Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/ePI5Mvvbypjx3_VY-6NBtvMTTPY.roa
File: ePI5Mvvbypjx3_VY-6NBtvMTTPY.roa (raw, json)
Hash identifier: Jl1i1g/yY80kzc+L7fyAw9DapoGmRg26mDMtaeEs8m0=
Subject key identifier: 78:F2:39:32:FB:DB:CA:98:F1:DF:F5:58:FB:A3:41:B6:F3:13:4C:F6
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 0193967A4F77AB47717438CDE9E9B4AF34D6
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/ePI5Mvvbypjx3_VY-6NBtvMTTPY.roa
Signing time: Thu 05 Dec 2024 11:00:18 +0000
ROA not before: Thu 05 Dec 2024 11:00:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48449
IP address blocks: 46.20.103.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.160.195.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Dec 2024 08:21:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:96:7a:4f:77:ab:47:71:74:38:cd:e9:e9:b4:af:34:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Dec 5 11:00:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78f23932fbdbca98f1dff558fba341b6f3134cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:a2:84:e3:2a:be:77:44:89:5c:f8:65:2a:
88:cb:aa:4f:ec:3f:c9:77:4a:9b:80:bd:b8:fa:2e:
c4:73:97:72:f8:cf:dd:9e:96:e0:ff:62:e3:9d:85:
47:7d:54:6b:3c:01:8f:a9:3b:a4:03:e3:7d:98:da:
c8:2b:74:a8:0f:71:19:a9:0c:38:d7:ad:d4:63:58:
16:c8:68:0a:2f:29:4d:03:e6:ed:c5:7c:97:c5:b2:
65:73:7a:06:69:d8:55:fa:45:7c:4b:2d:f7:12:82:
19:51:b3:e4:04:ed:f3:d9:0f:67:25:eb:47:0f:ef:
e7:91:ea:69:d8:61:84:5c:86:eb:ef:3f:08:ef:31:
28:df:90:e2:1f:37:c7:88:fb:1a:26:0d:0d:e5:25:
ce:f6:7d:bd:2a:ac:a0:8d:50:e6:8b:04:ed:8e:95:
b2:5d:b8:b4:8a:f1:44:bb:c8:68:8f:a1:89:dc:00:
62:2e:38:0c:ff:40:59:d1:bd:2a:c1:9b:ca:62:56:
1a:e5:e5:07:6e:3c:28:9c:ed:30:d4:21:b8:b2:a7:
0e:e5:2d:57:de:b2:50:0e:8b:3f:e3:19:05:e6:12:
4f:de:61:6a:1f:69:a3:95:24:6e:10:f6:0f:fc:bb:
25:f9:95:af:66:79:83:81:83:38:1a:9d:e1:b4:9d:
c0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F2:39:32:FB:DB:CA:98:F1:DF:F5:58:FB:A3:41:B6:F3:13:4C:F6
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/ePI5Mvvbypjx3_VY-6NBtvMTTPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.103.0/24
185.160.194.0/23
185.169.221.0-185.169.223.255
Signature Algorithm: sha256WithRSAEncryption
92:18:56:75:52:17:6d:04:f9:ab:40:5c:31:fd:38:75:6e:4e:
94:a6:5f:f9:d6:2d:8a:a7:5b:72:fa:1a:7d:45:e1:68:b6:07:
39:f4:c6:2c:b0:c0:23:77:35:79:b8:4d:25:f2:6c:eb:fa:30:
ec:e1:1b:ee:fc:9a:b1:83:a6:fc:62:16:ce:31:df:71:1d:62:
7b:0b:5c:07:8a:af:56:b8:de:06:92:3d:e7:82:fc:ba:bf:98:
c3:f7:a1:80:b9:e3:b4:98:a9:2b:96:ea:8f:c9:22:44:fa:8d:
05:f2:2e:e1:cd:a8:94:a3:e1:31:29:41:3f:68:8e:2c:b9:2c:
d0:aa:3f:ac:89:ba:30:5d:4d:83:d6:f7:36:12:45:f1:20:be:
1e:84:9f:70:0d:a0:69:b7:51:63:3d:81:43:29:b8:12:e4:23:
17:31:20:a9:cf:f6:e1:a7:4c:38:d8:7a:09:5f:5a:4f:34:52:
c1:03:49:b6:34:67:21:d3:5c:b6:3b:95:73:36:27:10:f7:84:
c7:d1:28:f2:e8:a0:26:f1:2c:f4:0a:c6:0a:76:90:81:29:c5:
ba:f1:4c:77:66:82:08:96:7e:d4:15:9a:d1:4d:0a:4c:ff:d2:
e1:1b:47:20:a7:4c:e5:a8:dc:df:dd:bc:50:7c:4e:cb:25:e5:
ef:84:ec:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:20:25 2025 by rpki-client