Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/kCwf-RDPqPFZ29kg3_MbfCjQS4E.roa
File: kCwf-RDPqPFZ29kg3_MbfCjQS4E.roa (raw, json)
Hash identifier: NS/qGgPXEy1V8GAlfU/t9G951UlUmx8ofOxNTbCAtnY=
Subject key identifier: 90:2C:1F:F9:10:CF:A8:F1:59:DB:D9:20:DF:F3:1B:7C:28:D0:4B:81
Certificate issuer: /CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
Certificate serial: 0193B9C3E1F2674B43BB37258CF7CE99DD18
Authority key identifier: 15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/kCwf-RDPqPFZ29kg3_MbfCjQS4E.roa
Signing time: Thu 12 Dec 2024 07:27:22 +0000
ROA not before: Thu 12 Dec 2024 07:27:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51993
IP address blocks: 46.149.48.0/23 maxlen: 23
46.149.48.0/24 maxlen: 24
46.149.49.0/24 maxlen: 24
46.149.52.0/23 maxlen: 23
46.149.52.0/24 maxlen: 24
46.149.53.0/24 maxlen: 24
46.149.54.0/23 maxlen: 23
46.149.54.0/24 maxlen: 24
46.149.55.0/24 maxlen: 24
46.149.56.0/23 maxlen: 23
46.149.56.0/24 maxlen: 24
46.149.57.0/24 maxlen: 24
46.149.60.0/22 maxlen: 22
46.149.60.0/23 maxlen: 23
46.149.62.0/24 maxlen: 24
46.149.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b9:c3:e1:f2:67:4b:43:bb:37:25:8c:f7:ce:99:dd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
Validity
Not Before: Dec 12 07:27:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=902c1ff910cfa8f159dbd920dff31b7c28d04b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:ba:03:ea:9b:2d:87:40:ac:12:c9:c1:80:
f3:d4:6e:59:01:37:d0:1c:64:eb:a6:aa:3e:d9:1b:
a1:c0:25:a5:7a:58:01:82:c1:21:ac:53:fa:a2:ab:
37:87:3f:67:ba:94:78:ec:19:e5:11:7f:f7:a3:b9:
d1:ef:72:af:50:00:80:3d:eb:09:19:b5:7d:e7:a4:
9d:45:08:52:cb:ed:2a:2d:2b:5e:d3:3b:a4:05:1c:
10:88:ec:61:9d:cc:46:c0:e8:5e:1a:14:7b:01:31:
12:42:9c:b2:73:7e:c7:54:39:6b:5f:cb:e5:0d:20:
65:8d:e9:a4:74:1d:35:4b:03:31:8b:42:cf:43:cf:
3c:6e:96:e3:93:38:e2:64:c6:bc:cf:87:6a:90:2e:
4b:17:3c:0a:80:7e:1d:a2:fb:de:f2:fa:9d:41:02:
d9:98:88:46:ab:f5:4f:38:c6:93:e2:a3:86:6f:c4:
f8:4d:4c:f7:d3:1d:10:54:ad:37:d9:17:06:d5:6d:
4d:a6:78:5c:63:dc:c5:a5:0a:e9:a8:0c:93:2a:89:
3a:7b:cd:37:6a:00:cc:52:94:8f:59:2f:0c:67:26:
e6:51:9e:f8:aa:45:5e:36:80:f3:d7:f5:23:6f:da:
fa:05:a3:00:e0:09:f1:06:a4:e2:32:bd:a0:25:4b:
d6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2C:1F:F9:10:CF:A8:F1:59:DB:D9:20:DF:F3:1B:7C:28:D0:4B:81
X509v3 Authority Key Identifier:
keyid:15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/kCwf-RDPqPFZ29kg3_MbfCjQS4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.48.0/23
46.149.52.0-46.149.57.255
46.149.60.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:e1:d2:2a:b7:33:79:24:f7:06:ff:ca:b1:46:c5:1a:cf:b6:
28:7b:38:94:63:70:3a:7c:2a:fe:9f:a5:ad:4b:a3:13:f4:ce:
d2:5d:de:af:aa:57:7f:76:6a:85:cd:a4:af:1f:77:58:23:b2:
8f:5f:85:db:54:9b:40:38:c3:1d:54:bf:be:23:8d:f3:69:fa:
fd:45:58:01:f6:df:06:a4:7a:5d:9c:af:69:a5:4d:06:14:24:
73:48:02:17:f2:4b:27:12:9e:74:50:69:2a:ce:b2:ef:c3:d7:
ab:dd:e1:b8:a8:2e:20:92:7a:c8:23:f6:e5:c8:47:58:53:d6:
6a:f2:73:f8:a3:25:e7:b8:22:3e:e3:10:78:84:34:10:ff:db:
d9:eb:e1:5a:81:d2:26:14:3e:3a:b8:7d:fd:92:af:b5:05:d9:
a8:09:98:20:8c:c7:5f:0d:9a:08:4e:db:df:84:3a:87:ec:b9:
df:a9:43:f5:be:66:ad:fb:59:f9:9b:1d:f9:5a:05:c3:6b:e2:
48:c9:00:55:c3:24:94:c5:97:cf:42:1a:7a:86:8f:e5:6a:10:
89:e6:9c:d7:97:a1:e7:fe:c2:1d:d9:45:1d:67:9d:e0:79:89:
06:bf:a2:55:53:b3:3a:09:c4:2e:ee:82:1e:da:85:29:cc:d4:
3f:9b:ec:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:03:22 2025 by rpki-client