Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/3Me1haKbj68xz46Me_tebQtHJn0.roa
File: 3Me1haKbj68xz46Me_tebQtHJn0.roa (raw, json)
Hash identifier: uEkoJezbH8xn0gJkuoVEzFe7MjhNm3RP+fObf5kTPcU=
Subject key identifier: DC:C7:B5:85:A2:9B:8F:AF:31:CF:8E:8C:7B:FB:5E:6D:0B:47:26:7D
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 019465E5E0629F907D539FA2095938DAC080
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/3Me1haKbj68xz46Me_tebQtHJn0.roa
Signing time: Tue 14 Jan 2025 17:39:11 +0000
ROA not before: Tue 14 Jan 2025 17:39:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215727
IP address blocks: 45.136.0.0/24 maxlen: 32
45.136.1.0/24 maxlen: 32
45.136.2.0/24 maxlen: 32
45.136.3.0/24 maxlen: 32
185.117.20.0/24 maxlen: 32
185.117.21.0/24 maxlen: 32
185.211.48.0/24 maxlen: 32
185.211.49.0/24 maxlen: 32
185.211.50.0/24 maxlen: 32
Validation: Failed, certificate revoked on Wed 15 Jan 2025 05:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:65:e5:e0:62:9f:90:7d:53:9f:a2:09:59:38:da:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 14 17:39:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcc7b585a29b8faf31cf8e8c7bfb5e6d0b47267d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:20:7d:11:cf:04:03:43:fc:59:df:54:a2:
5c:01:8e:bc:a5:a9:de:f5:1b:ff:03:47:a6:d4:25:
40:78:4d:aa:44:70:07:6f:6f:04:d8:3c:eb:14:e2:
de:fa:b1:2d:1e:97:51:49:fd:59:ca:bd:5f:5a:b4:
cb:a9:ed:29:ec:01:e0:30:df:73:3d:62:f7:46:43:
68:66:37:8b:67:bc:0b:68:a8:b4:fc:1d:d7:36:09:
1a:c6:86:55:f8:d3:ce:b7:11:fe:57:91:61:db:c5:
72:21:e8:33:3d:e2:82:51:86:c6:83:a2:bd:b2:a0:
ec:31:00:5f:91:7f:4a:26:22:3e:87:66:89:89:24:
ca:85:08:e5:49:ea:62:81:82:3a:f4:7c:e7:75:82:
92:4d:78:90:07:81:b9:1c:c3:07:c9:06:9b:6c:4f:
94:d0:e8:96:83:1f:78:a2:6d:20:c5:64:47:5e:01:
82:6d:78:27:fd:1c:d0:d2:27:57:6b:eb:a4:ec:64:
6c:ef:b0:e4:4a:7d:25:42:55:e2:d4:b9:8b:90:0c:
07:d7:bf:be:5c:5b:b7:74:03:a3:0c:fa:19:9f:f3:
39:f5:e2:f6:ec:3c:61:5a:bf:22:4a:20:50:79:b9:
a0:b4:91:50:17:15:00:ea:2b:4c:c8:aa:0f:1c:ce:
cc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C7:B5:85:A2:9B:8F:AF:31:CF:8E:8C:7B:FB:5E:6D:0B:47:26:7D
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/3Me1haKbj68xz46Me_tebQtHJn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.0.0/22
185.117.20.0/23
185.211.48.0-185.211.50.255
Signature Algorithm: sha256WithRSAEncryption
09:05:35:18:ff:ca:01:f6:0c:cb:e9:4e:0f:1c:f9:ce:9e:a9:
5e:01:aa:50:91:e0:e7:a6:a0:ad:6d:8b:9b:a0:3a:da:6e:f1:
75:df:95:a8:c1:7d:d7:4e:9e:b6:58:03:0b:5d:ba:1f:ff:88:
cf:85:24:3e:75:bb:0b:b9:17:7d:5a:55:f5:94:8d:47:b0:0c:
20:a1:ed:a7:10:ba:a5:f7:7d:99:27:86:51:35:5d:82:71:89:
f1:23:27:1d:04:ec:3f:ae:c9:99:75:c5:68:6e:f3:5d:6f:35:
c0:0f:d4:9a:9d:9e:03:9f:33:a9:7c:4b:60:1b:0b:c8:4b:25:
76:b3:97:03:1f:be:71:3c:c0:00:f9:5c:32:f1:26:69:e2:31:
63:a7:a7:7f:67:b6:6d:e5:19:67:28:4a:43:79:8a:e0:b1:6e:
2a:2d:c6:38:34:32:73:89:9d:80:df:5b:2c:8d:66:59:33:15:
81:51:11:b0:03:31:19:79:f8:2b:c9:b8:74:79:4b:65:5e:31:
9e:07:25:98:fc:14:ae:2b:a3:c0:b9:43:91:e8:d9:6f:ba:25:
9e:81:6e:f1:c5:fa:75:39:88:88:d2:1b:69:76:24:96:dc:31:
31:4c:85:9d:55:fc:1e:ca:1b:28:f6:a9:cb:cf:c3:a6:fc:07:
25:4c:9b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:22:03 2025 by rpki-client