Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/1-W_q2xej8lp7-rOfD6kJJqAnlNw.roa
File: 1-W_q2xej8lp7-rOfD6kJJqAnlNw.roa (raw, json)
Hash identifier: 15XInNIE7B/p/+bFR2Wy8b9YvqFoNaxGP4pBciiMj48=
Subject key identifier: F9:6F:EA:DB:17:A3:F2:5A:7B:FA:B3:9F:0F:A9:09:26:A0:27:94:DC
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018CC9BC6979A7299D76DC278EF8BDCDA220
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/1-W_q2xej8lp7-rOfD6kJJqAnlNw.roa
Signing time: Tue 02 Jan 2024 10:33:37 +0000
ROA not before: Tue 02 Jan 2024 10:33:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5650
IP address blocks: 46.20.96.0/24 maxlen: 24
46.20.98.0/24 maxlen: 24
46.20.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 09:54:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:69:79:a7:29:9d:76:dc:27:8e:f8:bd:cd:a2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jan 2 10:33:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f96feadb17a3f25a7bfab39f0fa90926a02794dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:32:37:0b:4d:a6:12:c1:ad:80:8c:a0:7c:d5:
26:27:1b:ae:f8:c0:b5:8f:3c:e4:2d:4c:71:f2:6e:
b1:6e:62:9e:20:e3:73:67:30:fa:3b:1f:61:66:87:
b4:87:b8:32:08:86:63:88:b7:fd:14:a7:14:44:63:
9e:b7:50:d6:25:36:a8:49:3f:20:75:e5:90:a9:3d:
bf:33:8b:84:4f:26:9d:66:97:72:bf:ea:99:40:54:
80:64:53:5b:f0:85:9a:15:ae:2e:c0:1a:d0:b6:9d:
19:5b:dc:a7:aa:7a:4a:a4:c4:f9:0d:0f:35:f7:47:
89:97:51:10:75:0e:68:79:40:e8:a8:bb:dc:ff:45:
47:10:03:f9:2e:c3:50:93:1b:ac:a7:da:bf:62:94:
5f:6a:6f:a5:c4:77:9f:f2:b6:47:84:37:92:f8:45:
8d:9c:3c:de:23:30:4a:e4:32:bc:0c:8a:74:54:f3:
af:a2:0b:75:a6:17:0c:e8:69:22:9f:fb:8c:5b:2b:
46:81:d4:76:8d:c3:b9:ab:d5:81:bc:02:32:ee:a5:
11:c6:df:b7:b0:64:74:9e:f8:81:af:ae:15:75:47:
d4:ff:26:1b:06:30:c4:0b:64:bd:d8:d6:5b:73:fa:
63:f1:7b:2c:87:0b:45:5e:cb:88:f4:60:3a:b0:a5:
ef:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6F:EA:DB:17:A3:F2:5A:7B:FA:B3:9F:0F:A9:09:26:A0:27:94:DC
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/1-W_q2xej8lp7-rOfD6kJJqAnlNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.96.0/24
46.20.98.0/24
46.20.102.0/24
Signature Algorithm: sha256WithRSAEncryption
19:8b:b4:4d:6e:ba:68:8b:53:5c:83:6d:92:a1:57:43:99:ac:
7a:ea:ad:58:12:a5:a8:57:51:36:6a:f9:28:c5:0c:9c:15:63:
fb:28:45:78:99:1b:2b:c4:33:ee:9e:c3:89:16:ec:b7:0f:33:
2e:c9:36:b0:f5:a5:a8:03:d5:fa:54:91:f7:2c:42:61:46:ae:
77:37:9d:b3:52:b0:67:ff:a1:91:13:fd:b5:d0:cf:8e:11:ff:
5e:2f:16:1e:16:47:d0:e3:f8:90:b9:96:e4:f7:93:1c:19:97:
3a:30:52:de:fa:07:59:e5:94:8c:f4:38:da:60:b3:e3:7d:fd:
58:fe:b0:89:3f:72:38:e7:79:58:5c:44:c8:7f:7a:14:fc:c3:
0f:26:38:c0:b3:b6:ae:40:0f:77:1f:c9:99:1a:d4:98:0f:f8:
9c:20:29:f5:d6:4c:60:95:6b:30:0a:23:61:05:ca:35:95:4b:
18:c0:b7:d9:b2:7c:5d:c2:8c:43:d5:64:74:d8:8f:7a:2e:d0:
ed:6c:36:33:dc:50:d8:72:e3:86:8f:46:7b:08:d6:2f:d3:03:
39:22:8c:e1:5a:45:43:e5:ab:fc:4b:7e:66:e1:40:41:c5:ed:
9c:e3:b0:98:cc:2f:7c:fa:96:3a:b5:09:f9:7f:79:de:f7:14:
71:3c:b7:36
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:21:21 2025 by rpki-client