Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/68O9-rg0UuNz2K9u61fNM_7FBEs.roa
File: 68O9-rg0UuNz2K9u61fNM_7FBEs.roa (raw, json)
Hash identifier: QIpW4DHOenN4QeWoJGCELBdHH0TgQwx98lZSuppiEQc=
Subject key identifier: EB:C3:BD:FA:B8:34:52:E3:73:D8:AF:6E:EB:57:CD:33:FE:C5:04:4B
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0193D9B7D5A97E3D6E933CB284EC95AF593E
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/68O9-rg0UuNz2K9u61fNM_7FBEs.roa
Signing time: Wed 18 Dec 2024 12:22:03 +0000
ROA not before: Wed 18 Dec 2024 12:22:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56630
IP address blocks: 46.243.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d9:b7:d5:a9:7e:3d:6e:93:3c:b2:84:ec:95:af:59:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Dec 18 12:22:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebc3bdfab83452e373d8af6eeb57cd33fec5044b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:61:59:2f:1c:80:29:df:9e:ac:8e:3a:67:
5c:45:f5:7c:47:91:9c:a5:6c:b0:5b:76:ff:37:51:
fb:a5:ea:15:a3:cd:73:ee:e0:ec:df:ae:0e:14:23:
85:e8:10:58:47:13:24:77:42:b8:02:77:66:e7:67:
ab:28:49:6c:de:68:0e:c6:bf:34:df:a9:a2:82:20:
14:0a:00:02:6a:4e:6e:80:d6:58:e3:a3:ec:61:92:
5c:c4:b6:36:a8:13:71:94:28:99:16:fc:de:34:89:
e2:52:67:ae:88:e8:13:c2:ce:16:30:17:d8:7e:3e:
f9:95:ed:90:98:0c:3e:b9:e8:cc:49:40:14:47:dc:
c0:e3:47:9f:70:86:ae:fd:a7:78:cd:c0:18:04:72:
22:fe:a9:88:87:11:f8:86:83:1d:93:83:8d:37:42:
f5:68:64:ca:b4:16:02:ae:80:5e:f6:ec:e9:fb:83:
2b:32:ef:8f:4f:52:e1:41:d8:20:69:6d:43:5f:6d:
4d:b5:f0:38:1f:b2:e2:68:ac:93:ec:1b:c6:24:14:
45:bb:89:3b:8c:aa:94:40:b2:1e:4b:73:78:e4:26:
f4:c0:49:f2:80:9d:7b:f5:49:9e:a5:30:50:36:20:
b5:51:cc:61:3c:93:7d:73:37:69:c4:de:b3:2e:82:
ef:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C3:BD:FA:B8:34:52:E3:73:D8:AF:6E:EB:57:CD:33:FE:C5:04:4B
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/68O9-rg0UuNz2K9u61fNM_7FBEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:d8:5b:42:62:c9:32:47:d7:9f:3b:33:b6:41:9f:8e:3c:5b:
8e:0d:db:52:a1:73:e2:02:85:79:35:56:7b:a1:87:75:c7:89:
93:b9:84:9c:fb:52:4e:60:54:d9:db:14:94:4a:5f:2f:9f:78:
82:71:e1:8d:b6:d5:9c:68:84:43:db:9e:d6:c5:01:59:eb:5d:
90:5a:f2:df:4a:98:19:27:14:b1:ae:0d:98:07:60:d2:4f:27:
5b:cd:70:25:64:0b:43:69:ce:c0:4e:1d:51:a7:bc:3c:9d:16:
63:5f:50:19:bc:22:00:02:0d:44:41:ec:c0:63:02:f8:45:67:
37:e1:2a:28:34:bb:9f:a8:3c:d5:54:fb:61:12:75:a0:dc:c7:
6a:ae:06:6e:6b:83:0e:5e:8b:5b:f3:0b:54:4d:9d:21:d5:e2:
5e:a5:05:47:f7:1d:21:2f:fc:bf:9c:42:82:41:14:a5:e0:91:
ba:8e:36:f8:4a:d3:c7:2d:58:f6:be:d4:8c:8f:3a:db:9a:b7:
a8:76:76:d1:d1:f5:14:df:7d:29:e0:23:e3:aa:d6:2d:93:a3:
a4:e7:37:c1:b8:ba:26:5b:0f:56:ae:4e:df:38:21:92:b3:2e:
df:3a:ae:03:fb:26:38:68:3d:c6:7d:af:fa:5f:63:2f:18:4e:
26:47:a1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:27:26 2025 by rpki-client