Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/eWuPqO9ni0o5l2uZydKKclk3hVM.roa
File: eWuPqO9ni0o5l2uZydKKclk3hVM.roa (raw, json)
Hash identifier: 8FaN1mQbZf4KLqA4o5uyPwzYrRqVZcW6f97MjMdJqsQ=
Subject key identifier: 79:6B:8F:A8:EF:67:8B:4A:39:97:6B:99:C9:D2:8A:72:59:37:85:53
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018F80626FE4B70CCE9F612E1F77A05E2B51
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/eWuPqO9ni0o5l2uZydKKclk3hVM.roa
Signing time: Thu 16 May 2024 07:51:25 +0000
ROA not before: Thu 16 May 2024 07:51:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5650
IP address blocks: 46.20.99.0/24 maxlen: 24
46.20.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 13:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:62:6f:e4:b7:0c:ce:9f:61:2e:1f:77:a0:5e:2b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: May 16 07:51:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=796b8fa8ef678b4a39976b99c9d28a7259378553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a1:81:8e:44:e2:2f:f8:6a:65:f7:81:c4:ae:
7b:41:20:de:0c:4d:7c:ac:73:86:4d:40:6e:70:b4:
51:bf:a0:85:91:d0:91:88:eb:f5:3b:cb:6f:01:24:
f6:72:6c:29:c0:2e:48:24:f9:21:0f:54:76:75:b9:
d5:77:28:21:0e:15:69:4c:71:81:7b:e4:5e:96:a2:
04:69:91:7e:88:c9:6e:aa:3f:fe:16:8c:86:d9:56:
3b:95:de:a4:6d:8d:18:72:bf:4a:07:21:ff:37:e3:
21:de:0d:02:15:52:b5:fd:bc:93:65:58:98:28:05:
aa:c4:68:7c:7f:62:bf:3f:7e:51:13:41:58:da:af:
67:f3:0b:10:14:a3:30:f9:31:a9:5a:8e:a6:df:4f:
bf:7c:18:a8:d9:d7:c9:59:7e:ff:ba:e2:ff:5e:59:
fc:db:06:84:91:17:2f:1d:25:0e:bb:c0:8f:66:38:
45:4d:ab:ae:ae:ec:2c:1a:f0:fb:cf:65:cb:5d:21:
7b:06:a9:2a:71:f3:29:e3:47:03:ca:32:17:d1:44:
24:8d:08:2c:a7:00:13:bb:b6:63:ca:55:be:8b:e7:
d9:a2:1b:90:e1:69:71:26:f3:80:2b:7c:7e:79:68:
74:25:d7:2a:1d:52:35:cd:5f:cf:e4:ad:b1:79:2c:
b3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6B:8F:A8:EF:67:8B:4A:39:97:6B:99:C9:D2:8A:72:59:37:85:53
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/eWuPqO9ni0o5l2uZydKKclk3hVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.99.0/24
46.20.104.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f7:9b:16:58:4e:4e:39:86:6b:52:15:64:67:fd:ff:f8:f5:
c9:da:90:2d:4f:bf:94:8d:25:ec:b3:9c:0f:e8:16:8f:5c:66:
bf:5d:60:26:9c:84:83:5f:62:3d:81:0c:8b:3d:0c:b8:6b:c1:
92:7e:c9:15:8b:9d:8d:f2:50:ec:2a:6b:0c:1b:dc:57:76:8d:
d4:01:fd:bb:58:6d:61:a7:6a:9c:97:17:05:ca:5b:18:85:b5:
6c:04:68:ea:bf:dc:c2:75:ff:2d:cd:ab:0f:f9:f0:9f:48:f9:
ae:b3:22:35:db:80:fd:9c:ce:38:e3:c8:97:40:ee:0e:73:c4:
67:a5:04:01:c8:b7:29:2a:58:47:72:43:30:b8:d2:29:1a:10:
4e:76:21:58:1a:93:c5:bb:9e:df:29:74:64:33:2f:f3:37:34:
fc:ec:7b:b4:88:ce:fa:22:55:22:78:2d:36:c8:a6:6f:e2:d1:
59:38:79:fd:49:c6:83:16:a6:29:34:60:d4:11:32:c1:40:23:
da:cd:84:ed:ec:f1:57:eb:f9:46:09:d1:b7:b4:cf:b5:d2:03:
08:72:cb:b6:81:0e:04:b6:df:40:03:d8:0a:f6:cc:54:26:cc:
b2:d5:96:4f:24:5a:72:ce:3a:ba:9f:2e:9d:8b:49:ca:19:58:
ab:85:ce:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:13:11 2025 by rpki-client