Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/3msj4c100GTVW57WjC2b5XW7ZEU.roa
File: 3msj4c100GTVW57WjC2b5XW7ZEU.roa (raw, json)
Hash identifier: HX9Lxz8NC/YeNpjGZoeYGWOpEsjvYPqhfXTVHh/IIkQ=
Subject key identifier: DE:6B:23:E1:CD:74:D0:64:D5:5B:9E:D6:8C:2D:9B:E5:75:BB:64:45
Certificate issuer: /CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Certificate serial: 018CC3494E0FEE02920A09C0711CC59A869F
Authority key identifier: 04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/3msj4c100GTVW57WjC2b5XW7ZEU.roa
Signing time: Mon 01 Jan 2024 04:30:10 +0000
ROA not before: Mon 01 Jan 2024 04:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12931
IP address blocks: 46.35.48.0/20 maxlen: 32
213.182.0.0/19 maxlen: 32
2001:14e0::/32 maxlen: 128
Validation: Failed, certificate revoked on Wed 03 Jul 2024 19:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:4e:0f:ee:02:92:0a:09:c0:71:1c:c5:9a:86:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e50240af40eb2ad60fc3078ac33fc5355d4416
Validity
Not Before: Jan 1 04:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de6b23e1cd74d064d55b9ed68c2d9be575bb6445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:fc:ff:af:f9:89:96:e5:13:a6:b2:4e:ad:
79:8f:54:42:9d:df:2c:d6:07:82:bc:b6:36:3d:97:
a8:19:fc:ed:4e:a8:16:dd:3f:bb:bd:b9:e7:a3:6d:
2c:1e:c8:18:cf:4f:22:62:07:7f:50:98:5d:6b:f8:
6d:c2:e1:f4:4e:f5:18:1b:00:1c:aa:43:f8:90:e4:
cd:61:9c:bd:1e:be:56:f0:4f:f5:6d:93:6d:d6:fc:
0a:a1:93:bb:7b:93:8c:fc:cf:ff:f2:0a:d9:db:90:
48:31:d7:6a:8b:a8:9d:7a:1b:8f:fc:12:42:17:d0:
7d:d7:12:ca:b6:1f:56:9d:ab:cc:7d:9d:61:3a:2e:
9a:eb:e4:d8:9a:b2:1f:eb:a3:f6:23:ca:36:c9:de:
6f:3e:32:ba:f6:79:f2:20:14:31:57:b3:9e:97:89:
18:f5:92:c1:18:48:38:b8:e1:80:71:ae:8b:ca:d0:
e0:db:dc:1f:25:cd:c2:bc:7a:ae:3a:27:c3:48:b3:
bc:8e:99:93:a6:ad:ac:01:64:df:c7:d5:a0:97:f7:
a3:39:e6:53:9e:00:5e:ec:61:76:3d:39:cc:e0:fa:
3e:a2:0e:02:5e:50:b3:7a:88:73:e5:b4:11:39:4d:
d8:a0:e5:c4:fb:69:e9:c3:3f:b1:bc:1b:d1:a6:68:
f1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6B:23:E1:CD:74:D0:64:D5:5B:9E:D6:8C:2D:9B:E5:75:BB:64:45
X509v3 Authority Key Identifier:
keyid:04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/3msj4c100GTVW57WjC2b5XW7ZEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.48.0/20
213.182.0.0/19
IPv6:
2001:14e0::/32
Signature Algorithm: sha256WithRSAEncryption
7a:c9:cd:f1:e9:24:32:42:55:bb:c6:2c:2d:59:0d:6e:1d:6d:
ff:b9:be:cd:f7:a3:64:f3:fa:4d:d8:ce:95:ca:e5:7a:3c:3d:
47:a7:72:e8:b6:48:83:6c:12:69:4b:19:bb:d3:37:c1:e7:90:
f9:c6:f5:76:ab:e5:39:cf:77:31:6e:df:96:91:4a:62:d7:83:
66:53:d7:11:a0:5b:06:57:01:96:e8:bd:01:6d:46:3c:90:a4:
9d:b1:ac:be:10:eb:da:1a:b2:99:fc:4c:b8:5b:fd:3c:9c:64:
92:a9:31:cd:f7:b3:4a:2e:6f:66:08:3b:d5:18:4f:01:b8:a4:
b7:7d:93:d6:56:5a:de:20:a5:1e:53:d2:b4:33:28:00:9e:c2:
c1:2d:45:3f:30:c0:d8:88:86:9b:13:96:c6:58:1e:1f:35:9e:
1b:6d:a4:83:07:b0:0f:f2:86:92:be:a1:3d:06:1e:c1:13:1c:
57:d5:cc:ba:ae:b1:fa:99:ae:dc:1c:8a:83:4c:27:ee:a6:b3:
79:3f:d4:ca:c8:30:ae:d3:ed:b1:27:39:4b:23:09:9e:96:e3:
3b:c8:86:a5:60:da:83:f2:42:d1:75:d9:0a:0b:7f:99:6e:22:
64:8a:67:26:8b:10:1d:30:14:d7:e1:69:ac:ca:2a:3c:d1:38:
64:46:77:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:39 2025 by rpki-client