Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/TTriRQ8A4Su1sU694xh7RTWpYnk.roa
File: TTriRQ8A4Su1sU694xh7RTWpYnk.roa (raw, json)
Hash identifier: eWJ02o0l/TqLBqh+xWG5BN529fAm+vW1aH5sFpG16xc=
Subject key identifier: 4D:3A:E2:45:0F:00:E1:2B:B5:B1:4E:BD:E3:18:7B:45:35:A9:62:79
Certificate issuer: /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial: 018CC86F0263628C4E4972FF4DEC868357BD
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/TTriRQ8A4Su1sU694xh7RTWpYnk.roa
Signing time: Tue 02 Jan 2024 04:29:27 +0000
ROA not before: Tue 02 Jan 2024 04:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43463
IP address blocks: 185.244.251.0/24 maxlen: 24
185.244.250.0/24 maxlen: 24
185.244.249.0/24 maxlen: 24
91.224.93.0/24 maxlen: 24
193.46.83.0/24 maxlen: 24
185.36.80.0/24 maxlen: 24
185.36.83.0/24 maxlen: 24
185.36.82.0/24 maxlen: 24
185.255.192.0/22 maxlen: 22
2a00:ea60:200::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:48:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:02:63:62:8c:4e:49:72:ff:4d:ec:86:83:57:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Validity
Not Before: Jan 2 04:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d3ae2450f00e12bb5b14ebde3187b4535a96279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:47:db:f2:2b:95:89:88:d3:ae:a6:b1:56:
fe:50:0f:f9:c0:32:2d:7f:8c:84:b8:8c:41:d9:a5:
3f:73:13:45:4f:bf:5d:6e:cb:f5:a5:75:07:2f:6c:
5c:ca:f4:e5:fe:a3:5d:29:06:4a:72:e6:29:25:a0:
a2:1a:11:39:15:f5:b1:79:3b:76:74:9b:95:d0:9d:
71:9a:d9:fc:02:3a:d5:47:c6:3e:90:96:ab:e4:65:
53:a4:53:be:55:26:c5:02:18:cc:d1:f2:ca:94:96:
15:47:76:92:fb:40:15:bd:61:1b:e0:c5:6a:1b:ab:
31:a8:15:b8:6f:0f:bb:fc:03:11:0a:06:26:33:8b:
93:21:7e:aa:ab:7e:e8:f2:62:c6:e6:50:e8:f0:45:
1f:f7:84:9c:c5:66:20:5e:57:fe:70:fe:76:ad:09:
8b:70:55:1e:67:7c:8d:b8:1c:f7:9c:11:36:46:c5:
8c:24:2b:25:cf:51:2c:aa:b8:88:fb:02:0b:2c:53:
18:bd:3b:73:69:be:84:b3:c3:64:53:af:d3:a4:4e:
26:2c:52:7c:6d:db:60:87:ef:84:87:14:f6:fa:d3:
78:60:9b:e4:23:53:ef:4b:8f:aa:f0:e0:4f:ad:ac:
ea:8f:97:d6:a6:1a:f3:7f:e3:ba:9d:9a:ef:fa:91:
50:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3A:E2:45:0F:00:E1:2B:B5:B1:4E:BD:E3:18:7B:45:35:A9:62:79
X509v3 Authority Key Identifier:
keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/TTriRQ8A4Su1sU694xh7RTWpYnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.93.0/24
185.36.80.0/24
185.36.82.0/23
185.244.249.0-185.244.251.255
185.255.192.0/22
193.46.83.0/24
IPv6:
2a00:ea60:200::/40
Signature Algorithm: sha256WithRSAEncryption
38:12:77:8d:b3:75:ba:cc:30:69:01:62:02:a1:db:5d:b9:5d:
79:2c:e1:51:40:a9:79:8a:4b:7b:fc:5d:9f:b1:f7:4a:f2:e1:
5c:59:de:e5:23:62:59:ff:63:8e:a3:a6:2c:08:65:b6:41:13:
1f:cc:56:ee:29:c8:83:cb:93:ff:20:79:37:b2:42:85:62:10:
1c:77:4a:9d:23:93:08:8b:8f:a1:43:de:8c:9b:b6:b0:63:9d:
e5:2b:8b:19:7d:e4:cd:28:e5:4f:11:ef:83:35:d7:36:d9:7c:
91:39:53:90:0e:93:c3:e5:cc:f1:71:7c:de:62:93:64:af:0b:
da:97:0e:8b:2b:d5:c0:a1:62:98:8c:53:a4:d2:bb:18:04:e3:
5c:20:1b:d3:41:66:58:ca:62:54:09:cf:82:d4:ca:47:f6:2d:
40:7d:a8:24:dd:99:96:a4:39:81:eb:67:31:95:8d:76:0a:ae:
ca:d6:62:28:90:aa:63:a9:10:68:5e:3d:07:df:c5:31:6e:89:
49:f5:59:43:a0:55:2e:f5:b7:87:54:13:3b:c4:56:8e:ed:48:
80:2e:2d:e3:af:4b:3c:c8:9f:50:12:61:88:d5:7f:81:50:56:
80:d3:43:79:b3:94:42:a7:2c:47:47:30:4f:43:7f:7f:0a:7e:
53:7a:cd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:32:37 2025 by rpki-client