Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/kRUlQ3PxD9xHefoUCKJGnelfLNM.roa
File: kRUlQ3PxD9xHefoUCKJGnelfLNM.roa (raw, json)
Hash identifier: 1x0ByC0bCK7bWScNjhxj4z0WhGh/Pr/KIHg3Bf4S3o0=
Subject key identifier: 91:15:25:43:73:F1:0F:DC:47:79:FA:14:08:A2:46:9D:E9:5F:2C:D3
Certificate issuer: /CN=1d5cb098cf6f7fb68a181aecda8ea38e64c5ac9d
Certificate serial: 019567781D3BED61FD60BF328E3C40DF3960
Authority key identifier: 1D:5C:B0:98:CF:6F:7F:B6:8A:18:1A:EC:DA:8E:A3:8E:64:C5:AC:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/kRUlQ3PxD9xHefoUCKJGnelfLNM.roa
Signing time: Wed 05 Mar 2025 18:01:19 +0000
ROA not before: Wed 05 Mar 2025 18:01:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51540
IP address blocks: 46.31.144.0/24 maxlen: 24
46.31.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Mar 2025 20:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:67:78:1d:3b:ed:61:fd:60:bf:32:8e:3c:40:df:39:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d5cb098cf6f7fb68a181aecda8ea38e64c5ac9d
Validity
Not Before: Mar 5 18:01:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9115254373f10fdc4779fa1408a2469de95f2cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:82:31:71:dc:2b:65:99:7c:0e:0e:4c:db:9f:
4d:5b:ea:fa:92:77:81:69:6a:d2:37:03:4a:cc:1e:
83:98:24:1f:db:53:f0:7c:06:5a:df:18:4e:03:3f:
f1:ab:1b:7a:5a:ea:de:66:80:b0:85:c0:22:10:57:
ff:39:6b:da:2d:d5:d2:68:ec:7a:0a:bc:3d:28:6c:
84:19:e4:bf:dd:2b:e9:56:62:a7:7e:4c:76:95:2f:
78:77:18:c3:80:35:ab:fb:4c:03:4b:a1:85:c2:df:
9e:b0:18:60:33:dc:6c:77:3c:41:59:7f:40:53:3e:
fb:06:f7:0c:6e:0d:10:ca:d2:b1:c1:52:20:3c:0d:
d9:87:ed:66:e0:26:0b:2a:7f:41:a9:04:8e:92:42:
00:3d:8d:a6:aa:44:41:c1:c7:bd:9a:ff:a1:43:62:
46:fe:a1:41:ef:54:61:bf:97:14:49:0c:e1:64:e8:
de:a0:f9:3c:35:76:7f:9b:26:2a:5b:b2:c0:87:d6:
8a:94:3e:63:fe:7b:0c:80:66:b3:fe:30:dc:21:b5:
81:cb:11:5a:0c:cb:30:9d:d9:18:31:40:8f:09:33:
6c:18:6c:dd:90:e5:06:13:41:cd:6c:31:83:3a:88:
5e:13:ed:da:35:d9:c7:ae:8f:e6:66:8e:91:53:11:
d1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:15:25:43:73:F1:0F:DC:47:79:FA:14:08:A2:46:9D:E9:5F:2C:D3
X509v3 Authority Key Identifier:
keyid:1D:5C:B0:98:CF:6F:7F:B6:8A:18:1A:EC:DA:8E:A3:8E:64:C5:AC:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/kRUlQ3PxD9xHefoUCKJGnelfLNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.144.0/24
46.31.150.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:de:c2:5d:65:ee:06:3d:85:92:fb:13:0e:f5:1e:ef:57:cd:
6a:1b:f5:a6:e8:bd:8d:a2:78:99:8b:64:1e:b2:1f:0e:10:5b:
39:e6:62:f7:b6:cf:fc:1b:0c:2c:0d:b2:fd:c9:91:c9:c5:93:
f1:a8:81:11:c2:69:b2:1e:cd:d3:e2:a8:82:0f:bb:97:e6:c9:
a0:50:a6:18:73:f5:bf:ad:13:72:db:2e:7c:05:83:1d:8c:aa:
42:71:1c:fd:81:04:a6:a6:12:5e:2d:c9:b6:cc:e2:99:9d:f1:
b7:05:2b:a0:b2:fd:be:39:04:2d:4c:cf:5a:f9:e9:e9:14:6b:
ea:a3:57:bb:d8:63:37:73:90:83:f6:91:ee:27:f3:06:2c:87:
59:f3:a4:e8:b5:a7:6f:27:c1:a6:60:93:8e:31:4e:3e:93:83:
43:b4:ca:b4:8e:a9:ed:26:67:af:fd:79:c9:56:8a:0c:68:01:
98:5e:18:01:09:98:6b:b2:22:40:33:40:90:e8:3c:ef:1c:a8:
9a:5e:4c:a0:a1:cc:9c:65:9a:07:33:88:4a:c1:08:2c:e3:29:
f9:d4:d5:40:13:2e:e1:ae:14:ea:67:1e:f3:a2:97:eb:87:a0:
f4:0a:ac:05:eb:56:3f:0d:0b:d6:9c:0a:09:78:7f:4c:13:a2:
05:00:21:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:17:42 2025 by rpki-client