Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/NgeyVfwN30sOZ2ltb5b44HYkqTc.roa
File: NgeyVfwN30sOZ2ltb5b44HYkqTc.roa (raw, json)
Hash identifier: 3SirssBJL/Z4GvWcu+hriRb00dhnzVZasn7rwyXGJ4w=
Subject key identifier: 36:07:B2:55:FC:0D:DF:4B:0E:67:69:6D:6F:96:F8:E0:76:24:A9:37
Certificate issuer: /CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Certificate serial: 0192B26A31F8EABD973EFE8DE1FC7E65AAC6
Authority key identifier: 7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/NgeyVfwN30sOZ2ltb5b44HYkqTc.roa
Signing time: Tue 22 Oct 2024 04:09:16 +0000
ROA not before: Tue 22 Oct 2024 04:09:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47544
IP address blocks: 46.248.160.0/19 maxlen: 19
46.248.174.0/24 maxlen: 24
46.248.183.0/24 maxlen: 24
86.111.240.0/21 maxlen: 21
185.110.48.0/24 maxlen: 24
185.110.49.0/24 maxlen: 24
185.110.50.0/24 maxlen: 24
185.110.51.0/24 maxlen: 24
193.106.104.0/22 maxlen: 22
2a01:7400::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b2:6a:31:f8:ea:bd:97:3e:fe:8d:e1:fc:7e:65:aa:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b3175988373e56b6ffe0b15a1fc75d4693ae2c0
Validity
Not Before: Oct 22 04:09:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3607b255fc0ddf4b0e67696d6f96f8e07624a937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:14:18:56:db:f3:55:c4:dd:99:31:99:16:
4d:2d:c3:3a:b8:3a:93:1e:f4:32:63:9d:1a:f9:47:
10:c7:07:b2:0e:f6:18:5c:9c:0f:8e:5a:35:91:b5:
6b:f9:83:05:aa:26:6d:74:db:ac:cd:8a:ce:f0:b1:
56:6a:5c:85:b3:c1:75:7a:4b:5b:40:b4:57:0c:38:
f3:1e:c4:85:38:ab:a0:07:39:72:61:42:50:8c:38:
05:b3:87:39:54:05:9f:db:6f:10:9f:3c:8a:b7:1b:
f9:9b:c4:85:65:e8:12:75:d5:42:c7:6e:30:1f:c9:
85:c5:0b:36:31:86:18:d9:a9:60:af:fd:29:50:35:
31:9d:3c:d9:91:42:ae:26:9f:27:e5:67:cd:48:7f:
18:0d:62:87:40:81:bc:d1:b1:d5:9e:fa:42:fc:5b:
f2:25:0d:7d:4a:d9:1d:02:2d:33:5d:2c:19:63:ae:
5a:51:1b:22:0b:a1:0b:b3:a6:43:f2:57:e9:5d:2d:
97:34:33:77:36:29:ae:29:8a:31:5e:a8:3c:58:fc:
e6:47:91:97:0e:e2:44:06:f2:a9:c7:94:ba:5d:0d:
c3:9b:d1:31:03:52:e7:1c:86:dd:89:aa:52:c9:f0:
71:7a:48:d4:7a:24:52:e1:a0:41:7c:2b:ac:4e:10:
b8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:07:B2:55:FC:0D:DF:4B:0E:67:69:6D:6F:96:F8:E0:76:24:A9:37
X509v3 Authority Key Identifier:
keyid:7B:31:75:98:83:73:E5:6B:6F:FE:0B:15:A1:FC:75:D4:69:3A:E2:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ezF1mINz5Wtv_gsVofx11Gk64sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/NgeyVfwN30sOZ2ltb5b44HYkqTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/850134-bb21-4bad-9eea-dfd51b06dd99/1/ezF1mINz5Wtv_gsVofx11Gk64sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.160.0/19
86.111.240.0/21
185.110.48.0/22
193.106.104.0/22
IPv6:
2a01:7400::/32
Signature Algorithm: sha256WithRSAEncryption
a0:7b:6c:af:2e:41:00:92:01:64:1c:25:02:d1:9b:8f:35:3b:
21:3f:27:67:aa:db:b1:0e:0e:6e:0d:01:39:60:09:63:59:a3:
16:25:82:19:6c:da:0a:49:c3:42:08:f2:57:23:e1:e5:16:d7:
c9:7c:a4:15:b8:0d:d7:4a:dd:d7:98:03:75:49:3c:58:65:e6:
d6:75:65:08:74:55:34:ff:48:75:ad:83:4c:3e:a4:8e:1b:c9:
48:a8:4f:0e:3e:68:f2:6f:bd:ac:66:42:14:b0:32:ab:d4:c8:
41:a1:61:fc:43:75:18:4c:6f:90:10:e5:f6:99:15:f2:57:f5:
89:ed:81:40:6c:92:b6:d1:a2:36:35:19:93:1d:40:f2:52:d6:
bf:9f:c3:6f:ca:ad:74:ff:b6:c8:d3:ed:e3:60:39:4b:14:4c:
2d:ac:f9:2d:f8:47:ac:76:18:72:0d:70:4a:d7:7c:e7:42:64:
03:82:90:bd:2d:b8:6c:8f:ba:a1:8b:95:82:0c:7d:6c:6d:4a:
5e:fb:fd:2e:68:96:c4:3c:20:d3:91:6f:93:1a:6d:17:78:89:
5c:96:97:a0:9a:e8:b2:b5:a3:f4:96:ae:b1:7e:92:af:67:09:
e5:d9:ad:84:64:db:17:31:fc:49:0e:54:84:50:9c:8f:1d:6f:
d9:51:71:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:22:50 2025 by rpki-client