Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/CcPjCNEoVji_dYVht3GK3-Qfn2Y.roa
File: CcPjCNEoVji_dYVht3GK3-Qfn2Y.roa (raw, json)
Hash identifier: /OoxG9AzPkt32kgt5yUiJIc2J+eK067E1vT8Bn6Rud8=
Subject key identifier: 09:C3:E3:08:D1:28:56:38:BF:75:85:61:B7:71:8A:DF:E4:1F:9F:66
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 01918E66BAD52ADD63BE950C7BD97E4D6E7B
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/CcPjCNEoVji_dYVht3GK3-Qfn2Y.roa
Signing time: Mon 26 Aug 2024 11:16:22 +0000
ROA not before: Mon 26 Aug 2024 11:16:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13118
IP address blocks: 46.237.0.0/18 maxlen: 18
46.237.0.0/19 maxlen: 19
46.237.48.0/20 maxlen: 20
77.234.0.0/19 maxlen: 19
85.113.192.0/20 maxlen: 20
85.113.204.0/24 maxlen: 24
87.253.0.0/19 maxlen: 19
87.253.0.0/20 maxlen: 20
87.253.13.0/24 maxlen: 24
87.253.16.0/21 maxlen: 21
87.253.24.0/21 maxlen: 21
93.181.208.0/20 maxlen: 20
93.181.224.0/24 maxlen: 24
93.181.225.0/24 maxlen: 24
93.181.240.0/20 maxlen: 20
95.86.192.0/19 maxlen: 19
95.86.206.0/24 maxlen: 24
95.86.207.0/24 maxlen: 24
95.86.208.0/24 maxlen: 24
95.86.209.0/24 maxlen: 24
95.86.224.0/19 maxlen: 19
95.106.160.0/19 maxlen: 19
109.161.0.0/17 maxlen: 17
109.161.0.0/19 maxlen: 19
109.161.0.0/21 maxlen: 21
109.161.8.0/21 maxlen: 21
109.161.32.0/19 maxlen: 19
109.161.52.0/24 maxlen: 24
109.161.57.0/24 maxlen: 24
109.161.60.0/22 maxlen: 22
109.161.64.0/19 maxlen: 19
109.161.64.0/20 maxlen: 20
217.15.128.0/19 maxlen: 24
217.15.134.0/24 maxlen: 24
217.15.144.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 27 Aug 2024 10:21:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8e:66:ba:d5:2a:dd:63:be:95:0c:7b:d9:7e:4d:6e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Aug 26 11:16:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09c3e308d1285638bf758561b7718adfe41f9f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:5a:cb:fc:34:10:55:35:66:e4:40:d1:42:
60:23:3f:44:c3:6c:9b:a5:f8:d0:bd:5e:a1:a9:26:
e6:ac:b4:76:ae:cd:83:65:fe:24:c2:79:1b:59:eb:
50:62:12:79:fb:cb:c9:86:fd:5e:e6:b0:3d:66:e3:
ad:53:e5:43:8a:4d:a1:f7:9e:6c:7f:58:02:ea:14:
a8:39:2c:a7:c6:8c:46:0c:cc:10:8f:5a:26:9a:87:
31:4c:5b:7d:15:ea:a5:16:c5:21:6c:97:bf:49:39:
d9:f9:36:71:65:9a:7f:a3:d9:82:3f:9b:c4:25:fe:
ba:a1:5b:53:fa:ab:43:3f:e9:7f:4d:e5:ca:89:b0:
49:74:b8:93:f7:07:d4:f4:da:26:64:a3:86:91:f3:
df:fe:2d:29:88:d8:0d:12:6d:a2:b6:58:d2:a6:30:
16:42:83:35:88:c7:10:3e:95:ba:43:bc:dc:6e:23:
bd:2d:ab:ab:1e:33:97:56:d3:59:26:4b:5d:2a:a4:
00:12:b4:66:c1:2a:3a:61:66:d6:a8:4c:dc:1c:34:
f7:81:c7:9c:73:64:70:84:98:8b:b9:d6:82:d7:e2:
0b:54:57:65:d0:70:ee:c2:f0:82:5b:62:ca:3a:66:
c6:1b:81:7f:8f:9d:3b:d2:5e:4c:00:a8:9e:da:21:
fc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C3:E3:08:D1:28:56:38:BF:75:85:61:B7:71:8A:DF:E4:1F:9F:66
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/CcPjCNEoVji_dYVht3GK3-Qfn2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.237.0.0/18
77.234.0.0/19
85.113.192.0/20
87.253.0.0/19
93.181.208.0-93.181.225.255
93.181.240.0/20
95.86.192.0/18
95.106.160.0/19
109.161.0.0/17
217.15.128.0/19
Signature Algorithm: sha256WithRSAEncryption
55:7c:23:12:e4:d5:af:55:ad:54:4c:7e:77:24:ad:2a:f0:ea:
72:34:c7:31:cf:e5:84:c7:81:3e:d6:b5:7e:88:e8:77:b0:36:
a5:1f:4d:c7:aa:23:7d:77:d4:83:ee:bb:da:ac:5c:80:ff:3f:
29:ed:79:ef:42:6b:f6:fb:52:bf:2c:0f:5d:3b:d4:a9:01:69:
02:cd:30:ab:51:47:a3:ab:21:15:ae:bd:5f:b5:ba:38:8b:4a:
03:cd:2d:a8:69:76:1d:cd:2c:9c:0e:e3:48:73:6d:80:f0:cc:
9c:8b:69:3e:f1:de:2e:81:cf:fc:d1:7a:9f:c9:0d:3a:aa:91:
31:e5:63:60:17:0e:6f:4c:3a:44:05:3b:bc:02:fd:9c:d2:e4:
7f:20:a4:57:57:a1:85:41:63:3c:98:24:6b:e0:a8:ff:e4:5e:
ca:d7:7e:04:09:fd:10:2d:0f:26:f4:52:1e:ff:55:30:6a:6e:
82:76:1e:34:be:01:27:70:f8:4c:af:77:85:f4:c2:a0:8d:4d:
19:eb:d5:2d:c5:bf:1a:45:a1:09:26:00:c2:5e:35:79:63:fc:
2a:ba:31:21:37:80:2f:71:3b:97:7a:76:d2:e0:a0:0a:c3:ac:
f1:ef:88:56:6f:5c:d6:9b:8f:8b:d4:de:be:f2:b1:fc:d2:cb:
0c:42:c6:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 17 10:38:15 2025 by rpki-client