Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/8-nbcUXbhRQKpDC9mo3soDdfOO4.roa
File: 8-nbcUXbhRQKpDC9mo3soDdfOO4.roa (raw, json)
Hash identifier: 9bu+bBFR6YYOvABqY/1cEKWGcTRCtK9Cjrcaf1S78+4=
Subject key identifier: F3:E9:DB:71:45:DB:85:14:0A:A4:30:BD:9A:8D:EC:A0:37:5F:38:EE
Certificate issuer: /CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Certificate serial: 0190BAC3D431B20D291C3C1384F76100072D
Authority key identifier: C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/8-nbcUXbhRQKpDC9mo3soDdfOO4.roa
Signing time: Tue 16 Jul 2024 08:58:34 +0000
ROA not before: Tue 16 Jul 2024 08:58:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52142
IP address blocks: 46.174.176.0/24 maxlen: 24
46.174.179.0/24 maxlen: 24
46.174.182.0/24 maxlen: 24
46.174.183.0/24 maxlen: 24
91.210.128.0/24 maxlen: 24
91.210.129.0/24 maxlen: 24
195.69.80.0/22 maxlen: 22
2a03:c940::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 18 Jul 2024 13:18:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ba:c3:d4:31:b2:0d:29:1c:3c:13:84:f7:61:00:07:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Validity
Not Before: Jul 16 08:58:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3e9db7145db85140aa430bd9a8deca0375f38ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cf:07:5b:19:0c:37:fe:16:f2:a3:c8:14:83:
8a:97:b4:c8:0c:ab:59:f9:a5:9a:2d:8b:69:92:2b:
1b:37:32:1b:06:b7:4e:6b:22:36:f1:e9:d3:4e:16:
35:47:8e:f7:35:7b:b8:fe:81:c1:6c:24:cb:ed:52:
7e:39:f7:dc:e7:1e:27:c8:a7:e4:91:ff:ad:d0:a2:
05:78:fc:34:4a:05:ad:3b:bd:4d:91:f7:3b:d9:c8:
36:5b:a0:3f:a1:37:9d:90:35:c4:c5:f4:b0:7c:07:
00:2a:c9:56:15:89:4a:e5:37:97:72:94:93:8a:96:
f5:3f:aa:04:82:11:68:b1:19:fa:56:cc:fd:b1:d0:
ea:05:8e:97:76:c2:65:bd:c1:30:11:de:8f:f4:73:
99:96:b8:02:5a:4d:a6:cd:9a:57:6a:23:f6:4d:7e:
ef:49:3a:a8:b9:3d:57:47:d3:f1:b4:67:5e:1a:88:
62:d2:b4:e3:30:5f:fc:aa:ee:5b:18:9d:19:7a:a8:
b1:37:e3:f0:dc:e2:f5:53:e0:cc:c1:b0:ff:f6:dd:
1b:23:ec:09:ef:2d:07:17:e7:23:e7:da:4a:6b:36:
1c:8a:87:06:64:0f:96:e0:b1:74:4b:c7:11:e7:97:
2f:dd:d4:5a:d2:88:48:95:81:c5:68:6b:63:b9:c1:
e4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E9:DB:71:45:DB:85:14:0A:A4:30:BD:9A:8D:EC:A0:37:5F:38:EE
X509v3 Authority Key Identifier:
keyid:C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/8-nbcUXbhRQKpDC9mo3soDdfOO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.176.0/24
46.174.179.0/24
46.174.182.0/23
91.210.128.0/23
195.69.80.0/22
IPv6:
2a03:c940::/32
Signature Algorithm: sha256WithRSAEncryption
b5:ad:9a:0a:09:30:99:1b:ad:3c:77:fd:1a:44:c0:07:74:af:
09:fc:c5:c0:f1:47:5e:b2:f7:da:0d:65:62:53:2a:0b:90:eb:
17:e5:0a:f9:6a:8c:d3:13:ce:86:e0:24:a7:ee:e5:f4:f7:13:
a0:73:2e:63:22:d3:92:d8:e7:f1:13:b1:e6:30:fc:f1:7b:cb:
77:0b:f8:76:79:e0:a1:d1:14:49:24:e8:6d:28:5f:63:b0:4e:
45:6f:c4:11:44:22:ab:80:93:16:1e:17:4d:20:0f:f4:b0:ef:
59:3e:f0:2a:9e:2e:62:81:b3:24:b9:b3:4c:1a:68:70:7c:53:
07:42:57:6b:35:a4:bd:1b:cd:0a:98:19:71:dd:07:1f:27:7b:
8d:62:cd:d0:19:13:c4:f3:0e:66:d2:4a:15:d4:7e:86:32:73:
a5:48:63:25:07:52:5e:b7:59:41:e6:a0:c7:fb:fe:33:ce:ae:
7f:05:a8:f9:a6:10:ae:18:78:e8:e6:c1:91:52:9b:99:80:8b:
8a:f6:d5:b8:29:b1:c3:94:df:d9:55:a4:ca:fa:62:d1:03:39:
89:9c:05:c0:cb:e8:63:4e:37:76:49:4c:27:4c:98:32:a6:4c:
0c:f3:59:3d:29:f1:2d:d9:bf:5e:c7:9d:9a:2e:b1:07:fb:6e:
56:b4:f7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 16:07:04 2025 by rpki-client