Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/b5x8sPsVQYwGUUMSgy83OocwujU.roa
File: b5x8sPsVQYwGUUMSgy83OocwujU.roa (raw, json)
Hash identifier: iaZzduoGCrgXxTasTlKyjfvIsLTmaHcSdRfrLBQ1VSs=
Subject key identifier: 6F:9C:7C:B0:FB:15:41:8C:06:51:43:12:83:2F:37:3A:87:30:BA:35
Certificate issuer: /CN=07fa540a25432e2aa4dca057845c359d214886f7
Certificate serial: 018CFCD09F137029D60D4F55C073D7B45702
Authority key identifier: 07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/b5x8sPsVQYwGUUMSgy83OocwujU.roa
Signing time: Fri 12 Jan 2024 08:36:19 +0000
ROA not before: Fri 12 Jan 2024 08:36:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196922
IP address blocks: 46.232.186.0/24 maxlen: 24
46.232.184.0/24 maxlen: 24
46.232.184.0/21 maxlen: 24
46.232.185.0/24 maxlen: 24
46.232.189.0/24 maxlen: 24
46.232.190.0/24 maxlen: 24
46.232.188.0/24 maxlen: 24
46.232.191.0/24 maxlen: 24
46.232.187.0/24 maxlen: 24
178.248.240.0/24 maxlen: 24
178.248.241.0/24 maxlen: 24
178.248.242.0/24 maxlen: 24
178.248.240.0/21 maxlen: 24
178.248.245.0/24 maxlen: 24
178.248.246.0/24 maxlen: 24
178.248.243.0/24 maxlen: 24
178.248.244.0/24 maxlen: 24
185.115.24.0/22 maxlen: 24
185.115.24.0/23 maxlen: 23
178.248.247.0/24 maxlen: 24
185.115.26.128/27 maxlen: 27
185.115.26.0/23 maxlen: 23
2a02:1308::/29 maxlen: 32
2a02:1308::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fc:d0:9f:13:70:29:d6:0d:4f:55:c0:73:d7:b4:57:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07fa540a25432e2aa4dca057845c359d214886f7
Validity
Not Before: Jan 12 08:36:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f9c7cb0fb15418c06514312832f373a8730ba35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:58:e1:9b:80:3e:2d:9e:b5:16:df:4e:4c:da:
89:83:66:ed:b4:76:de:97:39:05:c5:3e:f7:cb:d1:
72:5e:f0:7f:3e:2d:ef:ca:5a:ea:5f:08:20:1b:2f:
e3:19:41:43:6c:50:ba:c8:ee:f7:55:18:a8:12:e0:
c3:7c:18:b0:1a:a4:0a:e5:69:35:94:24:6f:3c:08:
b8:4e:58:57:19:e8:d4:ec:3b:1c:ab:12:e1:a4:02:
89:4f:16:c9:d1:ee:78:22:b6:7b:06:41:50:21:3e:
77:47:ec:5d:a2:71:eb:b0:b2:51:6e:46:eb:6c:3d:
2a:a0:39:7a:3f:de:c6:ea:64:d8:43:21:b7:b2:97:
93:0b:7e:fa:bc:e8:1c:7b:6f:45:a0:18:ea:dd:64:
71:38:6a:bb:22:5f:ef:80:fb:75:db:11:71:9a:f3:
5f:d5:04:21:51:b9:f6:de:e0:e1:1e:97:95:f2:46:
0b:77:e5:9b:1e:7a:cb:82:a1:65:6f:8c:21:4d:91:
8e:ee:88:06:51:8c:fe:ef:9d:aa:0c:eb:31:95:65:
81:3f:8d:be:d3:48:ec:e2:2c:8f:10:87:ff:f8:8f:
26:a0:6d:b9:f7:0f:e0:21:d8:82:11:a7:fb:81:e2:
76:c0:b5:9a:b7:00:b0:8e:1e:8b:c2:cd:d7:b3:10:
ed:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9C:7C:B0:FB:15:41:8C:06:51:43:12:83:2F:37:3A:87:30:BA:35
X509v3 Authority Key Identifier:
keyid:07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/b5x8sPsVQYwGUUMSgy83OocwujU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.184.0/21
178.248.240.0/21
185.115.24.0/22
IPv6:
2a02:1308::/29
Signature Algorithm: sha256WithRSAEncryption
42:20:e1:1e:81:6b:e3:68:63:55:15:79:ab:08:1f:0c:33:1f:
e6:6a:bf:f4:3e:67:0c:c6:4d:ef:56:88:b3:8f:62:09:aa:9b:
d4:42:5a:33:ee:4f:82:c1:b9:4f:2a:da:d1:6e:73:34:76:10:
34:7b:e7:aa:c1:9c:b5:ad:ed:09:6d:9c:33:47:4e:67:6c:49:
7f:ac:45:a3:87:b3:ef:57:b2:80:66:53:1b:79:c7:ca:2c:a1:
e2:49:7b:36:60:1a:2a:bf:b7:95:5f:16:06:23:b9:84:89:62:
eb:f0:7e:e2:63:69:98:cb:ec:87:00:18:59:c0:de:50:38:4e:
ef:99:0c:d3:7b:ba:c6:7d:6a:0e:f2:c9:8c:9a:25:dd:9a:30:
3a:94:78:f4:b0:b2:4d:68:e6:45:22:13:6d:a1:e7:a9:2d:98:
3d:13:24:3e:aa:9e:d2:c5:95:01:1d:07:50:ca:7b:f4:3d:2e:
03:57:1d:15:9b:53:da:eb:ab:11:77:38:63:a8:85:dd:70:8d:
c8:a9:84:c8:08:3b:e4:b0:1b:d3:e6:a1:52:d0:f6:b8:6c:fd:
b6:19:5e:5c:d0:97:ce:b2:fb:78:29:22:5e:7f:f9:b3:41:59:
4b:3f:a6:00:0b:16:45:bb:d1:f0:c0:92:5b:ac:93:c4:23:ec:
6a:f9:1c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:13 2025 by rpki-client