:e5:07:8d:4b:ef:
03:cb:a8:cd:4f:7e:5d:d4:14:6a:1a:05:d9:00:7a:1a:9d:80:
6f:46:90:31:65:4b:25:87:53:95:1c:48:bd:88:d1:5b:98:4a:
b5:71:93:7a:0d:b0:6b:07:ff:99:1b:f0:a8:9a:72:12:90:6c:
0b:3a:d4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:02:24 2025 by rpki-client