Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/1-t-SLH23uZlUUIBosWtn3oU4a2Y.roa
File: 1-t-SLH23uZlUUIBosWtn3oU4a2Y.roa (raw, json)
Hash identifier: ek610QctV0pp5vFqpJij6MVh6I2fzC/9BLU2RHKIYAY=
Subject key identifier: FA:DF:92:2C:7D:B7:B9:99:54:50:80:68:B1:6B:67:DE:85:38:6B:66
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 0195C7C06759BC39611E47122E9519CEB221
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/1-t-SLH23uZlUUIBosWtn3oU4a2Y.roa
Signing time: Mon 24 Mar 2025 10:43:50 +0000
ROA not before: Mon 24 Mar 2025 10:43:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 158.46.128.0/18 maxlen: 24
158.46.153.0/24 maxlen: 24
158.46.192.0/19 maxlen: 24
158.46.200.0/23 maxlen: 24
158.46.202.0/23 maxlen: 24
158.46.250.0/23 maxlen: 24
178.171.0.0/17 maxlen: 24
178.171.88.0/23 maxlen: 24
178.171.100.0/24 maxlen: 24
178.171.106.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 12:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c7:c0:67:59:bc:39:61:1e:47:12:2e:95:19:ce:b2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Mar 24 10:43:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fadf922c7db7b99954508068b16b67de85386b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:2b:bb:ed:aa:22:39:4c:bd:ef:0f:5f:7d:
fe:ca:d1:47:4d:31:5c:91:c0:55:71:15:a2:29:82:
5e:e4:fb:2c:3b:57:c1:88:4f:ba:95:01:fd:05:61:
a7:4d:27:85:27:a9:c1:17:86:68:e4:da:ac:f3:bd:
ce:22:2f:cf:06:9b:0c:b4:01:ee:bd:5c:1e:f0:e0:
9b:85:14:0c:09:06:49:f8:4b:21:e7:f8:3b:df:62:
1b:82:a4:d0:72:c7:5f:b6:22:70:cd:52:e9:68:66:
66:66:f0:f4:bb:2b:45:c6:02:48:7a:6b:a1:0b:bc:
b3:33:bb:2d:ee:63:05:dc:28:18:9e:d5:5f:91:27:
e1:12:93:81:00:d2:29:b3:ca:84:be:11:22:18:77:
57:fd:43:7d:e2:fb:9b:fa:75:f5:43:ab:88:00:b1:
ce:32:26:87:03:0d:93:f8:70:e5:79:68:e3:44:90:
5d:5a:c3:9c:ba:83:d3:e9:6c:dd:42:85:f5:b3:e1:
1b:55:4e:84:d1:7f:bb:e6:e8:aa:23:d7:ea:63:a8:
ea:82:d3:94:45:18:e9:10:54:3e:ce:36:76:70:47:
77:ce:a0:92:bf:b5:67:9f:bc:33:f8:f7:0d:1a:42:
ec:a3:0d:25:6f:8d:79:93:a8:fa:8d:e3:2d:d0:47:
c7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DF:92:2C:7D:B7:B9:99:54:50:80:68:B1:6B:67:DE:85:38:6B:66
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/1-t-SLH23uZlUUIBosWtn3oU4a2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.128.0-158.46.223.255
158.46.250.0/23
178.171.0.0/17
Signature Algorithm: sha256WithRSAEncryption
97:12:53:a1:17:03:1a:4e:36:af:75:d7:29:05:ea:71:23:4e:
c3:8c:57:72:2d:1b:1c:db:18:0b:36:4d:1d:49:9d:b2:05:41:
ba:d3:c7:33:70:9a:83:fa:52:ef:6b:cd:35:ca:c1:46:da:e1:
c8:13:ff:5c:0a:bf:e3:24:0b:77:48:5d:d8:51:14:83:9f:ba:
56:d9:4f:8a:3a:af:4f:29:d9:91:1b:78:5f:e2:dd:88:73:12:
46:d6:be:ae:59:53:f0:23:d4:c1:bb:26:d8:3f:ec:68:eb:f8:
df:b1:7d:78:6d:7f:e3:53:73:33:0b:f0:4a:9e:9a:74:db:06:
e8:f5:95:1b:d9:02:45:7b:2b:c9:b1:96:fa:60:f1:45:55:38:
a6:28:a6:fa:25:0f:f9:bc:11:79:08:c7:f7:db:5c:b6:c1:e9:
b1:61:eb:ee:76:05:ff:35:58:67:e4:9a:b3:42:d6:94:ed:5e:
6b:3d:54:6a:fb:7e:39:bd:e9:ad:0b:30:86:5c:e5:f1:bd:67:
90:23:cd:96:45:40:49:f0:f0:93:38:28:be:dd:a5:b2:90:9f:
85:3b:38:ad:f2:e2:0b:39:21:4b:54:54:b8:03:79:31:99:71:
ed:4c:fb:25:fc:00:65:0d:1a:d4:80:25:2a:3e:f2:c1:45:36:
4e:ed:f8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:35:29 2025 by rpki-client