Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/1j9iAkN4GQLomV_OMWunZpUHln0.roa
File: 1j9iAkN4GQLomV_OMWunZpUHln0.roa (raw, json)
Hash identifier: gGaojzq4ZTgHT7lYs0UHolL59ULbJmEBQOoD+McG9WY=
Subject key identifier: D6:3F:62:02:43:78:19:02:E8:99:5F:CE:31:6B:A7:66:95:07:96:7D
Certificate issuer: /CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Certificate serial: 018CC7273243482FB028946590699EC39277
Authority key identifier: AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/1j9iAkN4GQLomV_OMWunZpUHln0.roa
Signing time: Mon 01 Jan 2024 22:31:23 +0000
ROA not before: Mon 01 Jan 2024 22:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199604
IP address blocks: 46.227.172.0/24 maxlen: 24
2a02:7a00:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:32:43:48:2f:b0:28:94:65:90:69:9e:c3:92:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Validity
Not Before: Jan 1 22:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d63f620243781902e8995fce316ba7669507967d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5a:aa:cf:3d:38:c4:51:46:93:37:64:27:5d:
77:97:8a:65:2f:05:85:75:bd:fb:f5:2b:80:59:3b:
de:df:1a:45:b5:1b:b8:ed:be:2b:ee:9d:c5:41:1e:
55:b8:96:55:24:31:70:1d:d3:d6:e4:7d:1b:c8:49:
88:b1:29:c4:3b:06:f2:e9:83:bf:15:d0:20:62:1e:
4e:4c:c9:85:a1:73:5a:bd:8b:37:35:cf:cd:4f:7d:
d9:6e:62:c8:5f:c8:d4:f8:5d:7e:e7:4a:ed:4e:d4:
34:f9:db:90:42:2f:c9:93:b2:e5:0f:0e:51:db:47:
eb:92:c0:b3:d0:01:fa:2f:0d:60:03:c1:9f:f7:1a:
44:e2:8b:ac:16:51:ae:c1:63:db:a5:0e:7a:40:73:
93:99:7a:08:0f:66:57:6c:7f:f7:b2:3f:d5:f0:02:
06:e3:6b:cc:7e:84:fa:5d:04:c2:6d:72:32:54:98:
ac:44:b2:6f:b4:e2:c0:e3:b7:05:e7:23:8c:7e:3a:
02:51:7b:ce:0b:79:ce:c9:84:ea:89:96:75:a7:24:
0f:e4:68:e8:98:5e:65:30:11:12:e1:e1:16:46:5e:
01:e0:fe:ce:11:79:12:87:a0:5b:5b:ca:5d:8d:f3:
af:df:f8:cd:24:52:e9:d0:25:06:88:2b:e9:f3:8c:
f1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3F:62:02:43:78:19:02:E8:99:5F:CE:31:6B:A7:66:95:07:96:7D
X509v3 Authority Key Identifier:
keyid:AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/1j9iAkN4GQLomV_OMWunZpUHln0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.172.0/24
IPv6:
2a02:7a00:2::/48
Signature Algorithm: sha256WithRSAEncryption
51:82:ff:f9:26:4a:8e:df:f5:8d:50:83:e3:00:f4:11:2a:e1:
4b:62:95:23:01:67:5b:78:58:e7:b7:90:bf:bb:de:76:c4:1a:
90:e4:31:ba:32:c8:64:9b:dc:73:66:8d:6c:ca:e8:c4:50:44:
6e:d2:05:b9:3d:58:f8:13:56:4b:d7:36:40:cb:ca:a3:8f:31:
77:ec:d4:c8:e6:bd:6c:1c:c5:11:49:27:3f:5e:36:d1:1f:f1:
f2:40:52:4d:5d:88:aa:cd:e3:c4:8a:9f:d1:7b:38:f8:ab:47:
d8:60:01:f7:d8:4e:c0:a7:d9:7f:ed:e1:66:f4:b5:43:f4:cb:
2e:9f:51:08:dc:cd:92:94:5e:5c:fd:6e:d0:5b:b0:6e:b7:0e:
78:74:d6:c9:e0:48:3e:b0:b0:58:de:fc:0d:f5:5f:2b:bd:8d:
f9:de:33:f5:aa:36:1b:b3:e2:61:5f:85:ba:75:c8:76:6f:12:
92:d3:d8:ff:30:d6:58:bc:45:2c:52:2b:a0:cc:9a:0b:d1:4f:
e7:89:d7:20:ba:04:40:24:d4:2f:8b:f8:b3:b6:45:b9:10:6e:
43:29:be:d1:46:47:22:66:33:22:f8:51:eb:5c:3e:e8:db:90:
41:8f:42:97:be:6d:01:5e:7a:f3:b6:6d:85:ec:dc:1c:f1:85:
33:35:9c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:24:18 2025 by rpki-client