Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/56TN7JwulF7xoYmyK84-snzrGQE.roa
File: 56TN7JwulF7xoYmyK84-snzrGQE.roa (raw, json)
Hash identifier: X6+sp52Ae2fQSmPgM4fB/s5PRb5BZHA5l6oLrES8zDU=
Subject key identifier: E7:A4:CD:EC:9C:2E:94:5E:F1:A1:89:B2:2B:CE:3E:B2:7C:EB:19:01
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 01915ABB5652CA105A11A6BAE7DA00226F2F
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/56TN7JwulF7xoYmyK84-snzrGQE.roa
Signing time: Fri 16 Aug 2024 10:28:32 +0000
ROA not before: Fri 16 Aug 2024 10:28:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212396
IP address blocks: 46.244.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:52:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5a:bb:56:52:ca:10:5a:11:a6:ba:e7:da:00:22:6f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Aug 16 10:28:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7a4cdec9c2e945ef1a189b22bce3eb27ceb1901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:89:d9:97:bf:c4:be:1f:01:27:fa:e2:91:
d1:da:eb:33:30:72:5c:cd:bc:28:66:0e:e3:74:11:
05:ca:a6:d6:40:38:73:64:29:c2:21:3f:3d:d5:86:
f7:9f:01:78:32:21:4d:95:4f:92:79:0c:dd:95:c3:
26:8c:c6:40:ce:96:f9:e9:e0:8d:c0:56:0f:37:e7:
1e:21:bd:c5:68:9a:2a:cd:c2:df:ce:87:b1:40:cb:
91:08:cd:c2:98:2e:cb:2e:ba:10:5c:82:2d:38:9e:
53:37:0d:98:3c:43:63:d4:ba:95:b6:38:73:78:97:
bd:ef:d4:1f:af:e1:c9:c6:8b:00:f0:f3:8b:2e:4d:
a0:40:40:a6:e4:b5:ca:b8:d2:65:71:5a:6c:db:91:
e5:a2:5e:38:27:3e:4b:bb:b9:02:9e:dc:ff:45:f8:
72:0b:cf:db:e4:6b:4d:46:df:08:ee:00:05:8a:65:
36:a9:d8:86:b6:f0:24:26:68:d7:2b:c5:37:15:34:
c7:1e:30:e5:09:1d:b0:23:44:74:cb:41:2c:15:6c:
57:50:ed:4e:d0:30:b4:a4:fe:6b:b7:01:f8:28:8b:
ee:c1:13:3e:12:f7:31:78:65:8b:f8:01:60:36:99:
e2:82:0c:32:de:78:03:31:cb:54:fc:f1:92:b9:e7:
24:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A4:CD:EC:9C:2E:94:5E:F1:A1:89:B2:2B:CE:3E:B2:7C:EB:19:01
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/56TN7JwulF7xoYmyK84-snzrGQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.96.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:0e:18:87:8d:a7:69:cc:70:bb:67:9b:54:56:6c:90:d4:09:
54:f6:ff:b8:75:01:92:ad:5f:bb:af:39:04:25:00:0a:34:21:
8f:60:87:b1:4d:36:71:68:be:6f:98:47:b6:db:e1:6e:69:f2:
eb:fd:dd:9b:04:36:a4:26:3f:af:be:ff:34:7a:5d:3d:67:66:
8a:77:ec:de:0c:70:ab:8a:c8:70:1d:ef:2d:b6:b0:47:fb:b0:
92:8b:ac:aa:0e:30:0f:13:1d:05:07:86:1d:12:14:c4:46:ed:
cd:e4:9a:8f:80:12:cf:7f:4b:fc:6e:0f:5a:d7:b8:b7:3b:09:
85:eb:e9:f3:61:8c:87:80:c1:c2:0f:b6:e1:0d:c4:53:55:4d:
48:de:fa:16:ac:08:2f:5b:5d:27:62:60:20:2f:a8:fc:8f:0d:
20:ea:f1:d2:69:7b:ee:7a:86:27:10:b6:ca:54:3b:d0:cd:5b:
76:76:0c:bd:0a:2e:75:79:6a:ca:a5:bf:df:01:9b:d5:4f:b8:
18:38:ca:f9:2b:a3:6f:9f:31:4a:f0:d4:4c:a5:0a:15:95:97:
5b:25:84:48:78:91:94:cd:6d:91:86:e1:17:f6:9b:2d:3b:1d:
75:01:50:f5:2e:40:80:3b:52:04:2a:85:87:4b:bc:34:93:2f:
ed:29:1c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:27:17 2025 by rpki-client