Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/coF8JTShTNm7zztqwcLTbsV9ptc.roa
File: coF8JTShTNm7zztqwcLTbsV9ptc.roa (raw, json)
Hash identifier: mXRLCgf/CqcT4RrzvowpZA8hNnFcP3nLbKzrR2bTBbc=
Subject key identifier: 72:81:7C:25:34:A1:4C:D9:BB:CF:3B:6A:C1:C2:D3:6E:C5:7D:A6:D7
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 01910D7C6FE15AAC81C20D9369F0F4F8B1D0
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/coF8JTShTNm7zztqwcLTbsV9ptc.roa
Signing time: Thu 01 Aug 2024 10:29:04 +0000
ROA not before: Thu 01 Aug 2024 10:29:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48753
IP address blocks: 46.253.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Aug 2024 14:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0d:7c:6f:e1:5a:ac:81:c2:0d:93:69:f0:f4:f8:b1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: Aug 1 10:29:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72817c2534a14cd9bbcf3b6ac1c2d36ec57da6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:2f:da:ac:f6:45:48:36:e9:47:88:22:44:
91:af:62:47:d9:23:44:bd:27:ff:3c:8b:66:30:50:
ba:8d:56:f0:50:d1:e2:15:ef:2d:29:34:dc:2b:e1:
d0:bd:5c:43:cb:83:2e:74:de:70:ef:d3:34:ee:62:
23:0f:47:83:8d:e8:31:30:dd:b0:ac:79:95:6b:21:
8a:d5:9b:b3:ca:0d:54:7f:d7:fb:03:f9:61:94:8d:
e1:29:6b:a0:b7:7b:f6:67:66:fb:5e:03:ea:84:1e:
4b:3e:5f:3d:cf:db:c3:ac:c4:e0:04:bb:1c:86:77:
3f:93:39:a0:7a:5d:7a:26:c6:24:a8:ba:0a:75:fd:
78:8c:06:5f:47:4f:b6:6e:52:7a:69:7c:89:92:2e:
5f:fc:f0:de:9b:5b:c5:10:cc:04:dc:c0:dc:c8:1f:
3c:94:72:96:47:f9:97:ec:b6:d8:06:21:83:10:98:
34:8f:f3:be:34:51:39:65:09:10:a5:cf:c0:f5:df:
a1:0d:c2:a3:e3:74:8a:eb:21:d4:95:6a:b5:17:fa:
91:cf:16:d8:40:c0:5d:85:8c:ad:32:03:a4:de:b7:
63:ab:4d:93:10:25:4e:d5:f0:da:1c:d5:58:d6:ec:
ad:08:c3:0f:5b:69:46:75:80:87:6d:73:f8:03:88:
25:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:81:7C:25:34:A1:4C:D9:BB:CF:3B:6A:C1:C2:D3:6E:C5:7D:A6:D7
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/coF8JTShTNm7zztqwcLTbsV9ptc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.3.0/24
Signature Algorithm: sha256WithRSAEncryption
63:19:ff:d6:92:4f:cb:35:25:e8:19:af:d2:16:0f:65:11:48:
6c:9a:5d:66:75:82:a3:49:f6:7b:b5:e7:70:fd:b5:3a:73:e0:
83:5c:cf:ad:99:0d:8c:a8:53:56:24:b7:d4:36:4e:1c:e0:2b:
1e:34:37:e9:a0:d5:9e:06:f7:86:2e:7d:8b:0c:72:8b:23:48:
20:6c:3b:2d:e6:df:6c:4e:0d:73:4c:aa:42:c5:86:53:cf:b6:
9c:4b:52:f8:83:89:cd:0d:be:88:60:73:9a:25:db:22:e8:d0:
a3:4c:46:32:c2:2a:c4:fe:c7:39:3e:d1:71:f7:b4:3a:b7:42:
82:73:47:65:27:f6:58:21:3b:2c:08:01:37:a9:70:78:b2:a8:
3a:e4:53:0d:c1:f1:45:09:04:03:3e:2c:36:3e:fe:2a:cb:c1:
14:d3:bf:c0:73:ce:09:6d:6f:c8:62:8d:96:c8:47:56:95:3f:
fd:71:9b:03:b8:16:4c:69:ab:80:01:2d:d8:2f:16:44:9a:a8:
3b:7f:a1:be:ed:1c:be:1f:33:78:c1:eb:6b:69:f1:28:d8:45:
18:0a:93:43:f5:ce:0c:48:65:bd:19:bc:a3:28:f8:30:f4:ee:
a3:a5:75:a6:0b:25:f2:4e:82:8d:60:c5:4f:77:3d:be:1c:2b:
78:79:bf:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZENfG/hWqyBwg2TafD0+LHQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MmQ0Y2VjNzgzMzA1OTIzZTM0OTdlZDg4NGYxYzQ0NWI0
ZTc4ZmIwHhcNMjQwODAxMTAyOTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjgxN2MyNTM0YTE0Y2Q5YmJjZjNiNmFjMWMyZDM2ZWM1N2RhNmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudYv2qz2RUg26UeIIkSRr2JH2SNE
vSf/PItmMFC6jVbwUNHiFe8tKTTcK+HQvVxDy4MudN5w79M07mIjD0eDjegxMN2w
rHmVayGK1Zuzyg1Uf9f7A/lhlI3hKWugt3v2Z2b7XgPqhB5LPl89z9vDrMTgBLsc
hnc/kzmgel16JsYkqLoKdf14jAZfR0+2blJ6aXyJki5f/PDem1vFEMwE3MDcyB88
lHKWR/mX7LbYBiGDEJg0j/O+NFE5ZQkQpc/A9d+hDcKj43SK6yHUlWq1F/qRzxbY
QMBdhYytMgOk3rdjq02TECVO1fDaHNVY1uytCMMPW2lGdYCHbXP4A4glTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHKBfCU0oUzZu887asHC027FfabXMB8GA1UdIwQY
MBaAFLYtTOx4MwWSPjSX7YhPHERbTnj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGkxTTdIZ3pCWkktTkpmdGlFOGNSRnRPZVBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mMWIzZGEtYmViZi00NGIwLWFiMTIt
ZDMyZTI3ZmI3ZTU5LzEvY29GOEpUU2hUTm03enp0cXdjTFRic1Y5cHRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mMWIzZGEtYmViZi00NGIwLWFiMTItZDMyZTI3ZmI3ZTU5
LzEvdGkxTTdIZ3pCWkktTkpmdGlFOGNSRnRPZVBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALv0DMA0G
CSqGSIb3DQEBCwUAA4IBAQBjGf/Wkk/LNSXoGa/SFg9lEUhsml1mdYKjSfZ7tedw
/bU6c+CDXM+tmQ2MqFNWJLfUNk4c4CseNDfpoNWeBveGLn2LDHKLI0ggbDst5t9s
Tg1zTKpCxYZTz7acS1L4g4nNDb6IYHOaJdsi6NCjTEYywirE/sc5PtFx97Q6t0KC
c0dlJ/ZYITssCAE3qXB4sqg65FMNwfFFCQQDPiw2Pv4qy8EU07/Ac84JbW/IYo2W
yEdWlT/9cZsDuBZMaauAAS3YLxZEmqg7f6G+7Ry+HzN4wetrafEo2EUYCpND9c4M
SGW9GbyjKPgw9O6jpXWmCyXyToKNYMVPdz2+HCt4eb/T
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:43 2025 by rpki-client