Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/33jU2n2y0CRFg8tzGQeuT9ExcaM.roa
File: 33jU2n2y0CRFg8tzGQeuT9ExcaM.roa (raw, json)
Hash identifier: XmTZ0aSkwiPD7SQMKmRdaY2UI8bIbc/VPnFNQvw//lU=
Subject key identifier: DF:78:D4:DA:7D:B2:D0:24:45:83:CB:73:19:07:AE:4F:D1:31:71:A3
Certificate issuer: /CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Certificate serial: 019103F8382AE6C70DB888F42EEA9CA918C9
Authority key identifier: C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/33jU2n2y0CRFg8tzGQeuT9ExcaM.roa
Signing time: Tue 30 Jul 2024 14:08:04 +0000
ROA not before: Tue 30 Jul 2024 14:08:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52142
IP address blocks: 46.174.176.0/24 maxlen: 24
46.174.177.0/24 maxlen: 24
46.174.178.0/24 maxlen: 24
46.174.179.0/24 maxlen: 24
46.174.180.0/24 maxlen: 24
46.174.181.0/24 maxlen: 24
46.174.182.0/24 maxlen: 24
46.174.183.0/24 maxlen: 24
91.210.128.0/24 maxlen: 24
91.210.129.0/24 maxlen: 24
185.16.144.0/24 maxlen: 24
185.16.145.0/24 maxlen: 24
185.16.146.0/24 maxlen: 24
185.16.147.0/24 maxlen: 24
195.69.80.0/22 maxlen: 22
2a03:c940::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 06 Aug 2024 11:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:03:f8:38:2a:e6:c7:0d:b8:88:f4:2e:ea:9c:a9:18:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Validity
Not Before: Jul 30 14:08:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df78d4da7db2d0244583cb731907ae4fd13171a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:89:99:72:40:aa:59:d1:79:e7:85:24:29:b3:
44:ae:2f:8c:e6:3c:74:44:81:57:20:a3:af:da:d0:
a0:ac:f1:4c:e7:ff:60:7e:d4:66:70:71:3f:72:6d:
b6:6c:56:71:c0:10:65:f7:f9:80:6f:98:6b:ab:0b:
5d:0a:b5:df:e0:7d:e6:ae:99:09:51:95:fe:30:36:
45:a3:3e:6c:d2:70:d6:e1:a1:03:85:21:f1:38:e3:
c0:d4:f8:9a:51:7d:1c:02:d5:19:6a:62:a7:d6:6f:
1c:88:17:5a:f5:40:5d:b2:b2:c1:f7:63:fb:76:a4:
78:c6:e2:2d:ad:75:7a:47:2d:ba:32:29:f0:f2:ce:
5d:cd:59:72:e9:c0:40:34:4d:0d:32:f9:67:d7:55:
9e:a0:b5:83:ae:13:d3:61:10:e6:f0:a8:02:b1:96:
b4:28:de:ca:77:f9:99:ac:02:6e:af:17:9e:94:2e:
9f:5f:1f:e1:57:6c:b0:80:ba:61:99:05:0c:e2:6f:
d2:a5:33:38:45:24:2c:42:27:3d:78:c1:a2:9f:f3:
53:a2:d1:5b:53:67:03:07:3f:cf:2d:c0:87:3e:24:
1c:8d:f6:42:3a:cc:e9:7b:d3:70:4a:9a:61:85:70:
1f:ac:be:30:1f:a2:81:22:4d:d9:9f:67:29:33:f2:
91:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:78:D4:DA:7D:B2:D0:24:45:83:CB:73:19:07:AE:4F:D1:31:71:A3
X509v3 Authority Key Identifier:
keyid:C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/33jU2n2y0CRFg8tzGQeuT9ExcaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.176.0/21
91.210.128.0/23
185.16.144.0/22
195.69.80.0/22
IPv6:
2a03:c940::/32
Signature Algorithm: sha256WithRSAEncryption
47:ec:d6:71:a5:b8:58:7e:0e:d3:df:37:c8:b8:35:aa:a0:92:
48:eb:48:7f:7b:9a:7f:8e:d4:c0:66:f0:a0:89:b5:3d:74:c4:
24:3c:6d:b4:0a:d5:26:72:b5:e0:59:f5:af:40:ce:9f:d3:df:
53:42:bb:b3:45:6d:c5:6a:fd:ea:18:79:6d:9b:3d:5b:19:e5:
c0:f6:09:9f:01:f4:e7:ee:28:4b:2e:0f:86:da:30:85:0f:ea:
ea:38:3a:2d:2f:9c:31:96:c0:88:80:a0:66:22:54:b7:b9:05:
ec:ff:68:76:56:53:83:a7:13:6b:d9:bf:55:1c:0f:b3:98:52:
4e:eb:83:b6:60:98:98:03:fa:53:f2:46:48:1d:19:1d:b9:b5:
72:d0:e5:19:2b:60:79:91:ba:46:ad:48:6f:00:50:fd:4d:91:
2d:be:3f:75:d3:5b:ca:d5:7b:42:ce:f8:b8:6a:6e:b4:68:96:
ab:e7:74:1c:59:1f:0e:03:be:d4:f3:f9:91:67:c3:6c:c8:1c:
e3:af:db:44:66:1a:52:6b:a3:04:c4:98:da:e8:a1:1a:28:cf:
c4:72:69:4e:4b:2a:ba:e2:04:55:d0:d1:59:8a:6b:38:2a:1c:
57:3a:b1:ce:a5:16:d3:9d:df:85:27:98:81:88:20:8a:5b:5b:
39:01:00:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:02:29 2025 by rpki-client