Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/8iKsOP9hLCw0dAifF5ePamuu558.roa
File: 8iKsOP9hLCw0dAifF5ePamuu558.roa (raw, json)
Hash identifier: GgiqlKSwgVukaPPI6iJM0HDcdMmN7H/no60tKNI+XTo=
Subject key identifier: F2:22:AC:38:FF:61:2C:2C:34:74:08:9F:17:97:8F:6A:6B:AE:E7:9F
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0194604C29AEFC52AC9E46845F0FA9B08B53
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/8iKsOP9hLCw0dAifF5ePamuu558.roa
Signing time: Mon 13 Jan 2025 15:33:11 +0000
ROA not before: Mon 13 Jan 2025 15:33:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207569
IP address blocks: 46.243.1.0/24 maxlen: 24
46.243.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Feb 2025 18:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:60:4c:29:ae:fc:52:ac:9e:46:84:5f:0f:a9:b0:8b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jan 13 15:33:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f222ac38ff612c2c3474089f17978f6a6baee79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e4:cd:0e:46:2c:cc:19:4a:52:02:85:d5:5b:
56:df:d4:c2:68:91:eb:af:d0:21:53:d8:51:3e:45:
6b:45:a6:45:3f:29:80:ac:ee:58:97:b7:94:3c:39:
96:6b:c2:18:9d:2f:d9:6b:23:44:08:cd:7e:f5:05:
db:4e:d6:70:91:cd:b8:3b:9f:2c:12:19:13:b8:63:
58:83:19:62:47:d3:5c:92:4e:92:b8:c5:5c:12:3f:
f5:7e:ce:b4:41:36:d3:5f:c0:35:96:06:1e:e6:52:
b6:e7:04:9a:b1:82:95:ce:de:6a:56:4e:fa:a9:3a:
d3:33:ff:0e:11:7a:91:c8:b3:cf:53:53:07:27:23:
55:64:18:bc:c8:22:67:c9:94:e7:d5:55:71:54:dc:
50:b3:26:1f:bc:bc:e1:f3:4e:82:c2:73:6a:98:90:
a8:68:e3:8d:b8:e8:97:53:3f:06:67:49:2f:a2:2e:
5b:4d:a2:be:6c:d7:f2:32:04:f3:0b:31:1a:5f:c2:
ee:32:84:d0:05:46:0e:07:7c:e3:9a:95:0c:c4:0f:
6f:d4:33:ff:e3:55:4a:4c:0a:73:88:83:2a:d3:c9:
5a:93:b7:11:55:23:0d:6e:6d:97:fd:79:0d:f4:2b:
e0:8a:cb:6f:19:1a:b0:24:06:f9:3b:2f:5b:84:73:
c2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:22:AC:38:FF:61:2C:2C:34:74:08:9F:17:97:8F:6A:6B:AE:E7:9F
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/8iKsOP9hLCw0dAifF5ePamuu558.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.1.0/24
46.243.4.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:7c:ff:16:35:9b:1d:40:fc:31:e7:29:2b:0d:d5:a0:59:85:
ff:49:76:ef:47:2c:6d:23:ff:eb:9e:5e:a1:3c:a4:93:f2:b2:
f3:e9:9e:ba:f0:ca:28:4c:46:b0:0c:47:b2:3d:09:1b:e0:0a:
eb:cf:09:1f:d2:92:29:bc:3e:d7:6e:a0:52:0b:83:9e:25:6b:
35:99:fd:47:b6:b2:b5:be:d0:1c:70:fb:a7:b6:6e:49:fc:5d:
7e:37:10:f1:00:0e:b7:15:d6:3d:8a:53:1a:3d:71:ed:2f:36:
b4:ee:4f:99:66:1d:fa:ab:17:14:99:23:0e:91:05:16:08:51:
2b:99:64:1a:ad:d1:a6:a8:df:d7:92:bd:2b:33:6a:af:43:a0:
f7:4f:3f:bd:e6:d7:43:20:4c:ff:bb:b7:b9:81:f4:63:67:4d:
1c:e8:34:0e:72:9f:62:e9:8c:ad:eb:94:5e:14:61:ee:2f:28:
f1:da:18:cf:f7:db:31:11:a6:c7:9b:e2:3d:c9:68:c3:83:18:
37:76:7d:48:e7:db:c2:59:0f:b4:7b:5c:2d:20:5f:b6:04:96:
6e:dd:29:ee:19:c0:fa:e7:67:74:1c:c0:2d:24:a0:7d:31:1c:
62:e9:6d:dd:39:68:ba:b2:68:96:0f:67:7e:59:fa:9d:f8:3f:
26:50:f4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:27:02 2025 by rpki-client