Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/V_rux9A-K76_L-5JIgrFPqL8XhU.roa
File: V_rux9A-K76_L-5JIgrFPqL8XhU.roa (raw, json)
Hash identifier: vvKWZ5yhRpw1/9gLRie+5q9Ug9kB9CxhwuZWKvYSL3s=
Subject key identifier: 57:FA:EE:C7:D0:3E:2B:BE:BF:2F:EE:49:22:0A:C5:3E:A2:FC:5E:15
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018F239AED35A707CB27F67E65D03DCEEB26
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/V_rux9A-K76_L-5JIgrFPqL8XhU.roa
Signing time: Sun 28 Apr 2024 07:28:26 +0000
ROA not before: Sun 28 Apr 2024 07:28:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54339
IP address blocks: 46.20.97.0/24 maxlen: 24
46.20.105.0/24 maxlen: 24
46.20.111.0/24 maxlen: 24
185.100.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 08:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:23:9a:ed:35:a7:07:cb:27:f6:7e:65:d0:3d:ce:eb:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Apr 28 07:28:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57faeec7d03e2bbebf2fee49220ac53ea2fc5e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:45:9c:50:09:79:52:50:f2:9d:26:f0:de:c1:
47:c4:80:f3:f3:6a:6a:9d:7a:35:9b:c4:44:36:1f:
a7:e8:de:56:b7:c2:aa:cb:1e:8f:48:96:f0:93:93:
19:83:64:d8:7d:17:86:4a:08:7b:16:02:a2:83:df:
8f:15:49:eb:fd:20:17:ae:08:0c:7e:cb:71:0b:c9:
c0:e7:a8:05:7d:1b:d9:d3:81:e9:63:15:cd:f3:39:
cb:19:22:53:b4:78:80:2f:c2:8f:33:d6:6d:c8:04:
32:f4:ef:dd:32:13:c5:40:cf:ac:07:ad:f1:de:7b:
9d:68:23:b2:b4:dc:8f:21:48:e6:43:c1:a7:dd:46:
5d:31:08:11:63:4d:50:f8:5e:b4:0e:cb:f9:d4:b0:
3c:09:80:56:86:f1:21:3c:32:3a:96:27:d3:2c:a6:
c6:e8:77:69:7e:f8:04:0d:0d:61:0a:52:b2:6d:eb:
1f:35:fd:34:a9:72:93:fd:90:3f:9f:cb:36:32:9b:
94:1e:3c:e3:86:c9:4d:a0:5d:09:e2:94:9f:1a:1e:
55:3e:8d:4d:1e:a5:d8:b8:5a:9a:fb:2b:42:ed:2b:
62:f6:68:fb:0f:5c:0b:4b:ab:ce:81:0c:19:8b:1a:
d2:c0:4b:b2:97:4c:cc:cd:1d:3d:84:02:32:97:fd:
4e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FA:EE:C7:D0:3E:2B:BE:BF:2F:EE:49:22:0A:C5:3E:A2:FC:5E:15
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/V_rux9A-K76_L-5JIgrFPqL8XhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.97.0/24
46.20.105.0/24
46.20.111.0/24
185.100.168.0/24
Signature Algorithm: sha256WithRSAEncryption
50:6d:2d:63:a2:03:b0:1c:a5:fd:49:ca:63:03:8e:47:f8:bd:
93:3d:1e:b1:4f:74:42:73:c3:9b:ef:ba:3b:a0:da:85:e0:20:
d2:26:bb:f0:a2:d5:79:88:94:64:e9:fb:26:db:11:00:6f:b6:
a9:4f:dc:6a:43:4d:46:8b:58:8a:df:a5:09:63:6c:1a:80:fc:
34:50:9e:93:ed:b0:bd:f0:85:34:33:e5:a3:91:fa:23:08:35:
8f:5d:ec:8d:1f:21:be:8c:7f:c3:12:56:e1:cd:57:07:64:f6:
a1:85:80:ce:16:31:5f:59:f5:a0:55:b8:3c:7f:13:51:fb:0c:
3d:63:1c:a8:4c:11:aa:09:fd:a9:5e:16:9e:e2:9a:bd:74:ba:
6f:3b:0e:bd:a7:4b:dc:b8:4a:db:56:e7:4e:9c:f2:05:c3:3b:
c4:ea:9a:ef:ff:86:a8:c2:b2:22:0b:3e:ea:51:52:23:03:41:
e1:d1:3c:39:f9:4a:be:b1:ed:d4:18:03:2b:d0:09:f5:06:98:
e1:32:cc:f2:ff:c5:6d:8f:f8:26:bf:e2:00:8a:20:67:8f:4b:
5b:e5:2e:a3:7d:dd:c8:80:4a:45:46:26:f1:a6:84:d2:38:1a:
f5:dc:9d:6b:ca:aa:ae:7a:78:ce:69:8a:34:35:1b:9e:b2:13:
53:1b:e0:00
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY8jmu01pwfLJ/Z+ZdA9zusmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx
ZTllNjUwHhcNMjQwNDI4MDcyODI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2ZhZWVjN2QwM2UyYmJlYmYyZmVlNDkyMjBhYzUzZWEyZmM1ZTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0WcUAl5UlDynSbw3sFHxIDz82pq
nXo1m8RENh+n6N5Wt8Kqyx6PSJbwk5MZg2TYfReGSgh7FgKig9+PFUnr/SAXrggM
fstxC8nA56gFfRvZ04HpYxXN8znLGSJTtHiAL8KPM9ZtyAQy9O/dMhPFQM+sB63x
3nudaCOytNyPIUjmQ8Gn3UZdMQgRY01Q+F60Dsv51LA8CYBWhvEhPDI6lifTLKbG
6HdpfvgEDQ1hClKybesfNf00qXKT/ZA/n8s2MpuUHjzjhslNoF0J4pSfGh5VPo1N
HqXYuFqa+ytC7Sti9mj7D1wLS6vOgQwZixrSwEuyl0zMzR09hAIyl/1ODQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFf67sfQPiu+vy/uSSIKxT6i/F4VMB8GA1UdIwQY
MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct
MzU1MDgwNDE2NTJkLzEvVl9ydXg5QS1LNzZfTC01SklnckZQcUw4WGhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk
LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALhRhAwQA
LhRpAwQALhRvAwQAuWSoMA0GCSqGSIb3DQEBCwUAA4IBAQBQbS1jogOwHKX9Scpj
A45H+L2TPR6xT3RCc8Ob77o7oNqF4CDSJrvwotV5iJRk6fsm2xEAb7apT9xqQ01G
i1iK36UJY2wagPw0UJ6T7bC98IU0M+WjkfojCDWPXeyNHyG+jH/DElbhzVcHZPah
hYDOFjFfWfWgVbg8fxNR+ww9YxyoTBGqCf2pXhae4pq9dLpvOw69p0vcuErbVudO
nPIFwzvE6prv/4aowrIiCz7qUVIjA0Hh0Tw5+Uq+se3UGAMr0An1BpjhMszy/8Vt
j/gmv+IAiiBnj0tb5S6jfd3IgEpFRibxpoTSOBr13J1ryqquenjOaYo0NRueshNT
G+AA
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:14:50 2025 by rpki-client