Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/WDW1jFU2JVDMdtcgn7TS90L1bL0.roa
File: WDW1jFU2JVDMdtcgn7TS90L1bL0.roa (raw, json)
Hash identifier: k7fhNB77eZG1OejFHlQPr21/qydTNB6c/vKqP7dV/Cs=
Subject key identifier: 58:35:B5:8C:55:36:25:50:CC:76:D7:20:9F:B4:D2:F7:42:F5:6C:BD
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019404624E9B453852512614ACCE9B343034
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/WDW1jFU2JVDMdtcgn7TS90L1bL0.roa
Signing time: Thu 26 Dec 2024 19:12:19 +0000
ROA not before: Thu 26 Dec 2024 19:12:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207569
IP address blocks: 46.243.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:04:62:4e:9b:45:38:52:51:26:14:ac:ce:9b:34:30:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Dec 26 19:12:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5835b58c55362550cc76d7209fb4d2f742f56cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5f:df:63:81:70:ef:e3:56:ba:ef:b9:4f:9b:
47:cd:ca:d4:21:fd:a8:f0:a9:51:25:3c:3d:57:1e:
86:27:1a:5f:58:b6:7c:6f:47:1d:c6:8b:69:43:67:
3d:b5:88:a7:08:90:0d:58:62:03:32:e2:a9:7b:bf:
fc:5c:5b:6d:91:ae:ec:c3:0f:fe:a5:fa:53:70:f7:
f7:58:a3:56:5b:d2:21:26:42:63:38:1d:d8:06:c5:
29:0e:00:44:85:5f:75:38:b1:0a:36:1d:bb:3c:b0:
7e:52:3c:c4:1b:83:f6:bc:e6:d5:3d:9a:05:8b:7b:
6c:cd:15:87:22:f0:21:e1:5a:f4:12:7d:ce:b0:20:
93:bb:c3:24:47:9f:0b:31:09:36:33:f2:30:26:4a:
1b:a6:4b:34:d2:ff:cb:f0:0a:8e:77:4e:eb:9a:eb:
69:16:49:93:f0:44:23:a3:02:a8:81:fe:37:35:8b:
e6:98:7a:73:66:3d:85:f4:85:8c:61:ad:7a:37:60:
ef:bd:85:c8:17:fb:14:f5:18:2f:23:a6:2a:61:8e:
fd:0a:7c:23:b8:63:93:c5:3b:68:4e:67:49:a1:83:
90:65:ff:18:0a:52:9e:81:8f:77:1d:6f:bc:82:1a:
a6:9b:c7:5c:e0:74:07:c8:a1:6b:f7:6b:13:23:11:
4c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:35:B5:8C:55:36:25:50:CC:76:D7:20:9F:B4:D2:F7:42:F5:6C:BD
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/WDW1jFU2JVDMdtcgn7TS90L1bL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.1.0/24
Signature Algorithm: sha256WithRSAEncryption
12:94:fb:a7:9c:83:df:8c:6f:fd:47:4b:00:15:f6:2e:67:c0:
c7:b8:a9:f4:6e:8c:f3:cd:22:2a:e2:de:c8:bd:4b:94:d8:fe:
3d:06:fc:26:88:95:91:3b:bf:4c:b9:ed:87:75:d7:2a:45:ab:
1e:b5:1e:24:e5:50:52:48:72:c9:2c:c8:4a:ec:b9:87:9c:45:
df:63:50:92:b6:95:ae:ca:2c:59:37:1b:89:42:0f:0f:4e:c0:
a6:3c:bc:24:1a:0e:aa:78:c2:5c:a4:e4:7c:67:26:f8:25:70:
61:50:69:45:a6:fe:0c:f5:8f:79:8d:b8:56:0b:c1:4c:ef:f1:
cc:ff:a3:ad:bb:fa:f1:db:87:f9:cf:7f:ec:17:20:3d:5b:7f:
97:fc:fd:cd:cb:56:80:fe:d3:a9:29:fc:78:be:28:bd:1c:cb:
84:47:af:12:14:d8:49:ad:fc:99:1a:78:2d:0b:08:29:5c:fb:
b2:a5:d8:f1:66:fd:b9:97:cd:da:46:a2:b1:1c:77:4c:a7:52:
b6:96:fe:81:12:f9:38:5b:c4:08:94:70:01:b3:24:4a:79:ce:
95:34:e1:bf:40:86:45:dd:d3:79:eb:bd:fd:76:7d:9e:3e:9d:
ce:77:50:2e:37:26:e8:98:ac:ca:be:3a:80:02:d0:cb:c6:0c:
49:4d:16:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:37:44 2025 by rpki-client