Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/1-NCJjOzXRJPJQwtwd7MPQtMRJkk.roa
File: 1-NCJjOzXRJPJQwtwd7MPQtMRJkk.roa (raw, json)
Hash identifier: Nqq3/veMkUJu98HxVV3gdWpp9lWSXmsIMRo08Or2r6g=
Subject key identifier: F8:D0:89:8C:EC:D7:44:93:C9:43:0B:70:77:B3:0F:42:D3:11:26:49
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0190EE59DB7196B68F861FF02DC6E28403C4
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/1-NCJjOzXRJPJQwtwd7MPQtMRJkk.roa
Signing time: Fri 26 Jul 2024 09:23:04 +0000
ROA not before: Fri 26 Jul 2024 09:23:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49304
IP address blocks: 46.3.96.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 08:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ee:59:db:71:96:b6:8f:86:1f:f0:2d:c6:e2:84:03:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 26 09:23:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8d0898cecd74493c9430b7077b30f42d3112649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:94:ea:1b:14:d7:26:cd:f2:bc:48:60:3e:81:
a9:c7:7f:f0:76:55:87:3b:8e:11:a4:a8:ef:c2:d6:
41:26:28:92:4d:d7:ae:40:3f:bc:48:8b:06:49:6a:
d4:68:d5:b0:59:01:5d:ce:48:1d:0f:e5:94:13:d6:
af:58:22:12:5f:22:e1:8c:28:dc:ab:be:80:02:c0:
2b:16:65:86:17:e3:30:a5:4f:66:89:8d:18:d4:29:
f1:73:fd:d1:6d:63:9b:f8:64:ee:51:d4:ef:13:a2:
39:ee:76:3c:2b:b6:d6:fd:6a:b0:c9:fd:03:3a:7f:
98:85:b8:53:75:4d:85:cb:28:0b:46:07:0c:de:8d:
1a:f6:52:56:86:73:5b:3a:be:d9:9f:56:17:0d:c4:
84:6e:c0:17:62:a0:9e:42:8a:5a:60:64:09:0b:0b:
c4:42:52:02:cd:bf:d9:8d:72:2a:cd:5a:37:91:25:
75:e5:6c:d2:27:3b:9f:a6:98:29:e5:06:47:23:66:
fd:9b:9d:83:fa:53:15:26:0a:86:3f:26:d6:fa:ca:
b3:8a:7a:e2:2f:1f:b8:2a:b9:54:0e:6f:7a:ea:1c:
f9:0a:2e:15:27:8e:31:1a:e5:e6:c6:8b:54:10:e5:
71:9d:66:ce:cb:8d:cb:8b:2f:c9:b2:06:19:94:b0:
e4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D0:89:8C:EC:D7:44:93:C9:43:0B:70:77:B3:0F:42:D3:11:26:49
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/1-NCJjOzXRJPJQwtwd7MPQtMRJkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.96.0/20
Signature Algorithm: sha256WithRSAEncryption
98:17:7e:74:29:c7:38:44:fd:05:73:24:c0:7e:3a:d3:6e:5a:
ab:96:3c:03:79:3d:3b:7d:ba:25:fe:8f:a5:4c:58:31:40:af:
6b:35:f7:b6:e3:3f:3c:5f:01:20:43:3b:53:6d:da:0f:73:7f:
12:af:95:24:a4:cd:9e:d1:31:de:7b:de:76:af:04:2c:9c:c2:
1e:20:54:81:dd:15:24:bb:19:5d:8d:b1:ca:2d:90:57:e9:01:
ad:84:45:7a:f4:ae:4c:8c:99:02:98:cb:52:ad:4c:12:4f:fa:
5a:d7:66:ce:55:bb:66:86:19:da:1a:88:f1:c4:f5:f5:48:25:
f8:45:e9:16:26:ec:05:73:d4:fa:2e:cd:58:70:43:5a:10:63:
dd:ef:76:02:84:d1:af:ce:d9:05:00:5a:d0:e9:1e:3e:24:ab:
8c:37:f0:9f:8c:e0:f0:ac:c2:11:29:2f:ef:b9:d4:da:94:03:
f9:c3:93:92:09:4f:95:37:6d:46:52:30:b1:b7:d2:92:06:5f:
fe:d2:16:07:48:2a:3a:9d:a8:42:91:48:90:e8:88:a7:bb:0a:
63:c2:9d:4b:a8:7a:9c:c2:89:42:71:e6:5b:c7:c8:24:57:10:
d7:fa:c2:29:9b:ec:20:08:14:ae:c3:06:f7:8b:16:2d:54:34:
b0:8f:3d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:04 2025 by rpki-client