Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/f9AuRd_1Tus3N0kNZEq0ZsdUnl0.roa
File: f9AuRd_1Tus3N0kNZEq0ZsdUnl0.roa (raw, json)
Hash identifier: aQR/i+uD30tpn+ghFlWI8AWrlLe9/x5jqM4cHVIr8S0=
Subject key identifier: 7F:D0:2E:45:DF:F5:4E:EB:37:37:49:0D:64:4A:B4:66:C7:54:9E:5D
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 01914625BB6C5DE10BC3C062AA7D62D1B95B
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/f9AuRd_1Tus3N0kNZEq0ZsdUnl0.roa
Signing time: Mon 12 Aug 2024 10:32:43 +0000
ROA not before: Mon 12 Aug 2024 10:32:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48045
IP address blocks: 46.46.64.0/18 maxlen: 18
94.240.128.0/22 maxlen: 22
94.240.160.0/19 maxlen: 19
2a09:65c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 14 Aug 2024 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:46:25:bb:6c:5d:e1:0b:c3:c0:62:aa:7d:62:d1:b9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Aug 12 10:32:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fd02e45dff54eeb3737490d644ab466c7549e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:df:ec:0e:3a:09:24:c2:54:7d:b8:d7:71:3a:
db:4b:3e:a6:4e:01:3b:bc:c6:14:38:35:9a:49:99:
a9:ca:ab:b3:32:d6:46:97:94:63:97:17:71:ff:6f:
bd:6d:79:95:be:8b:2a:83:6c:88:7f:1c:aa:9e:79:
1e:37:06:7c:47:a2:44:fe:a4:a7:61:5c:e3:7b:93:
a3:22:44:55:a4:7c:91:0d:48:0f:6c:e1:d4:9f:4b:
bf:7c:0a:30:24:eb:40:41:af:e6:a3:41:de:c1:cb:
89:33:61:d9:75:92:08:e9:93:58:29:7c:b0:13:23:
c3:2d:34:f7:d3:ec:00:75:d6:56:56:66:ac:9f:b2:
d0:ab:a3:de:fa:b4:dc:8e:79:ef:e9:37:bb:ba:eb:
13:f4:12:dd:6a:09:49:a8:c5:ee:37:a2:b6:ee:14:
37:bb:46:87:94:b5:b2:a3:c3:dd:67:56:03:48:8d:
06:30:9e:64:5c:49:06:9e:21:c2:52:d9:c5:ce:fd:
5a:82:a5:f5:da:5d:b8:40:83:cc:46:81:5a:c3:28:
a1:f7:7b:95:33:8e:42:68:5d:b8:9a:7e:2d:08:6c:
9f:5b:7e:d4:ec:43:a1:ff:fc:55:96:2d:78:ca:3f:
2f:4f:e8:55:fc:44:c1:d5:42:18:9a:74:6b:74:a6:
f4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D0:2E:45:DF:F5:4E:EB:37:37:49:0D:64:4A:B4:66:C7:54:9E:5D
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/f9AuRd_1Tus3N0kNZEq0ZsdUnl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.46.64.0/18
94.240.128.0/22
94.240.160.0/19
IPv6:
2a09:65c0::/32
Signature Algorithm: sha256WithRSAEncryption
3a:01:0c:be:34:bc:84:ec:8b:dc:7b:28:83:78:47:b1:b8:6c:
d9:37:06:ad:8d:e9:c1:16:c7:7b:23:8a:a3:d9:0b:1f:e0:65:
95:0b:a1:63:06:6e:11:5d:a7:ab:56:f7:6f:bc:d4:1f:e2:44:
79:cc:8e:b4:08:97:c8:aa:df:5d:24:e6:8a:a5:b5:ed:68:72:
7f:e6:51:f8:38:e1:19:5a:ab:c3:21:ca:a6:db:e5:d1:cc:08:
29:26:77:25:9d:14:98:ec:b5:5b:50:f1:81:b3:80:07:97:c3:
f4:63:6e:e3:c0:9d:a4:2e:f1:75:24:c8:dd:e1:53:3b:8b:fd:
65:89:c5:0a:97:de:7f:e3:4f:da:8e:85:a3:18:9b:d8:5d:fa:
2a:52:bf:8d:e7:f0:3d:f0:6a:4c:e5:76:67:0a:c9:48:75:34:
6c:33:90:97:6e:f5:64:53:aa:d3:0a:cd:da:bc:ab:e2:f9:4b:
c7:a2:92:e3:99:8f:a8:5e:2e:3a:35:f3:d5:f8:1b:49:84:5b:
93:bd:5d:57:d7:3b:7d:2e:68:c7:7e:9c:e6:34:e0:65:8c:c5:
4e:b5:bd:16:2f:a0:0d:e0:fe:9c:ff:2d:7e:49:fb:1e:5b:e4:
f9:6b:70:3d:54:4b:77:9e:93:78:f6:f3:4b:55:86:02:6d:45:
6e:c2:2a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:58:04 2025 by rpki-client