Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/0n4Qh8Cz3v0I8xuDyC9T_WyFknQ.roa
File: 0n4Qh8Cz3v0I8xuDyC9T_WyFknQ.roa (raw, json)
Hash identifier: HexAzlw3+dfEpLWinKSRz4nGzZWqhZ8Om8L7iGP7OI4=
Subject key identifier: D2:7E:10:87:C0:B3:DE:FD:08:F3:1B:83:C8:2F:53:FD:6C:85:92:74
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 01918493C73EEADE0ECE826B5DABF6462269
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/0n4Qh8Cz3v0I8xuDyC9T_WyFknQ.roa
Signing time: Sat 24 Aug 2024 13:29:22 +0000
ROA not before: Sat 24 Aug 2024 13:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43824
IP address blocks: 46.20.104.0/24 maxlen: 24
185.100.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 31 Aug 2024 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:84:93:c7:3e:ea:de:0e:ce:82:6b:5d:ab:f6:46:22:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Aug 24 13:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d27e1087c0b3defd08f31b83c82f53fd6c859274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:c9:9e:7e:66:fe:a0:38:3b:62:b6:0d:67:
fa:90:ca:88:2a:9b:3c:89:67:96:60:b9:7c:91:e5:
cf:66:a5:ac:3e:d6:82:44:82:60:72:f8:3b:53:c7:
18:9a:fb:6f:fd:0f:6f:09:1f:2e:13:06:14:cc:ca:
df:2d:88:b9:54:f2:b1:f7:7b:fd:05:9a:01:f9:f2:
78:6e:fe:4f:64:62:0c:3a:1f:a2:e2:5c:af:58:04:
b2:82:f1:6a:14:1d:40:fe:4e:d6:53:e2:12:a2:c8:
dc:d4:7e:06:d1:9d:cd:b4:e1:b4:36:c1:f0:82:b4:
0f:2b:1e:19:65:75:f2:3f:41:6a:7f:89:cc:78:7f:
de:e0:eb:1b:a5:cb:8c:c6:1a:1a:27:4b:21:e8:59:
1a:4d:a4:1a:27:de:b9:cc:9f:65:cc:b6:b8:49:ad:
35:fe:d2:a3:ea:e2:8d:4f:2f:3b:1c:a2:36:39:3d:
2a:5f:a9:b4:a4:e3:7b:83:8e:0c:e6:df:37:8f:01:
b0:9a:66:13:61:21:3a:41:8c:13:ee:c3:66:1f:0c:
8a:89:37:2a:a0:28:23:6a:f8:0d:e8:4e:ca:02:50:
46:8f:54:03:1b:c3:4f:1e:cb:cf:6f:45:57:fb:0a:
7f:1e:59:0f:e6:de:c3:be:5c:eb:e4:47:34:0d:63:
ef:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7E:10:87:C0:B3:DE:FD:08:F3:1B:83:C8:2F:53:FD:6C:85:92:74
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/0n4Qh8Cz3v0I8xuDyC9T_WyFknQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.104.0/24
185.100.171.0/24
Signature Algorithm: sha256WithRSAEncryption
95:e9:35:03:57:32:64:62:f6:50:86:36:f3:c9:8c:06:e3:3b:
5e:71:70:7d:02:4e:b3:fe:46:31:db:f8:65:19:b2:87:65:31:
76:2b:a9:cd:66:a8:f1:21:c5:2e:84:8c:f8:d7:92:e2:20:64:
0d:70:84:1f:1c:e9:17:12:e6:d5:87:ba:99:14:26:37:d6:2d:
eb:c3:c6:d2:41:50:7f:8f:48:b9:f7:13:74:44:09:f7:1a:c6:
67:dc:70:69:fa:77:b7:ff:ef:98:1c:b7:74:60:c1:cc:6d:25:
7a:66:6b:65:78:45:b1:97:40:ef:a9:84:4e:81:2a:dc:b0:0f:
d4:bd:db:c9:62:ef:7d:84:98:49:17:4e:05:78:e0:b8:b9:49:
34:48:7e:22:48:ed:df:70:91:5f:93:28:a8:a5:de:74:3e:ff:
34:cf:c4:84:65:c2:12:cc:af:9e:e8:e3:6a:80:cd:a0:f1:e3:
70:33:7d:c9:c3:c6:fe:98:62:f2:0f:98:fe:4c:97:a4:b3:5a:
3b:8d:cc:da:10:25:0f:51:89:8f:41:7e:59:84:25:00:04:da:
03:8c:f7:d3:7d:31:f0:43:11:86:10:7e:da:cf:a9:48:19:8b:
eb:ec:00:f3:18:56:d5:55:df:ef:78:fe:5e:f6:ce:11:8d:95:
83:60:05:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:12:04 2025 by rpki-client