Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/JYqLQxPBT7HZ03rPEHDOhT7EAMs.roa
File: JYqLQxPBT7HZ03rPEHDOhT7EAMs.roa (raw, json)
Hash identifier: Ggt6GPaI5W8N+7eN3fBGQEmnecQzgzG6ZIelPobaN2c=
Subject key identifier: 25:8A:8B:43:13:C1:4F:B1:D9:D3:7A:CF:10:70:CE:85:3E:C4:00:CB
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 019426D942A0F75B0C87D471C7993E2FAC8F
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/JYqLQxPBT7HZ03rPEHDOhT7EAMs.roa
Signing time: Thu 02 Jan 2025 11:49:20 +0000
ROA not before: Thu 02 Jan 2025 11:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56910
IP address blocks: 46.227.58.96/29 maxlen: 32
46.227.61.64/28 maxlen: 32
Validation: Failed, certificate revoked on Wed 29 Jan 2025 08:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:42:a0:f7:5b:0c:87:d4:71:c7:99:3e:2f:ac:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: Jan 2 11:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=258a8b4313c14fb1d9d37acf1070ce853ec400cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3d:37:83:f0:d0:53:56:b1:62:ef:2e:11:8f:
b0:93:a6:02:2c:20:71:24:26:7f:4e:45:74:99:3a:
c2:fb:6c:9f:a4:6f:11:f4:b6:5b:00:16:db:73:2e:
c4:50:43:5f:63:94:74:40:5c:42:c8:c8:40:11:49:
63:b4:66:99:55:d3:1d:a3:6f:86:da:d2:41:f1:3c:
33:79:34:ca:e0:01:e6:e2:98:35:f9:32:14:76:97:
06:1b:fe:0b:32:dc:f1:6c:b3:b7:ec:e8:e6:10:f3:
12:d6:a7:19:d6:04:b6:7f:82:bb:59:6a:5c:03:0b:
75:40:3a:ed:10:1f:5e:51:9f:ca:e6:75:e6:7b:33:
09:db:77:67:df:6e:0b:2f:22:c5:b9:d4:99:ec:fa:
16:21:9f:bc:7f:26:89:d4:34:b1:30:56:0e:61:3d:
11:56:c4:da:3a:94:f5:32:5e:01:9c:57:14:9e:c8:
41:90:da:76:6b:24:6e:89:54:90:86:b0:66:09:9f:
1b:45:fe:45:b3:88:c7:3d:d9:b4:26:57:bf:21:f2:
96:af:cb:9e:ae:b4:40:d3:c7:80:28:fc:03:cc:97:
07:b7:6a:28:25:d9:ef:05:8d:08:b8:88:0a:f0:a9:
12:31:12:2f:a2:34:8b:e3:00:3b:42:e7:a6:86:9a:
c9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8A:8B:43:13:C1:4F:B1:D9:D3:7A:CF:10:70:CE:85:3E:C4:00:CB
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/JYqLQxPBT7HZ03rPEHDOhT7EAMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.58.96/29
46.227.61.64/28
Signature Algorithm: sha256WithRSAEncryption
6d:2e:44:52:e8:cb:d1:85:b5:1b:cd:90:cb:2b:5c:11:da:48:
42:f2:d4:6a:6f:9e:3a:70:15:b7:9b:da:a2:48:ec:bd:5b:61:
96:ac:df:09:31:5d:fd:2e:0f:a2:9a:aa:a9:a3:17:95:af:4e:
4a:af:6f:b4:d4:3a:c0:67:13:d4:dc:58:7c:0f:c9:9e:d8:85:
e6:aa:71:30:41:73:f9:ad:2f:10:4f:9f:d9:23:ad:38:5f:31:
8f:cd:0e:ff:f0:4d:78:44:e1:cf:74:9a:71:17:a8:47:36:53:
85:43:40:0f:1a:39:ce:4a:87:22:ce:e8:9f:a0:77:21:39:2c:
cc:e1:11:42:26:fb:e0:78:9f:cc:dd:28:ac:33:ff:0e:a3:2d:
1c:c2:be:c8:f0:d2:fa:61:6a:b0:a1:bc:7a:a3:8e:f6:1b:1b:
26:f5:47:09:a5:50:01:21:30:6f:c0:6e:42:40:50:31:87:c5:
c0:f5:33:49:e4:32:60:84:e1:bd:8b:a7:c6:ff:50:e2:fd:cf:
e1:0c:1a:28:21:4a:37:7b:ae:61:ba:c2:07:bb:25:d2:1c:0a:
d6:68:8e:c9:36:03:4f:e5:b8:ff:d2:83:f3:df:d5:d4:78:8a:
d3:35:38:10:53:5e:2f:e0:93:6a:ea:c9:f4:45:71:8b:f8:e0:
77:7b:02:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:03 2025 by rpki-client