Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/yU-TWT-LucfC9E3zt9hE5OI3E9M.roa
File: yU-TWT-LucfC9E3zt9hE5OI3E9M.roa (raw, json)
Hash identifier: xe3lD1F6b4YNEJd4DQk/TLT/a2NHAVM0BDL4+K3M1CE=
Subject key identifier: C9:4F:93:59:3F:8B:B9:C7:C2:F4:4D:F3:B7:D8:44:E4:E2:37:13:D3
Certificate issuer: /CN=42ca1a1e3d0925423310c154b502c2842888e612
Certificate serial: 018CC3B681E0CFE0B492433F0412A3E0406E
Authority key identifier: 42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/yU-TWT-LucfC9E3zt9hE5OI3E9M.roa
Signing time: Mon 01 Jan 2024 06:29:27 +0000
ROA not before: Mon 01 Jan 2024 06:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197240
IP address blocks: 46.30.104.0/23 maxlen: 24
46.30.108.0/24 maxlen: 24
46.30.110.0/23 maxlen: 24
46.30.106.0/23 maxlen: 24
46.30.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:81:e0:cf:e0:b4:92:43:3f:04:12:a3:e0:40:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ca1a1e3d0925423310c154b502c2842888e612
Validity
Not Before: Jan 1 06:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c94f93593f8bb9c7c2f44df3b7d844e4e23713d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3a:d4:70:16:2c:cb:68:af:3f:70:e4:a6:4d:
08:bd:73:c0:44:97:d6:4e:1f:a7:cf:fe:27:3c:13:
fc:ae:cc:b5:47:5d:09:c7:f6:69:04:b0:cc:06:7e:
94:09:25:f5:3c:da:ee:81:1b:79:20:c8:f0:93:3b:
71:2e:a9:77:c7:cd:06:9b:83:45:cb:17:be:ed:80:
80:1f:90:2a:e1:2b:32:51:26:7a:20:86:f7:b3:a4:
af:aa:b7:67:91:49:3f:95:63:6b:ca:29:9d:35:c9:
d2:df:6c:4d:8b:6c:b3:2e:51:d4:07:23:99:29:d5:
c3:8b:29:9f:09:af:7b:ab:8d:82:c5:80:59:19:24:
41:5d:0f:8e:a2:6b:38:15:3a:3c:d6:49:01:ed:f3:
52:33:30:64:38:db:4c:aa:f6:e9:d3:22:99:11:8a:
d2:a0:d4:63:b1:e2:e3:8b:33:14:ed:1f:68:39:32:
14:65:26:c4:44:1a:e0:84:cb:08:c2:6d:d1:8a:86:
bd:86:b5:a0:b7:da:fd:d8:ef:6a:3d:19:bf:8d:0b:
06:8f:1e:3a:d4:6e:20:ae:2c:11:86:90:f9:55:b9:
29:07:cf:28:4f:7b:56:10:cd:a7:71:bf:51:7b:bf:
54:8f:ea:3e:df:76:01:05:af:2e:b1:1c:63:aa:e2:
3d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4F:93:59:3F:8B:B9:C7:C2:F4:4D:F3:B7:D8:44:E4:E2:37:13:D3
X509v3 Authority Key Identifier:
keyid:42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/yU-TWT-LucfC9E3zt9hE5OI3E9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.104.0/21
Signature Algorithm: sha256WithRSAEncryption
13:6e:ea:c9:54:f4:55:d5:4d:42:14:76:f9:79:e7:9d:ac:c8:
61:c9:fd:d0:28:1a:47:1e:a2:48:5d:7c:a1:09:80:68:c2:d5:
1b:18:81:86:3b:e0:54:28:d4:60:f1:cc:80:5b:8f:8b:80:28:
1f:1f:20:eb:6c:f0:01:21:c8:8b:73:55:23:30:1a:a9:25:e1:
77:9e:b5:93:fd:54:42:a2:4a:63:bf:cc:c1:66:70:bf:59:35:
db:b8:da:7f:12:67:0d:8f:49:9d:88:9f:34:fc:b7:26:5a:fa:
ad:4f:92:98:ca:92:33:7b:7a:a5:69:e9:ad:1d:82:35:4c:1c:
d0:b4:15:da:82:13:e9:90:79:7c:61:66:13:e5:3c:71:93:76:
cf:1e:74:24:a5:31:1d:c5:d2:b6:88:a6:4f:75:94:59:ed:80:
c7:94:72:36:be:20:23:4b:9b:59:60:84:07:7a:e5:b1:44:64:
31:17:7f:76:f2:bc:7e:fb:c6:38:a1:48:52:b8:96:ce:53:79:
33:24:91:25:7a:62:d3:cf:ae:f9:ac:86:46:a4:b9:66:53:75:
a0:bd:32:86:c8:0c:7d:69:37:47:1e:f8:25:7c:33:6a:70:e8:
0a:72:1c:5b:24:bc:e3:22:1e:c8:f2:9b:4d:9a:de:8c:1e:ed:
0e:65:99:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:01 2025 by rpki-client