Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/unbKocj1GqcNPVxq0Aq8BWJbWsI.roa
File: unbKocj1GqcNPVxq0Aq8BWJbWsI.roa (raw, json)
Hash identifier: 1AueSmwy8TL+xrwQ2AAwSBG/RhFFgqXky4qd24sv6dw=
Subject key identifier: BA:76:CA:A1:C8:F5:1A:A7:0D:3D:5C:6A:D0:0A:BC:05:62:5B:5A:C2
Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial: 01909791358F8515DD25936F60D53274264A
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/unbKocj1GqcNPVxq0Aq8BWJbWsI.roa
Signing time: Tue 09 Jul 2024 12:56:34 +0000
ROA not before: Tue 09 Jul 2024 12:56:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12670
IP address blocks: 46.218.0.0/16 maxlen: 16
46.218.0.0/18 maxlen: 18
46.218.64.0/18 maxlen: 18
77.104.0.0/18 maxlen: 18
82.101.0.0/18 maxlen: 18
83.145.64.0/18 maxlen: 18
89.224.0.0/14 maxlen: 14
89.224.0.0/16 maxlen: 16
89.225.192.0/18 maxlen: 18
89.227.192.0/18 maxlen: 18
92.102.0.0/15 maxlen: 15
92.102.0.0/16 maxlen: 16
92.103.0.0/16 maxlen: 16
92.103.0.0/18 maxlen: 18
92.103.64.0/18 maxlen: 18
185.204.172.0/22 maxlen: 22
212.99.0.0/17 maxlen: 17
212.103.0.0/19 maxlen: 19
213.30.128.0/18 maxlen: 18
213.244.0.0/19 maxlen: 19
217.66.112.0/20 maxlen: 20
2a02:e000::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 26 Aug 2024 09:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:97:91:35:8f:85:15:dd:25:93:6f:60:d5:32:74:26:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Validity
Not Before: Jul 9 12:56:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba76caa1c8f51aa70d3d5c6ad00abc05625b5ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:83:3c:a1:03:dd:cc:53:ca:b8:89:9f:f2:
08:38:03:28:42:d6:cc:16:d2:73:cc:66:17:96:a9:
3d:cb:04:d8:3c:64:bd:57:6a:8b:d3:5a:20:5c:f8:
4f:2e:74:51:26:58:8f:14:43:b7:64:37:7c:68:01:
c8:b1:58:30:5c:55:ad:a1:be:99:ad:10:37:16:49:
a3:bb:61:d9:5a:6a:9f:fd:e4:01:e4:1b:2d:c4:92:
db:53:b9:87:b7:0a:ac:4e:5b:62:4b:66:e9:a1:fd:
30:cb:c4:5b:2b:a5:55:ac:f2:ad:f4:98:d3:f9:64:
d8:4e:39:4a:d1:19:1e:c2:42:a9:fa:e8:c4:18:0b:
1b:48:a9:63:4d:72:ac:da:b1:d8:f1:b8:14:39:9f:
4e:36:57:55:8b:5a:28:99:2d:36:92:88:ef:52:96:
b8:30:42:18:db:d2:1c:d6:c0:44:02:6e:d8:b0:23:
a4:88:5c:57:f1:f8:f7:ea:fe:ab:c8:ba:47:e2:be:
60:b3:00:db:f6:1e:68:c5:51:23:70:b2:a8:1a:21:
83:6b:33:f3:36:2d:c0:e1:f8:f0:02:27:51:48:ae:
0c:c8:b7:3f:5f:43:a7:83:16:6f:61:c8:d6:b2:34:
36:d4:d0:12:71:1d:97:6b:20:fa:4b:9f:dd:61:26:
0f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:76:CA:A1:C8:F5:1A:A7:0D:3D:5C:6A:D0:0A:BC:05:62:5B:5A:C2
X509v3 Authority Key Identifier:
keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/unbKocj1GqcNPVxq0Aq8BWJbWsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.218.0.0/16
77.104.0.0/18
82.101.0.0/18
83.145.64.0/18
89.224.0.0/14
92.102.0.0/15
185.204.172.0/22
212.99.0.0/17
212.103.0.0/19
213.30.128.0/18
213.244.0.0/19
217.66.112.0/20
IPv6:
2a02:e000::/29
Signature Algorithm: sha256WithRSAEncryption
14:5f:2b:76:d2:6d:7f:c5:7a:7d:dc:f4:df:35:f7:6f:96:ce:
91:42:5c:f0:8b:42:66:c6:41:df:84:90:1e:f1:cc:a7:0d:80:
89:bd:ff:d5:2c:50:3c:1f:a3:16:03:d5:a3:98:a5:2f:d4:12:
1b:12:45:89:f2:1a:24:fd:74:ff:d5:ad:a5:f6:bd:7c:e7:f1:
f1:8b:75:50:6b:1d:a5:9e:fc:8e:68:00:7e:5b:21:1e:12:1d:
43:d4:09:36:07:c7:1d:05:23:ab:3a:24:33:4c:a2:f1:5d:7a:
20:9d:84:20:6e:3c:9d:96:86:83:1c:1d:3c:d4:7d:21:23:1b:
0b:bc:00:bb:ca:48:47:42:b0:c5:f1:25:41:ae:bb:4b:f2:ca:
eb:d6:a8:98:c6:62:97:5f:48:fb:27:18:92:a9:70:02:26:32:
b0:b0:65:d5:c9:2b:cb:45:7b:b9:cc:4b:b8:3d:de:de:83:41:
29:cf:64:b9:00:28:ad:18:c2:50:dd:20:82:52:32:2f:e7:7c:
99:0e:73:ba:93:bf:4b:77:74:64:83:05:62:fb:0f:98:03:fa:
f7:78:93:1a:37:cd:86:26:36:27:c7:15:8b:cd:47:45:32:7a:
a7:aa:0a:4e:5e:b1:62:90:6a:56:73:23:8a:57:28:21:bc:84:
16:54:5b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:13:29 2025 by rpki-client