Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/KqcDEw7LMQ5cYa52BqvB8Ek1JAM.roa
File: KqcDEw7LMQ5cYa52BqvB8Ek1JAM.roa (raw, json)
Hash identifier: D1vVsuv+J3ljDC9EX9x5jayUjJwr0+kC5Q65L3kVEVI=
Subject key identifier: 2A:A7:03:13:0E:CB:31:0E:5C:61:AE:76:06:AB:C1:F0:49:35:24:03
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 0192B8BBEE99861CFFBD75D5A0979B880300
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/KqcDEw7LMQ5cYa52BqvB8Ek1JAM.roa
Signing time: Wed 23 Oct 2024 09:36:16 +0000
ROA not before: Wed 23 Oct 2024 09:36:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.20.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 09:43:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b8:bb:ee:99:86:1c:ff:bd:75:d5:a0:97:9b:88:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Oct 23 09:36:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2aa703130ecb310e5c61ae7606abc1f049352403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:e3:df:c2:5f:29:be:d2:2c:98:d6:fd:60:
f5:03:75:3b:e7:d8:c0:4d:04:9a:dc:8c:97:4e:97:
cc:1c:8f:1f:d1:de:04:b3:78:8b:51:d9:fc:2b:23:
73:4f:40:c4:0b:f6:99:59:61:15:68:8b:4f:b3:f6:
11:54:08:9e:af:00:80:2e:be:77:43:35:8f:4c:e3:
c9:b1:75:ad:e0:77:96:da:8d:42:61:19:83:2e:03:
b1:ca:5f:c5:39:98:81:72:72:75:89:8b:9c:04:d0:
27:f1:94:f7:0b:4b:46:75:b1:ff:2e:74:53:60:c2:
4c:e1:ac:35:13:2b:9c:5b:f8:ff:44:38:ea:c9:4c:
33:40:6a:30:c0:bf:75:23:a4:48:cf:c2:0a:47:13:
6e:96:32:76:f8:34:56:f5:89:58:60:b0:8c:47:d9:
23:ed:a7:f6:f1:8c:59:5f:48:00:42:58:ad:4c:d2:
d2:bf:46:cc:38:a5:b4:7d:40:6c:76:fd:bb:af:e7:
9d:63:00:bb:f7:7e:a6:64:5f:4c:17:11:43:cd:25:
90:ee:1a:1f:5b:9f:a3:41:1b:89:76:4e:b1:4b:19:
0b:97:cc:f6:e9:8b:d6:28:00:a7:64:25:06:5e:dc:
d0:28:75:74:a5:e3:b6:e4:26:80:f5:90:93:9c:fc:
0e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A7:03:13:0E:CB:31:0E:5C:61:AE:76:06:AB:C1:F0:49:35:24:03
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/KqcDEw7LMQ5cYa52BqvB8Ek1JAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.100.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:76:b6:9f:a4:dd:db:b3:b9:a1:16:6a:20:ab:ea:10:88:99:
de:57:0a:bf:98:93:65:f5:06:2e:f3:13:69:d9:62:58:a5:2a:
3c:0d:fa:59:db:29:98:d9:f6:7d:b9:d4:b8:46:8d:7c:6d:be:
1c:fb:62:ea:c8:06:f6:b9:07:ce:d5:1d:60:09:d8:a7:52:41:
77:d2:c6:5d:fe:79:3f:d9:8e:f1:e7:08:85:07:51:76:48:ca:
68:48:3c:7e:47:8b:fe:8b:db:35:67:5e:2f:b8:b9:84:d5:e5:
2d:5d:e8:22:d1:9d:a0:30:64:e6:45:7a:4d:ac:19:1c:7a:a1:
e0:f8:e1:ef:93:4f:5d:71:5b:0f:61:6c:e3:2e:a1:3a:37:4d:
8a:1e:b4:4f:be:97:4b:90:90:be:e8:2c:11:72:b5:da:15:0f:
6a:d5:86:84:fa:82:ec:00:41:a9:5b:c2:ff:b7:86:aa:21:db:
a6:a8:a4:a1:20:f3:8e:8e:d6:36:f6:11:68:ff:02:44:54:16:
85:57:c8:ed:4d:ac:cb:43:22:41:83:f1:57:f8:98:50:11:d1:
f6:97:e3:77:ba:35:20:98:28:ab:62:e9:85:ab:3a:58:33:62:
b4:0b:4a:76:55:57:0c:82:37:ed:21:4b:b9:9e:35:f0:d0:2d:
55:58:3c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:22:56 2025 by rpki-client