Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/7dqxLyzEfs57FgFjKLzRT_w0s9U.roa
File: 7dqxLyzEfs57FgFjKLzRT_w0s9U.roa (raw, json)
Hash identifier: effqBoqPZFnVAagbKlsk0NYmcjCtaXgXSMqnM7QSRtw=
Subject key identifier: ED:DA:B1:2F:2C:C4:7E:CE:7B:16:01:63:28:BC:D1:4F:FC:34:B3:D5
Certificate issuer: /CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Certificate serial: 0190E47A1663CF66F4B64DBB4344EBD07B41
Authority key identifier: C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/7dqxLyzEfs57FgFjKLzRT_w0s9U.roa
Signing time: Wed 24 Jul 2024 11:22:04 +0000
ROA not before: Wed 24 Jul 2024 11:22:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52142
IP address blocks: 46.174.176.0/24 maxlen: 24
46.174.177.0/24 maxlen: 24
46.174.178.0/24 maxlen: 24
46.174.179.0/24 maxlen: 24
46.174.180.0/24 maxlen: 24
46.174.181.0/24 maxlen: 24
46.174.182.0/24 maxlen: 24
46.174.183.0/24 maxlen: 24
91.210.128.0/24 maxlen: 24
91.210.129.0/24 maxlen: 24
185.16.144.0/24 maxlen: 24
195.69.80.0/22 maxlen: 22
2a03:c940::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 25 Jul 2024 09:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e4:7a:16:63:cf:66:f4:b6:4d:bb:43:44:eb:d0:7b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Validity
Not Before: Jul 24 11:22:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eddab12f2cc47ece7b16016328bcd14ffc34b3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0e:3e:e9:cf:36:39:34:ce:39:e9:b4:a0:8d:
e1:39:cf:2a:82:8d:e8:3b:a4:5b:de:d5:34:03:72:
bd:9f:3b:99:b4:ca:de:57:45:de:c3:f3:b3:6d:45:
14:c7:b3:22:22:1d:10:46:5b:a5:61:81:ae:f5:02:
72:b7:76:83:9e:2d:07:e0:c9:55:23:4f:a0:10:ec:
3e:fc:6a:c3:d2:e7:d7:bd:0f:bd:d1:67:d3:b1:29:
5c:93:0c:21:62:a8:02:9d:ca:c8:e2:d9:74:f9:98:
1d:d8:98:3b:ba:1b:e2:38:49:bc:11:3b:d6:5a:37:
9a:79:5f:0b:71:f5:8e:71:43:bb:b0:e4:01:5d:17:
31:cf:81:79:19:3f:fa:6c:c2:d0:1d:35:74:3d:32:
89:ae:93:b3:2e:88:8f:28:e7:e5:d9:ed:f8:41:15:
6d:47:72:c7:07:2a:b1:5b:27:f1:b8:db:d0:56:cb:
7c:41:00:d1:b7:f4:cd:fa:31:af:2b:fc:a5:4b:6e:
73:6c:0f:f7:e9:ec:83:a5:d3:25:b7:fd:6f:d4:4a:
8a:50:0f:2a:97:a6:68:03:60:85:9a:89:8f:62:c3:
50:84:bc:2f:96:98:bf:cf:3e:90:95:cb:50:55:25:
0c:a3:39:12:18:32:b7:a4:29:0f:76:cb:71:92:76:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DA:B1:2F:2C:C4:7E:CE:7B:16:01:63:28:BC:D1:4F:FC:34:B3:D5
X509v3 Authority Key Identifier:
keyid:C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/7dqxLyzEfs57FgFjKLzRT_w0s9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.176.0/21
91.210.128.0/23
185.16.144.0/24
195.69.80.0/22
IPv6:
2a03:c940::/32
Signature Algorithm: sha256WithRSAEncryption
00:ed:76:64:d3:35:e3:74:5e:50:93:13:92:c9:47:ba:85:00:
a3:06:db:e4:d5:ac:f6:89:16:5c:d7:22:81:17:55:72:82:15:
79:12:e3:7c:d5:3b:5f:2b:c9:1b:2f:c4:cd:9e:8c:96:2b:a1:
91:2d:71:78:dd:b0:0a:bf:b3:c0:37:ce:97:90:a6:77:f0:8d:
fc:29:6d:af:53:41:60:01:ab:e8:a3:42:c5:d9:91:3c:c9:b7:
f6:54:8f:90:d9:6a:39:1f:53:c6:1e:3e:e8:ec:23:80:0c:db:
65:e8:24:7e:c0:4c:63:74:1d:3f:7e:bc:c1:03:8b:b8:2e:97:
67:61:32:95:66:ed:34:e8:5f:f3:ad:aa:65:7f:50:e3:d8:b6:
09:0a:ae:f7:2a:30:cf:f6:d1:4a:62:47:0c:a2:03:3a:39:3f:
b1:36:cc:00:e8:a6:95:f2:25:20:3b:f0:e6:1f:13:ea:d8:ec:
2d:88:0b:6b:a6:bd:5a:3f:71:5b:06:8d:7f:3c:67:5e:0d:4c:
02:92:9f:8d:77:b0:19:5a:21:02:c6:ec:a9:c7:b0:d5:30:5a:
75:c5:86:c2:cc:30:3e:88:61:86:b3:89:11:45:67:c6:b7:95:
b6:1a:c2:87:e0:83:6e:8a:a7:6a:72:d5:82:15:7e:75:b3:62:
1a:b7:ca:9e
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZDkehZjz2b0tk27Q0Tr0HtBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzYxYjUxZWJjODQxODBmMGE2YjIzMmU4N2RmOWQ2MWM5
MGZhYWIwHhcNMjQwNzI0MTEyMjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGRhYjEyZjJjYzQ3ZWNlN2IxNjAxNjMyOGJjZDE0ZmZjMzRiM2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg4+6c82OTTOOem0oI3hOc8qgo3o
O6Rb3tU0A3K9nzuZtMreV0Xew/OzbUUUx7MiIh0QRlulYYGu9QJyt3aDni0H4MlV
I0+gEOw+/GrD0ufXvQ+90WfTsSlckwwhYqgCncrI4tl0+Zgd2Jg7uhviOEm8ETvW
WjeaeV8LcfWOcUO7sOQBXRcxz4F5GT/6bMLQHTV0PTKJrpOzLoiPKOfl2e34QRVt
R3LHByqxWyfxuNvQVst8QQDRt/TN+jGvK/ylS25zbA/36eyDpdMlt/1v1EqKUA8q
l6ZoA2CFmomPYsNQhLwvlpi/zz6QlctQVSUMozkSGDK3pCkPdstxknYhDQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFO3asS8sxH7OexYBYyi80U/8NLPVMB8GA1UdIwQY
MBaAFMPGG1HryEGA8KayMuh9+dYckPqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhZYlVldklRWUR3cHJJeTZIMzUxaHlRLXFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83YWFkYWItOTU5YS00NjYzLWI5MzUt
OGY5ODI3MzQ0NzkwLzEvN2RxeEx5ekVmczU3RmdGaktMelJUX3cwczlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS83YWFkYWItOTU5YS00NjYzLWI5MzUtOGY5ODI3MzQ0Nzkw
LzEvdzhZYlVldklRWUR3cHJJeTZIMzUxaHlRLXFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDLq6wAwQB
W9KAAwQAuRCQAwQCw0VQMA0EAgACMAcDBQAqA8lAMA0GCSqGSIb3DQEBCwUAA4IB
AQAA7XZk0zXjdF5QkxOSyUe6hQCjBtvk1az2iRZc1yKBF1VyghV5EuN81TtfK8kb
L8TNnoyWK6GRLXF43bAKv7PAN86XkKZ38I38KW2vU0FgAavoo0LF2ZE8ybf2VI+Q
2Wo5H1PGHj7o7COADNtl6CR+wExjdB0/frzBA4u4LpdnYTKVZu006F/zraplf1Dj
2LYJCq73KjDP9tFKYkcMogM6OT+xNswA6KaV8iUgO/DmHxPq2OwtiAtrpr1aP3Fb
Bo1/PGdeDUwCkp+Nd7AZWiECxuypx7DVMFp1xYbCzDA+iGGGs4kRRWfGt5W2GsKH
4INuiqdqctWCFX51s2Iat8qe
-----END CERTIFICATE-----
Generated at Fri May 2 22:44:57 2025 by rpki-client