Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/MNy8ZzcicD4PeBOeU_2UNeUswEM.roa
File: MNy8ZzcicD4PeBOeU_2UNeUswEM.roa (raw, json)
Hash identifier: TwgausAmJHgs0TWhQnI2FxG8QtIQXwEUIehxEL0PI58=
Subject key identifier: 30:DC:BC:67:37:22:70:3E:0F:78:13:9E:53:FD:94:35:E5:2C:C0:43
Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial: 018CC2DB441085DAB20057C7354A45EE30A2
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/MNy8ZzcicD4PeBOeU_2UNeUswEM.roa
Signing time: Mon 01 Jan 2024 02:29:58 +0000
ROA not before: Mon 01 Jan 2024 02:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211309
IP address blocks: 46.227.152.0/21 maxlen: 21
185.190.36.0/24 maxlen: 24
185.176.245.0/24 maxlen: 24
185.176.244.0/23 maxlen: 23
2a0a:2780::/31 maxlen: 31
2a0a:2781::/32 maxlen: 32
2a0a:2780::/32 maxlen: 32
2a10:d640::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:44:10:85:da:b2:00:57:c7:35:4a:45:ee:30:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Validity
Not Before: Jan 1 02:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30dcbc673722703e0f78139e53fd9435e52cc043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:37:df:eb:cc:a7:bb:64:65:93:5c:36:7a:
eb:4e:e8:e3:09:9b:93:61:03:f4:7b:4f:69:fe:91:
fd:47:ce:62:0a:4c:e5:05:ee:25:bc:2e:4f:b2:6d:
e4:9a:4c:98:a6:ee:26:25:2d:bf:54:7d:48:7d:23:
73:71:ad:04:b2:1c:b7:b1:15:89:10:a8:c2:b1:ae:
a3:a0:f6:fa:b3:2f:71:cd:08:ff:e5:6d:91:86:ad:
20:1b:07:b8:43:a9:7c:68:a1:8e:71:4a:a0:37:71:
41:27:c3:24:6d:5c:d2:b4:e4:07:19:3f:7b:f2:ec:
7c:f1:46:29:94:d2:ea:4c:ae:32:e8:05:be:e3:d8:
16:98:89:c5:78:6e:0c:20:a6:8d:a3:8a:d2:4f:0e:
58:4c:f5:8c:ae:86:db:c9:fc:85:e4:c2:0e:90:6d:
2e:98:83:36:53:31:6a:82:81:a3:4c:da:fc:55:de:
d5:3f:45:c0:0a:9e:2b:fc:74:06:89:a6:b8:2f:bd:
57:fd:ca:81:da:e9:60:e8:09:82:69:9e:90:6f:c1:
8a:d5:11:e5:dd:2f:6b:4e:16:aa:1d:68:95:b5:9e:
73:78:97:98:04:46:b3:b8:f5:60:20:23:89:af:f0:
79:42:01:e9:50:72:6d:1c:1a:c7:37:5b:de:92:fa:
89:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DC:BC:67:37:22:70:3E:0F:78:13:9E:53:FD:94:35:E5:2C:C0:43
X509v3 Authority Key Identifier:
keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/MNy8ZzcicD4PeBOeU_2UNeUswEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.152.0/21
185.176.244.0/23
185.190.36.0/24
IPv6:
2a0a:2780::/31
2a10:d640::/29
Signature Algorithm: sha256WithRSAEncryption
0d:30:88:48:d6:ce:ab:fd:82:bc:af:31:9d:b7:21:0f:73:69:
ee:df:80:52:f0:4e:f1:fe:c1:7e:f5:f0:72:e0:85:78:49:18:
b9:12:00:93:8f:ce:e1:56:d7:6c:55:fc:ab:45:68:c9:32:e7:
cd:05:f0:b5:5f:c9:83:71:77:78:41:92:fc:74:86:26:fe:a5:
86:6a:56:37:8a:3a:e8:8f:40:02:48:33:89:63:48:e6:6a:5a:
34:61:52:b6:57:a0:19:1b:ca:8d:be:92:95:4f:9b:ee:a0:4c:
59:ab:17:a8:28:1e:74:66:ad:7e:f2:8e:fc:f4:3d:bd:d4:22:
89:3b:3a:4e:b1:d6:17:03:0e:ee:62:02:b6:38:fe:d7:85:63:
39:cf:9a:e0:eb:06:93:79:f9:5d:06:c0:20:1d:6f:f3:4e:bd:
6a:eb:91:94:8c:93:56:a5:a3:46:eb:1c:e9:f1:68:2d:e4:e9:
70:3a:67:c9:35:f5:42:df:b6:0a:f9:eb:c0:6d:ba:20:c5:7a:
ce:e1:dc:42:97:61:95:fd:cf:8e:49:42:61:1b:3b:49:b7:48:
13:17:5d:06:c6:55:cb:0d:5f:1e:6c:ac:6c:b7:71:17:42:bd:
14:45:97:9d:df:74:04:7f:3d:c0:42:41:10:11:5f:22:19:fd:
24:6a:3e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:45 2025 by rpki-client