Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/RGcOS6RZnoKyzpG4czTmfn0ZNwY.roa
File: RGcOS6RZnoKyzpG4czTmfn0ZNwY.roa (raw, json)
Hash identifier: ky8gmNTrkkRHS9ETs5+BFabAoyD5pK/t39WmKeE1WqA=
Subject key identifier: 44:67:0E:4B:A4:59:9E:82:B2:CE:91:B8:73:34:E6:7E:7D:19:37:06
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 018CCA99A0B458356E309B42FBA51106ACBC
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/RGcOS6RZnoKyzpG4czTmfn0ZNwY.roa
Signing time: Tue 02 Jan 2024 14:35:14 +0000
ROA not before: Tue 02 Jan 2024 14:35:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206830
IP address blocks: 46.24.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:a0:b4:58:35:6e:30:9b:42:fb:a5:11:06:ac:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 2 14:35:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44670e4ba4599e82b2ce91b87334e67e7d193706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:19:ae:2a:56:9a:ea:21:3b:de:49:e5:31:25:
93:4f:e6:d1:f1:ba:3a:45:8f:46:ef:00:0e:09:01:
4f:1e:02:38:6b:a3:94:e6:88:92:5c:9b:67:b3:5b:
af:d4:fb:ca:8c:68:27:f5:7b:0c:d9:e5:14:46:75:
d0:e5:96:bf:27:6e:e3:f4:ba:58:c1:dd:9b:db:b4:
61:c2:99:61:d4:84:6d:88:19:74:c3:b2:e8:63:80:
b4:52:11:13:b2:08:0a:01:fa:70:42:85:fd:e5:4c:
d1:80:f4:1e:9a:e0:eb:6e:7c:77:82:8f:61:4e:63:
7e:ef:89:c8:57:22:35:53:24:1b:6e:c1:f5:66:8d:
13:c5:40:43:5e:48:46:cb:35:e0:63:67:45:25:19:
ed:09:8e:a6:5a:86:1d:d8:93:50:77:ff:c3:db:f1:
c0:95:d5:41:e5:d8:a9:0d:7e:2f:e6:47:81:a9:04:
61:c6:27:e4:3f:f5:b3:03:f7:6c:22:42:d1:7e:5e:
9f:78:a6:d3:e6:d2:d7:e5:85:21:62:42:82:30:26:
04:21:af:8a:77:78:f3:52:d8:c2:1a:58:59:d6:c2:
1d:20:7d:10:d9:d5:93:26:cd:87:7b:68:3d:c1:23:
96:55:9f:08:4b:47:d5:fe:d9:1e:d1:14:14:73:81:
7d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:67:0E:4B:A4:59:9E:82:B2:CE:91:B8:73:34:E6:7E:7D:19:37:06
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/RGcOS6RZnoKyzpG4czTmfn0ZNwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.24.148.0/24
Signature Algorithm: sha256WithRSAEncryption
85:be:ff:1d:54:4f:49:a8:f1:b0:90:05:11:87:a0:50:c3:eb:
87:3b:b7:2a:5f:90:a3:6b:5f:17:87:b4:34:95:8c:7d:d3:20:
30:16:d3:20:4e:8d:6a:66:e5:df:20:ad:5a:9a:83:09:09:27:
80:cd:2c:af:f4:5f:fd:c2:ea:f3:16:0b:b3:37:8c:cf:70:e6:
52:95:31:61:ae:d5:be:de:98:2a:b4:2d:08:eb:44:32:6e:9b:
ef:3a:41:22:c0:59:72:0e:7a:29:16:31:6b:81:37:8e:7f:b8:
a3:50:b6:4b:92:cf:3b:b8:30:10:75:65:82:c4:35:86:3a:7d:
ad:88:95:6d:44:e1:77:05:29:8e:79:45:c8:80:65:a7:4f:e0:
b3:18:7d:9a:58:e5:f2:15:4f:15:5a:58:78:b9:58:7c:81:37:
e0:b7:11:98:12:30:fa:ee:e8:82:5e:21:f2:e3:a7:be:a8:97:
e5:fa:a5:22:08:f0:72:97:ac:9b:68:2a:b1:e4:b1:a4:60:85:
d9:0f:d3:e2:c0:7c:9b:48:dc:97:67:ac:8e:3e:ac:5d:a1:2a:
a2:07:ea:3f:90:46:ba:4f:f8:11:61:08:37:aa:0b:d2:89:50:
aa:64:f6:fc:d5:7a:ad:49:89:fd:70:1c:ab:62:c7:41:db:b9:
65:da:34:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:57 2025 by rpki-client