Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Od6__S934Y9zaDFF0XyaZL3lcKI.roa
File: Od6__S934Y9zaDFF0XyaZL3lcKI.roa (raw, json)
Hash identifier: dqHjRSLXKb45PdhK0O/PesE1BCCo7+v1sbYsStlBbuc=
Subject key identifier: 39:DE:BF:FD:2F:77:E1:8F:73:68:31:45:D1:7C:9A:64:BD:E5:70:A2
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01951450ED0711066482B06FCBA96CDD4891
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Od6__S934Y9zaDFF0XyaZL3lcKI.roa
Signing time: Mon 17 Feb 2025 14:30:02 +0000
ROA not before: Mon 17 Feb 2025 14:30:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 46.29.24.0/23 maxlen: 23
46.29.26.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 11 Mar 2025 09:38:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:50:ed:07:11:06:64:82:b0:6f:cb:a9:6c:dd:48:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Feb 17 14:30:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39debffd2f77e18f73683145d17c9a64bde570a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:10:0d:e2:21:3f:ee:36:8e:30:c2:1d:8f:64:
95:9f:b7:e3:48:c0:fc:67:b6:51:eb:09:57:59:a5:
d6:51:19:18:34:cb:84:8f:0b:a0:53:01:2b:7f:40:
eb:79:90:bb:a2:3a:26:5e:8e:f3:fe:fa:dd:24:b3:
15:29:dd:26:2f:20:4e:2a:f8:cc:7a:e5:52:92:44:
af:11:1d:6a:96:18:34:38:92:2d:87:97:ab:3b:60:
0d:17:7d:e4:1a:99:13:6b:2d:d6:d5:b0:ed:06:bc:
3c:72:2f:20:c0:d2:2a:0e:31:8d:88:68:f6:2c:ef:
f4:da:36:5e:4b:b0:a7:f0:32:03:ca:b8:f7:e6:36:
fc:ad:02:f3:7c:27:f5:76:81:15:33:5b:c6:63:d4:
ef:f8:fc:55:99:1b:d5:23:00:6d:00:f0:0c:03:cf:
e6:15:bc:09:44:ff:4c:fb:e5:de:3f:91:22:eb:5b:
d0:cc:52:3e:73:ae:41:96:d1:5c:1b:1a:5b:e0:e9:
65:4a:7a:68:c1:54:27:0a:1f:fe:c3:c0:a2:a0:3f:
a1:c8:21:2d:37:33:3a:4c:27:be:7b:cd:81:4e:9e:
6d:a3:55:19:44:2a:ed:9d:51:49:46:6d:c7:be:4c:
18:a1:1d:61:bf:73:68:3f:b6:3f:93:5a:cb:f0:2a:
11:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DE:BF:FD:2F:77:E1:8F:73:68:31:45:D1:7C:9A:64:BD:E5:70:A2
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Od6__S934Y9zaDFF0XyaZL3lcKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.24.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:72:5d:a6:4e:d6:32:ef:11:6c:5b:92:4b:50:43:cb:59:b3:
ae:37:57:eb:f8:51:31:c4:c7:1c:2b:25:33:97:c6:d5:32:94:
03:f7:cb:51:c8:2c:08:ef:5b:f2:2f:a7:8b:c4:8f:fb:15:d3:
d1:56:d2:a7:3f:d6:87:3d:51:be:51:77:93:ed:31:c8:2e:d8:
05:19:2b:42:e6:1f:89:7d:96:c0:f2:25:b0:da:73:1f:46:9e:
53:bf:31:85:99:5a:39:94:08:3d:29:fa:53:9a:ca:e8:99:92:
de:bb:5a:06:d0:53:9c:e3:77:8d:c4:c8:8a:27:f0:6e:63:bd:
40:41:aa:8b:aa:b5:41:37:0b:f2:b2:8c:c8:b9:3d:c1:d2:b9:
f4:77:d5:73:ea:2e:25:09:f2:fb:ff:ae:55:7d:e3:24:7e:2d:
b9:96:0e:72:84:32:f8:cd:ba:39:f8:6d:4e:f0:cf:10:51:ee:
0e:6f:df:2c:70:ce:84:3f:3a:12:08:b3:32:65:ee:2d:31:da:
55:02:1a:20:93:4e:da:46:9e:68:f4:73:27:19:18:e7:8e:f2:
2d:41:45:ae:ce:9a:da:25:02:73:b8:80:8f:af:47:f6:ea:b9:
11:09:1c:cd:19:05:9c:a8:c0:a4:05:5d:af:4f:ed:97:64:4f:
e4:fd:3a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:54:51 2025 by rpki-client