Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/kvnIubCQNiDNe1vQv4GrVcdobIw.roa
File: kvnIubCQNiDNe1vQv4GrVcdobIw.roa (raw, json)
Hash identifier: PmZsNi4fZpWk04qNITu2VqtzLGnmMJavad8yLbIcbGM=
Subject key identifier: 92:F9:C8:B9:B0:90:36:20:CD:7B:5B:D0:BF:81:AB:55:C7:68:6C:8C
Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial: 018CEE114E84F77C3CD7C6455BF6C9E4A3DD
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/kvnIubCQNiDNe1vQv4GrVcdobIw.roa
Signing time: Tue 09 Jan 2024 11:52:40 +0000
ROA not before: Tue 09 Jan 2024 11:52:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2914
IP address blocks: 46.253.80.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 24 Jun 2024 14:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:11:4e:84:f7:7c:3c:d7:c6:45:5b:f6:c9:e4:a3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Validity
Not Before: Jan 9 11:52:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92f9c8b9b0903620cd7b5bd0bf81ab55c7686c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7f:05:5e:66:ed:23:cb:2d:49:1d:5f:1e:68:
aa:51:74:ea:52:f5:8d:b7:17:be:55:96:db:2c:31:
8d:c7:4c:10:95:63:d4:65:95:d3:66:19:14:ae:7a:
d1:ea:2b:5c:59:98:c0:5a:c9:d8:04:df:dd:a9:19:
7d:1f:d1:7f:5c:11:3f:8d:0f:34:0c:23:dd:cf:9f:
3b:e8:95:cc:22:db:59:03:ba:43:1a:f5:22:83:9a:
75:d1:5f:ad:e4:e1:ea:82:e7:84:b0:1b:2d:5a:70:
cc:f2:3d:15:ae:d7:b4:ed:65:1d:b2:f3:d2:d4:11:
2c:56:65:4a:05:15:16:5f:79:67:df:cc:fa:0b:a1:
02:ba:62:4c:39:96:9e:0a:a8:27:3b:c3:27:63:6b:
09:1a:3f:7d:90:28:93:30:4b:d9:c5:98:44:bd:22:
29:d2:ce:4b:70:c5:09:64:da:74:a3:e2:d2:fc:0e:
27:ad:aa:79:18:b3:29:c4:40:15:cf:bc:ac:8a:1f:
d7:5c:dd:45:c2:8f:cd:11:d2:b7:40:fe:9b:7f:92:
2d:c2:ee:8e:2d:10:b0:f6:aa:a1:42:c0:44:1a:7f:
c8:32:a2:4b:9b:90:51:88:f8:37:f8:fe:ef:f5:69:
3c:81:af:48:c4:3c:55:5c:d2:ff:85:0d:89:0b:a9:
3a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F9:C8:B9:B0:90:36:20:CD:7B:5B:D0:BF:81:AB:55:C7:68:6C:8C
X509v3 Authority Key Identifier:
keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/kvnIubCQNiDNe1vQv4GrVcdobIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.80.0/21
Signature Algorithm: sha256WithRSAEncryption
19:85:16:ff:4a:bd:5c:cb:03:a8:13:1a:49:b5:ea:cc:74:0e:
81:15:9e:c5:49:c5:cc:a0:4b:b0:0c:93:f5:92:b0:d4:39:43:
54:80:9d:6a:fb:91:9b:67:83:bc:87:51:50:07:ea:11:6c:8b:
17:8d:45:71:11:6f:1d:2e:07:49:d3:cd:37:fa:f7:5e:e4:8e:
83:a6:84:e4:4f:9a:76:11:bf:d6:9a:c7:c9:08:46:ab:86:b4:
73:24:d7:e9:89:cb:38:17:be:a0:a3:4e:c8:f4:a3:df:59:63:
ae:e4:12:66:11:f6:3f:a1:f3:54:2e:3e:0b:3d:be:af:dd:6c:
f0:6e:15:ba:d0:7f:bd:16:ae:3d:a3:b6:21:f1:0c:61:0e:cd:
3c:ee:89:4e:63:d8:cb:e8:ad:2b:16:ed:89:6f:ac:49:ff:ba:
28:7b:2f:b1:2d:ab:e7:46:41:9f:60:c0:33:69:c7:0d:ed:8d:
67:a2:0a:c0:0f:a2:6d:b9:c6:0b:88:55:69:94:bd:b7:c9:af:
f2:a1:a6:79:4a:0b:76:56:df:f5:c0:12:3a:76:5e:29:5d:20:
45:02:59:4b:00:fe:af:d7:54:28:02:88:f2:92:1a:d7:b6:c1:
99:c2:16:e8:69:0e:fc:4c:a9:ed:71:16:f7:bb:3a:5c:d0:d4:
89:1a:22:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:00 2025 by rpki-client