Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1-BTi0putCKbhrVtRN_JxfeXciJk.roa
File: 1-BTi0putCKbhrVtRN_JxfeXciJk.roa (raw, json)
Hash identifier: s8V+4EtNdaDbh4Ouw5Jf6izyIuTcZgr8QiFybes7I2M=
Subject key identifier: F8:14:E2:D2:9B:AD:08:A6:E1:AD:5B:51:37:F2:71:7D:E5:DC:88:99
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018CC801C33231088A2B733343CB494836B9
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1-BTi0putCKbhrVtRN_JxfeXciJk.roa
Signing time: Tue 02 Jan 2024 02:30:07 +0000
ROA not before: Tue 02 Jan 2024 02:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7922
IP address blocks: 176.46.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 21:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:c3:32:31:08:8a:2b:73:33:43:cb:49:48:36:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 2 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f814e2d29bad08a6e1ad5b5137f2717de5dc8899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5e:85:f2:09:ba:ba:ce:3f:76:c1:9d:07:af:
f5:21:0b:e2:9f:ab:5d:98:52:97:f2:bc:12:17:c9:
1e:e0:74:1c:e3:f3:51:04:f7:29:f3:2f:15:dd:08:
3b:11:f4:b8:fe:21:d1:c9:0a:fd:ae:85:0e:ac:ae:
bb:6b:aa:94:6b:33:08:a3:5c:42:09:a5:46:7a:50:
ec:5e:a4:22:b9:71:64:38:b5:62:3d:39:40:93:fd:
42:b5:78:83:f8:16:55:64:ad:b1:db:7e:51:df:39:
25:df:c1:8f:ed:23:c1:ef:54:ca:95:e7:38:d0:3a:
fc:12:4f:1e:02:ba:fe:f3:14:34:a7:ef:bf:e2:db:
23:d0:20:4c:8b:d0:b1:96:b7:7d:bc:dc:78:8b:28:
29:4e:2e:55:9e:7e:94:89:c3:14:77:ac:ff:75:80:
22:cb:ea:1b:3e:48:e3:a7:16:44:fa:8a:b6:d8:2e:
54:00:f5:0c:b0:b6:03:db:89:4a:39:32:af:e3:58:
c8:95:6e:e2:9f:a4:b9:81:c1:9b:97:08:a2:85:aa:
78:fb:a2:8b:e3:d3:c0:a8:05:71:eb:c6:f0:f2:49:
31:ac:98:89:7f:88:8c:8a:6c:5f:23:52:9c:c7:c0:
c8:ca:b8:81:44:a1:59:84:56:f2:dc:73:e1:76:3d:
0e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:14:E2:D2:9B:AD:08:A6:E1:AD:5B:51:37:F2:71:7D:E5:DC:88:99
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1-BTi0putCKbhrVtRN_JxfeXciJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.46.143.0/24
Signature Algorithm: sha256WithRSAEncryption
68:37:96:8c:15:e8:f4:e1:90:15:05:5d:fd:7d:69:80:bd:14:
0d:4e:8b:18:d0:0d:9c:17:9c:35:f8:74:46:72:3a:e9:d4:be:
fb:45:98:c0:60:06:c7:4b:63:80:78:8b:c0:e9:c2:68:61:fd:
cd:a1:af:1d:b5:2e:ed:ba:0c:8f:a5:30:2a:7e:a9:af:e3:4f:
a3:36:9e:e5:4f:bf:e9:a1:36:48:a5:07:51:9d:e6:a1:31:2f:
85:53:c3:35:db:49:e4:2a:0d:5a:a3:29:83:2a:4a:37:74:87:
fa:15:9a:84:6f:b5:81:c3:57:fc:e9:67:c9:e9:6e:60:b9:02:
f0:bf:b3:ef:7d:bf:c3:1a:df:c7:15:87:a6:ed:9e:a8:0e:56:
f8:67:cc:7b:05:0e:1f:36:bc:56:26:8d:19:d9:f1:38:19:2e:
df:1a:cc:33:66:29:e9:0b:5b:31:22:2f:55:88:ee:b8:cd:a8:
d4:4f:e1:2d:51:5c:fa:ff:f6:db:04:19:e7:16:c4:9a:0c:7b:
21:0e:ec:3d:18:2e:31:85:ac:e3:9e:3a:7d:ea:9f:57:99:03:
3b:3e:0c:2f:b5:3b:aa:8d:3b:34:de:a0:4f:73:96:cf:79:f9:
91:6e:78:c6:c4:cb:ea:47:09:ff:be:7c:a4:5a:81:51:7b:53:
06:2d:5f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:56 2025 by rpki-client