Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/vVIQdqvPEncSS-VR1cplnPPtek0.roa
File: vVIQdqvPEncSS-VR1cplnPPtek0.roa (raw, json)
Hash identifier: URGxGI6zjPsJJAyfSiZjtMPMkk9zI++nQUivfOHSkek=
Subject key identifier: BD:52:10:76:AB:CF:12:77:12:4B:E5:51:D5:CA:65:9C:F3:ED:7A:4D
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01947AA78548DA6F67342BAC2EC39E940DC1
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/vVIQdqvPEncSS-VR1cplnPPtek0.roa
Signing time: Sat 18 Jan 2025 18:23:06 +0000
ROA not before: Sat 18 Jan 2025 18:23:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 46.29.24.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 17 Feb 2025 14:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7a:a7:85:48:da:6f:67:34:2b:ac:2e:c3:9e:94:0d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 18 18:23:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd521076abcf1277124be551d5ca659cf3ed7a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:03:03:41:f0:2e:95:53:1d:6a:dc:9b:0b:0b:
f1:55:60:5f:7f:d2:ec:f7:90:f9:d3:31:e0:ab:a6:
4a:73:60:92:d0:5c:c8:14:1e:1d:72:c9:63:17:c4:
54:2c:2a:2d:47:da:1b:d7:5a:c0:d4:98:e7:f6:c8:
fd:0e:c5:e5:a9:bd:ae:ee:ef:2e:dc:e1:2d:69:a2:
30:8b:e3:63:83:59:71:03:bf:86:84:c3:d3:fb:2d:
9b:d7:44:fd:29:dc:81:1b:65:e9:41:ea:ff:65:de:
70:e4:d4:be:19:fb:a1:57:f7:b6:c4:44:ee:cb:bd:
c8:dc:9c:f8:59:be:25:bf:ab:31:1d:84:89:a0:1a:
a7:d5:b9:45:ca:3e:31:ad:fc:fb:7d:2b:c4:ef:3e:
78:b8:f3:49:8d:4f:6a:69:58:82:3d:06:29:2d:88:
0c:a3:fa:a0:83:1b:ec:ea:ea:97:86:69:38:82:83:
e9:a4:0a:ff:18:b0:d0:85:86:1b:fd:67:e4:5e:fb:
86:6d:eb:8a:da:73:55:f5:fb:1a:47:a6:26:5d:c0:
8b:0b:96:e5:a1:2b:e4:a3:86:31:f5:b1:b8:3c:71:
bd:94:35:08:22:4e:1d:83:5f:32:ce:f0:d1:2e:d6:
06:f0:e5:4a:dc:0b:cc:df:02:ed:8f:67:fd:5c:c6:
ef:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:52:10:76:AB:CF:12:77:12:4B:E5:51:D5:CA:65:9C:F3:ED:7A:4D
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/vVIQdqvPEncSS-VR1cplnPPtek0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.24.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:65:a7:90:fc:31:f7:4e:54:23:44:e3:2d:b3:5d:91:c6:92:
b6:24:ee:4f:70:a4:2c:e6:0a:5a:be:ee:30:2c:48:9e:9f:9e:
03:2f:54:a8:5f:2a:ed:f4:6d:8d:d9:bd:e0:e3:48:d0:c5:1b:
a3:d1:01:07:1a:ca:94:94:f5:96:46:5c:fc:9c:73:04:b8:ad:
41:2e:b2:76:cb:0f:a9:1e:7a:eb:38:2a:e1:36:81:d2:9f:8a:
09:40:6e:7d:1d:9f:a1:74:ee:dd:ae:60:43:e4:db:17:50:c5:
1c:00:60:85:06:40:e3:b1:52:c9:45:9a:aa:dc:85:1a:86:9a:
52:94:d1:e5:a7:b1:08:fb:85:f4:5b:eb:ef:fb:a3:75:dd:26:
8e:29:06:8b:e8:60:ce:88:d4:e6:03:d2:77:dd:af:9c:95:01:
9a:22:8a:2b:06:1f:21:ab:d9:7f:b5:10:b3:a7:43:4a:7c:da:
55:fa:53:ad:2e:ac:84:c2:8c:71:c6:fe:bc:27:81:bd:59:e8:
93:7c:e0:ee:6f:09:08:a4:f2:50:d4:80:46:fa:92:4a:60:2c:
93:4b:5e:6e:f7:25:2b:4a:24:db:f6:f2:83:f0:33:d2:fd:6c:
70:b8:64:f5:f7:ff:d6:54:a3:b8:a5:6c:03:30:71:ca:bb:84:
29:34:be:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:01:59 2025 by rpki-client