Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/m1MWCJmyfGjXASkqAY6R-uxA4Y0.roa
File: m1MWCJmyfGjXASkqAY6R-uxA4Y0.roa (raw, json)
Hash identifier: Sh9X2BEGVF1XMbFJ1oQyaCHMNQkUqTtRB1gEa3oVDpk=
Subject key identifier: 9B:53:16:08:99:B2:7C:68:D7:01:29:2A:01:8E:91:FA:EC:40:E1:8D
Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial: 019619E8C57A673AE380DB35C3F676969DF1
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/m1MWCJmyfGjXASkqAY6R-uxA4Y0.roa
Signing time: Wed 09 Apr 2025 09:36:47 +0000
ROA not before: Wed 09 Apr 2025 09:36:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212552
IP address blocks: 146.19.130.0/24 maxlen: 24
185.110.191.0/24 maxlen: 24
185.221.237.0/24 maxlen: 24
185.231.59.0/24 maxlen: 24
193.163.201.0/24 maxlen: 24
2a14:7981::/32 maxlen: 32
2a14:7981:467::/48 maxlen: 48
2a14:7981:470::/48 maxlen: 48
2a14:7981:471::/48 maxlen: 48
2a14:7981:472::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 12 Apr 2025 07:06:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:e8:c5:7a:67:3a:e3:80:db:35:c3:f6:76:96:9d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
Validity
Not Before: Apr 9 09:36:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b53160899b27c68d701292a018e91faec40e18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a0:71:4b:5c:71:26:4c:6a:a5:05:70:c8:19:
30:56:56:1d:02:8f:5c:3c:c0:8c:88:e8:30:35:f0:
2b:f8:9f:7e:19:65:d5:33:1a:39:50:39:b3:aa:67:
db:b1:d4:22:1b:91:d2:7c:93:7c:51:18:8e:aa:e2:
da:6f:08:44:66:65:43:87:bb:4b:27:58:9c:e3:2e:
d1:c8:67:04:d7:3d:80:f8:84:21:e6:6c:4d:ee:86:
ac:eb:49:d9:b0:55:e6:eb:bb:3f:ae:5e:30:f6:9d:
df:af:e9:a5:71:51:a7:86:ba:34:70:ed:ea:4e:21:
03:e7:ad:a0:5d:1a:d8:50:49:2c:c8:13:a7:f3:33:
59:f8:42:fd:66:5e:91:33:c5:9d:d3:ef:f0:ff:e2:
08:df:e9:83:20:a4:9c:84:f9:63:7d:6a:2c:0d:fb:
e9:5b:b7:bf:74:99:fc:fe:40:32:d1:10:cb:12:0c:
eb:9b:be:1c:08:82:7e:28:6d:45:ff:14:a9:91:7a:
89:e2:47:04:da:cb:c4:c4:75:18:a7:3b:df:b1:fc:
5f:b5:53:81:13:14:0b:2c:fb:26:e3:df:bc:11:1b:
88:97:72:63:cb:6f:3c:82:bc:4f:08:91:69:77:02:
5e:08:a9:d8:82:ae:9f:3f:9f:fa:69:bb:d3:fd:1c:
a4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:53:16:08:99:B2:7C:68:D7:01:29:2A:01:8E:91:FA:EC:40:E1:8D
X509v3 Authority Key Identifier:
keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/m1MWCJmyfGjXASkqAY6R-uxA4Y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.130.0/24
185.110.191.0/24
185.221.237.0/24
185.231.59.0/24
193.163.201.0/24
IPv6:
2a14:7981::/32
Signature Algorithm: sha256WithRSAEncryption
a6:05:e5:ea:59:39:e7:0f:e2:b0:de:20:11:d9:7d:12:eb:75:
2f:c0:f4:be:31:b1:de:9d:71:75:9e:37:50:7c:9b:2f:40:3a:
7d:9b:96:7c:1d:d4:26:ce:74:6c:6b:61:9f:eb:aa:e8:c4:50:
47:7a:43:c1:d9:39:43:46:e7:40:e7:9e:81:14:c5:ac:0f:34:
22:7e:a8:f2:e8:1d:db:6c:4f:48:f2:1a:de:bd:fc:7f:c6:25:
09:8d:12:61:61:f0:7b:a7:52:4e:fd:e5:c0:43:6b:47:bd:3a:
96:e7:f0:2a:53:44:41:31:72:bd:6f:0e:80:51:68:2d:b1:e6:
a7:70:9c:60:29:71:f9:6d:53:d2:45:6b:cb:64:34:ca:e3:b6:
75:4b:a7:2b:5e:55:b9:ef:aa:f0:4e:ec:22:6f:a4:0b:a8:ac:
b2:a3:6e:1c:6c:17:be:36:d3:74:e6:80:fc:8d:4f:63:53:a4:
b6:72:66:35:c1:37:d7:00:5a:7e:ac:a0:bd:e5:2c:14:4b:c5:
8a:8a:95:4f:5c:ec:95:10:28:f9:51:2f:28:25:aa:75:f3:de:
5b:20:b9:67:d8:6e:70:4a:a0:9a:a7:f1:3a:8c:51:b4:7c:0b:
f8:da:1a:c9:a0:8a:e3:2c:3d:be:bf:fb:e1:99:61:e2:ae:af:
53:13:ea:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:23:32 2025 by rpki-client