Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/EvFueZgXc4TFksyBhstkgpn5DI4.roa
File: EvFueZgXc4TFksyBhstkgpn5DI4.roa (raw, json)
Hash identifier: 7pW3Vnq/RuyVRk5XWdAe0hTo9WL9y9XnDaZh0iF6FpQ=
Subject key identifier: 12:F1:6E:79:98:17:73:84:C5:92:CC:81:86:CB:64:82:99:F9:0C:8E
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018F1903D6F5C1AF9D0CAC171D87166E876D
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/EvFueZgXc4TFksyBhstkgpn5DI4.roa
Signing time: Fri 26 Apr 2024 06:07:13 +0000
ROA not before: Fri 26 Apr 2024 06:07:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54339
IP address blocks: 46.34.38.0/24 maxlen: 24
46.34.42.0/23 maxlen: 23
46.34.47.0/24 maxlen: 24
46.34.49.0/24 maxlen: 24
46.34.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:19:03:d6:f5:c1:af:9d:0c:ac:17:1d:87:16:6e:87:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Apr 26 06:07:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=12f16e7998177384c592cc8186cb648299f90c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:88:9b:ca:2a:20:2d:6d:a2:8c:fd:91:ee:eb:
56:8a:f9:11:cc:06:a0:43:b4:e2:6f:a1:38:10:81:
19:46:5b:11:0b:f0:79:56:34:3f:6d:d6:ee:6e:52:
bf:5e:47:f1:8f:21:34:42:4b:59:b5:88:16:f7:76:
7f:f6:11:22:0d:09:1c:93:30:4e:5f:2a:82:be:02:
d9:51:90:6c:7e:ae:22:9c:38:50:c6:11:f9:42:33:
4e:6e:d0:ad:88:55:6e:7b:ca:57:b8:c5:38:2c:a9:
b4:77:5e:81:dd:62:bd:89:99:8f:be:12:2c:5a:7b:
8d:17:96:f7:bb:16:a2:ed:96:29:38:af:d3:27:cf:
6c:c6:3a:64:d3:8f:e4:b1:a4:53:bc:37:cf:ea:41:
9b:30:f9:60:24:95:df:f8:76:24:5c:3e:bc:29:34:
22:25:9e:1e:93:36:2b:92:02:50:9a:1e:76:d1:05:
7a:3c:c6:e1:79:31:16:76:57:04:ac:53:20:53:8f:
41:6c:30:6b:d5:1f:fd:5f:c0:4a:3f:18:70:00:38:
94:4d:7f:8d:26:c8:50:45:e6:1c:16:7d:2e:9b:ba:
4f:2a:d5:ab:05:20:50:8f:c8:c4:83:0c:53:2d:d6:
03:b0:5d:b5:99:a2:d5:69:fe:31:8e:70:84:e1:fb:
b6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F1:6E:79:98:17:73:84:C5:92:CC:81:86:CB:64:82:99:F9:0C:8E
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/EvFueZgXc4TFksyBhstkgpn5DI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.38.0/24
46.34.42.0/23
46.34.47.0/24
46.34.49.0/24
46.34.55.0/24
Signature Algorithm: sha256WithRSAEncryption
41:5d:22:07:1b:52:d1:2e:1f:7c:32:00:13:94:53:7a:6f:13:
8e:33:d3:61:65:2d:83:72:50:a1:fd:40:04:70:c5:9e:60:8f:
b6:91:00:f3:ca:f8:97:c8:8d:e8:49:c5:d8:35:5a:eb:ee:7f:
47:c8:01:12:61:5b:1a:02:fa:39:3f:d3:bd:08:f9:c0:7a:32:
ee:d0:3a:39:72:77:27:92:09:a6:e0:2a:ad:22:ec:84:d4:90:
24:3e:71:bd:be:be:57:8d:56:5b:f2:58:7d:80:f3:fc:9e:5e:
59:ef:1a:60:12:70:4f:7b:e0:ab:72:4f:77:8c:f9:1a:c4:64:
40:6f:e5:07:b0:7e:ce:19:26:0e:e2:6f:4e:97:68:8f:8c:1b:
42:fe:c8:2b:76:a0:a4:d4:f5:0d:9f:7d:99:f0:42:63:b7:d4:
0e:21:71:28:de:c2:85:3f:77:e3:a6:d5:50:14:8e:d5:19:39:
68:d5:48:39:6e:e0:02:e8:bc:35:b6:c6:27:7a:da:38:19:57:
8c:05:12:88:85:43:bc:0b:e3:f2:98:d6:92:e4:ec:f4:e1:24:
92:4a:82:da:4d:14:fc:13:34:96:e8:23:71:e4:9a:2d:7b:24:
96:ca:60:6e:59:f8:db:9e:e6:9f:b0:6b:4d:e6:73:d6:f0:28:
c2:6c:5f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:22 2025 by rpki-client