Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/1-Ixn1JUzHFe5UQVgHsmZ07ttH9A.roa
File: 1-Ixn1JUzHFe5UQVgHsmZ07ttH9A.roa (raw, json)
Hash identifier: iR8t+IbaOL+zRGC3VnOuCCwLXdQDT5tWGMx4CiSHy/8=
Subject key identifier: F8:8C:67:D4:95:33:1C:57:B9:51:05:60:1E:C9:99:D3:BB:6D:1F:D0
Certificate issuer: /CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Certificate serial: 0190DB216C1593C10E1D560DE0232D45E5C0
Authority key identifier: C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/1-Ixn1JUzHFe5UQVgHsmZ07ttH9A.roa
Signing time: Mon 22 Jul 2024 15:48:38 +0000
ROA not before: Mon 22 Jul 2024 15:48:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52142
IP address blocks: 46.174.176.0/24 maxlen: 24
46.174.177.0/24 maxlen: 24
46.174.178.0/24 maxlen: 24
46.174.179.0/24 maxlen: 24
46.174.180.0/24 maxlen: 24
46.174.182.0/24 maxlen: 24
46.174.183.0/24 maxlen: 24
91.210.128.0/24 maxlen: 24
91.210.129.0/24 maxlen: 24
195.69.80.0/22 maxlen: 22
2a03:c940::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 23 Jul 2024 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:db:21:6c:15:93:c1:0e:1d:56:0d:e0:23:2d:45:e5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Validity
Not Before: Jul 22 15:48:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f88c67d495331c57b95105601ec999d3bb6d1fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0a:76:ea:dd:42:85:f4:63:7d:cf:01:9d:6e:
7e:91:3c:1d:f3:c2:73:f2:e6:64:15:0d:75:f5:49:
bc:15:45:ea:a5:2f:7c:73:8b:c1:db:7e:ed:40:95:
50:af:4b:5f:2c:6b:ff:83:e6:d6:5c:aa:ac:7b:64:
eb:58:08:ce:c0:fb:6a:6a:be:42:3b:7e:5f:b0:23:
e1:bf:49:99:07:df:47:fb:cc:ae:c1:a6:52:a3:6e:
55:f7:14:6b:61:cd:d4:2b:56:e0:a7:3f:e8:a8:40:
17:00:83:29:5d:fb:07:ea:ad:73:9a:f1:2f:aa:f0:
e4:2e:52:b3:8d:88:77:62:46:12:8a:00:2e:2d:dd:
1f:8c:9e:fa:8f:45:97:ea:76:08:40:dd:f7:bf:68:
d7:b2:4f:52:fa:19:70:dc:6b:9b:a6:81:23:a3:00:
64:c3:07:f2:1f:95:09:69:1c:f3:c7:c9:46:0c:ea:
c7:6a:48:7d:a8:eb:37:cf:96:8f:55:29:26:a4:c3:
50:7e:2a:c8:38:d2:99:5f:77:6b:a0:fb:01:cb:9f:
94:c6:f6:28:06:be:e9:35:ed:f3:92:75:1b:86:a1:
69:65:a0:e6:34:e6:66:4f:f9:08:9b:d8:fc:7a:2c:
65:f0:ed:23:0a:7f:0c:4c:4c:32:aa:ec:61:7b:f9:
80:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8C:67:D4:95:33:1C:57:B9:51:05:60:1E:C9:99:D3:BB:6D:1F:D0
X509v3 Authority Key Identifier:
keyid:C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/1-Ixn1JUzHFe5UQVgHsmZ07ttH9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.176.0-46.174.180.255
46.174.182.0/23
91.210.128.0/23
195.69.80.0/22
IPv6:
2a03:c940::/32
Signature Algorithm: sha256WithRSAEncryption
53:c9:72:95:4f:b7:e1:62:27:4d:8d:c2:d1:87:be:70:99:69:
5c:0d:b3:16:e8:c1:08:e4:21:93:5f:08:1c:20:0d:c8:60:78:
d6:8e:6a:8e:05:27:df:78:a6:ff:96:e9:95:31:f8:0f:5f:a1:
5d:df:14:99:c5:ef:0f:76:f4:f2:98:9e:1b:1d:a7:93:79:b3:
b9:ce:ff:74:a8:bf:cd:ed:e7:1d:68:50:4c:3e:82:09:64:07:
bf:3d:ba:36:a5:ff:3b:55:05:cc:72:8a:49:91:09:4f:26:cd:
74:2a:a3:3c:ff:8d:a4:0b:5a:9b:64:44:23:4b:8c:c9:25:0e:
f2:8f:e6:57:bc:82:4a:fe:74:2f:4c:b8:e5:21:a3:ec:76:28:
c3:bb:e0:8f:92:89:65:8d:5a:16:1f:1a:06:88:53:00:3e:0b:
0e:29:7d:ce:11:0f:ea:07:a0:39:df:65:05:29:30:94:53:13:
64:69:81:e2:8c:a9:9c:b3:f1:19:74:50:b7:0c:0d:91:2e:06:
5c:85:c4:29:cc:60:1c:bf:a5:14:33:8c:f8:41:3a:39:de:53:
5f:35:94:21:90:03:c6:43:30:6d:5f:a7:cc:c0:5d:fe:fd:9e:
62:93:76:37:1f:da:32:d1:34:91:c6:ad:ce:ba:8a:88:7f:2a:
69:76:0d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:14:37 2025 by rpki-client