Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/l20OvqCLqGy1RkUch3WuyM8ofE8.roa
File: l20OvqCLqGy1RkUch3WuyM8ofE8.roa (raw, json)
Hash identifier: W+joOOq70a1JkFBvnZAXieBgOJTh24cJayZKKYNyRjo=
Subject key identifier: 97:6D:0E:BE:A0:8B:A8:6C:B5:46:45:1C:87:75:AE:C8:CF:28:7C:4F
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 0193FDE849517FF27B65C975886AEF0450BB
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/l20OvqCLqGy1RkUch3WuyM8ofE8.roa
Signing time: Wed 25 Dec 2024 13:01:18 +0000
ROA not before: Wed 25 Dec 2024 13:01:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39364
IP address blocks: 46.148.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:fd:e8:49:51:7f:f2:7b:65:c9:75:88:6a:ef:04:50:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Dec 25 13:01:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=976d0ebea08ba86cb546451c8775aec8cf287c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:6d:da:0d:6c:15:74:23:96:d5:ce:f3:88:
7f:fa:37:3b:1c:0d:d3:65:31:62:71:b1:cd:84:31:
27:3f:65:02:7e:e2:df:f8:2a:ed:9b:ce:9d:d1:2d:
9d:d1:dc:4c:24:f8:a8:6e:dd:0a:a4:66:86:5d:f9:
4c:61:29:f5:1e:01:39:3f:af:b4:4b:cc:5d:29:fc:
5d:4b:ea:78:28:16:69:b4:af:8f:86:54:55:4c:df:
61:38:a4:49:9e:66:11:46:cf:cb:29:24:d1:44:93:
b8:57:ac:82:05:e7:90:c3:86:12:96:c4:05:5a:16:
c7:c4:f2:9c:aa:4d:6e:c4:f1:3b:24:8e:ed:8a:e7:
91:f2:a2:8d:7c:ef:06:3c:a6:a2:96:6f:82:2b:70:
90:18:36:bb:9c:f6:3b:43:cc:ad:93:f8:9d:61:30:
9d:94:4c:a0:b0:fe:97:4e:eb:5d:53:63:40:7c:d3:
c1:c8:02:51:6e:b5:a7:1a:00:79:e5:88:60:73:7c:
a6:d7:d1:5b:5e:69:ae:e5:8d:bd:32:05:4d:e4:d5:
b6:6d:a0:36:6a:a4:ac:34:b0:25:a5:2f:1e:fb:3a:
1b:ec:20:63:ed:1f:0c:2b:08:bb:62:55:3e:ad:7d:
74:7e:61:3b:7e:96:dc:87:73:2a:d4:40:37:49:b0:
f0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6D:0E:BE:A0:8B:A8:6C:B5:46:45:1C:87:75:AE:C8:CF:28:7C:4F
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/l20OvqCLqGy1RkUch3WuyM8ofE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.39.0/24
Signature Algorithm: sha256WithRSAEncryption
58:52:85:f9:54:8c:e5:31:78:7b:b8:a6:95:4b:97:3e:ee:ac:
1d:c1:89:e6:c4:53:3f:f7:3d:23:29:a5:51:80:41:49:a9:07:
8d:4e:5c:1e:4d:0a:e5:5a:94:74:a7:9f:e1:40:64:66:5f:9f:
0d:98:6f:5a:3f:dd:73:d7:7f:ea:9e:90:91:3d:7a:22:12:fc:
86:fa:d7:5f:47:00:ec:0e:36:e1:09:46:b5:22:e8:f4:fa:99:
e8:9b:f9:40:b5:0f:54:04:09:e8:5f:cf:3e:38:fa:23:91:ab:
08:35:0a:5d:ff:da:cf:cd:47:e5:ac:81:a3:63:a7:bc:b1:f4:
2d:c8:ca:5e:6a:c2:b6:c8:29:dc:ae:ba:c3:e5:b4:a6:4c:45:
31:13:63:7d:6e:97:c6:42:a6:9f:48:bf:66:c6:51:63:03:a0:
57:dd:81:d7:4b:92:6f:11:46:3f:eb:67:9f:9f:ac:82:8a:27:
09:fe:94:e3:0c:f1:bb:66:50:ae:2a:bf:7d:ff:aa:21:aa:95:
e8:ee:32:89:e5:36:b3:7d:21:67:9b:26:b3:4a:14:20:17:f5:
29:47:83:47:02:e4:8d:62:d0:0e:7a:6c:96:cf:71:7b:2a:c3:
41:ae:2d:21:fa:ca:6f:22:62:55:46:9f:07:54:21:f9:59:6f:
f7:38:63:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:02:38 2025 by rpki-client