Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/uQQ45O5zGaLm4DoxRG2WbS-qt1c.roa
File: uQQ45O5zGaLm4DoxRG2WbS-qt1c.roa (raw, json)
Hash identifier: P7aJBrCmdUpjILeMPhL28hB5ap/v+qgvEQJij3ckclQ=
Subject key identifier: B9:04:38:E4:EE:73:19:A2:E6:E0:3A:31:44:6D:96:6D:2F:AA:B7:57
Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Certificate serial: 01932BDF8BA4918DC8E95EB259433F5AEFA4
Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/uQQ45O5zGaLm4DoxRG2WbS-qt1c.roa
Signing time: Thu 14 Nov 2024 18:11:30 +0000
ROA not before: Thu 14 Nov 2024 18:11:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201502
IP address blocks: 46.255.240.0/21 maxlen: 24
46.255.240.0/24 maxlen: 24
46.255.241.0/24 maxlen: 24
46.255.242.0/24 maxlen: 24
46.255.243.0/24 maxlen: 24
46.255.244.0/24 maxlen: 24
46.255.245.0/24 maxlen: 24
46.255.246.0/24 maxlen: 24
46.255.247.0/24 maxlen: 24
176.124.114.0/24 maxlen: 24
185.13.220.0/22 maxlen: 24
185.13.220.0/24 maxlen: 24
185.13.221.0/24 maxlen: 24
185.13.222.0/24 maxlen: 24
185.13.223.0/24 maxlen: 24
185.25.136.0/22 maxlen: 22
185.25.136.0/24 maxlen: 24
185.25.137.0/24 maxlen: 24
185.25.138.0/24 maxlen: 24
185.25.139.0/24 maxlen: 24
185.203.172.0/22 maxlen: 24
185.203.172.0/24 maxlen: 24
185.203.173.0/24 maxlen: 24
185.203.174.0/24 maxlen: 24
185.203.175.0/24 maxlen: 24
185.220.80.0/24 maxlen: 24
185.253.80.0/22 maxlen: 24
185.253.80.0/24 maxlen: 24
185.253.81.0/24 maxlen: 24
185.253.82.0/24 maxlen: 24
185.253.83.0/24 maxlen: 24
188.208.19.0/24 maxlen: 24
188.214.82.0/24 maxlen: 24
188.214.83.0/24 maxlen: 24
2a03:a6c0::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 14 Nov 2024 18:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2b:df:8b:a4:91:8d:c8:e9:5e:b2:59:43:3f:5a:ef:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Validity
Not Before: Nov 14 18:11:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b90438e4ee7319a2e6e03a31446d966d2faab757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7c:5a:68:57:a7:0c:7f:6a:38:05:ff:6e:24:
b4:a6:19:50:05:f9:28:e6:6c:d8:5d:d8:40:78:d7:
64:eb:81:e2:56:70:ff:4f:cb:e6:22:40:b7:2d:9b:
59:49:b4:bf:e5:24:67:bd:0c:9e:b0:32:fb:88:5e:
8d:a4:9a:fe:fa:08:e8:25:c0:be:a9:c6:0d:b0:89:
97:cf:89:69:3a:72:b4:60:3f:84:fc:e3:76:67:d0:
ee:31:4a:83:af:9e:59:d8:cb:2c:1b:02:d9:6c:6b:
ff:ab:38:70:de:73:83:ef:64:a1:42:0a:5e:aa:82:
f3:24:40:bb:ec:7a:bb:f2:48:79:b6:a6:df:07:d9:
76:18:3a:98:98:d0:fe:0e:6c:f4:c7:55:27:0c:bf:
84:1a:30:4c:0c:ac:9d:78:e4:f7:06:a1:cc:57:76:
6a:31:0a:32:51:2b:43:95:35:85:21:37:00:6e:77:
69:ed:f3:cd:09:7d:22:23:68:94:99:41:9e:a6:87:
d9:4a:6d:ae:6e:2f:db:cc:78:6d:d9:47:a6:c4:8b:
f0:69:58:38:49:b8:56:22:e6:bd:e6:9e:30:fe:c8:
52:f8:ce:10:b7:70:c6:62:6f:66:43:c5:96:63:3a:
42:2f:5b:c7:f6:b3:e3:af:b8:ea:7f:c4:40:14:48:
02:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:04:38:E4:EE:73:19:A2:E6:E0:3A:31:44:6D:96:6D:2F:AA:B7:57
X509v3 Authority Key Identifier:
keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/uQQ45O5zGaLm4DoxRG2WbS-qt1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.240.0/21
176.124.114.0/24
185.13.220.0/22
185.25.136.0/22
185.203.172.0/22
185.220.80.0/24
185.253.80.0/22
188.208.19.0/24
188.214.82.0/23
IPv6:
2a03:a6c0::/32
Signature Algorithm: sha256WithRSAEncryption
9d:d1:41:7f:9c:bd:ed:25:08:32:c1:a7:36:39:65:cf:64:15:
bd:e4:1d:9f:31:0c:3d:8d:f5:48:3a:80:b6:e2:a6:64:7f:5f:
eb:01:8f:a9:78:7b:42:25:1d:f9:9b:14:33:ca:a4:e3:b1:60:
89:ce:18:c3:c4:36:0c:49:f5:e7:a1:06:e0:f9:31:f4:ef:eb:
e2:54:fe:fd:38:94:b0:85:36:1f:0a:09:cb:6d:00:b0:ea:e8:
d2:f6:92:a4:a1:94:1e:15:ae:63:d8:8f:b5:4c:8f:5a:9a:1f:
c6:ef:30:04:fb:53:2c:af:ac:a2:75:b6:67:3a:ef:4a:dd:5a:
b2:89:96:e4:22:c2:ab:4f:77:a5:c3:0a:7c:2a:c5:bc:04:b0:
33:13:07:da:66:38:0f:3b:cb:ef:86:de:23:31:d9:41:83:1b:
20:f8:cc:fa:56:ad:c0:cd:2d:ce:3a:12:ca:1b:80:f4:98:96:
c4:c1:69:e0:45:be:89:82:32:d1:83:42:04:c6:01:de:99:48:
b1:22:82:cc:fb:f0:f9:7c:3d:e2:1e:c9:d9:59:26:4a:fa:b6:
39:75:8e:30:3c:aa:84:0b:1d:70:ca:de:95:cd:01:3f:b9:6d:
0b:ff:5a:20:09:0c:f6:1a:41:e5:02:ff:50:7c:26:30:35:45:
b7:3d:2f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:58:34 2025 by rpki-client