Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/80g8f2FIyAfIbZkg060jYJHa2To.roa
File: 80g8f2FIyAfIbZkg060jYJHa2To.roa (raw, json)
Hash identifier: lSHmUKj+lFo7UpRpXyCPwWnBiseRKTNfKG2t9941ggU=
Subject key identifier: F3:48:3C:7F:61:48:C8:07:C8:6D:99:20:D3:AD:23:60:91:DA:D9:3A
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0194222003A798E35EDA6E82360C096E8A82
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/80g8f2FIyAfIbZkg060jYJHa2To.roa
Signing time: Wed 01 Jan 2025 13:48:30 +0000
ROA not before: Wed 01 Jan 2025 13:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200239
IP address blocks: 46.38.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 12:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:03:a7:98:e3:5e:da:6e:82:36:0c:09:6e:8a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 1 13:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3483c7f6148c807c86d9920d3ad236091dad93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:47:94:7e:2b:c1:4f:bb:25:e2:ff:a2:17:ea:
ae:d9:40:a4:77:f6:63:40:f4:09:bd:da:54:db:37:
59:58:3e:e0:e8:d9:20:df:22:60:8e:d4:08:cd:1a:
7a:d9:ae:74:40:8b:fd:79:e7:23:01:ef:c7:e7:af:
3d:f0:b1:d1:f9:5e:12:de:83:5e:6c:19:68:88:bf:
c5:e9:20:fc:1e:bc:a0:ea:cc:09:a2:60:41:e7:99:
56:a2:60:26:02:4d:cf:68:76:11:53:29:e9:ea:4a:
ff:04:8d:3c:9e:46:48:03:13:b8:eb:6b:28:db:95:
d6:4c:45:a3:7b:bb:46:63:8d:23:e6:45:21:47:c9:
ec:6f:8a:3e:b4:b1:8b:d2:8e:22:fd:d7:cb:b6:8d:
b1:f0:08:1a:ff:0d:4f:3b:af:e6:27:3e:59:98:b6:
bb:bd:6a:45:45:9b:9f:63:3c:a1:98:c7:61:de:76:
0a:1d:23:75:65:66:5b:d9:f3:d3:12:b1:7e:a6:d5:
85:2e:2c:dc:80:4c:e1:32:ca:0a:b2:1e:93:b3:10:
df:05:80:18:8f:c3:c8:bc:4e:78:40:67:c8:1e:d6:
01:af:a3:a7:58:b5:e7:03:78:2b:01:f7:6e:3c:59:
6a:28:38:b0:13:e0:aa:bb:32:7c:a1:76:09:df:86:
10:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:48:3C:7F:61:48:C8:07:C8:6D:99:20:D3:AD:23:60:91:DA:D9:3A
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/80g8f2FIyAfIbZkg060jYJHa2To.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.153.0/24
Signature Algorithm: sha256WithRSAEncryption
28:22:23:36:04:47:8d:62:ef:44:2d:c7:a3:b1:05:e6:31:9b:
93:c8:2e:37:80:7e:39:67:39:19:fa:a3:b0:b7:be:fb:75:6f:
cf:90:c2:fb:88:73:4a:7d:a4:c3:a2:ce:92:7b:06:c2:13:52:
e3:8a:d0:0d:53:b9:d6:cf:18:ea:4d:fb:9d:70:dd:d6:0b:0a:
2b:d7:5e:1c:c3:e6:03:d1:46:29:cf:0f:99:73:39:f9:69:ba:
a8:f5:dd:5b:a3:98:bf:4f:77:04:7a:4b:7c:e5:16:e4:a5:a7:
11:ad:c1:16:49:50:c2:a9:e0:c9:64:87:e4:0b:27:5e:aa:94:
1f:fa:ba:f5:6f:85:9d:b4:22:0a:9f:83:46:bf:c8:08:c1:51:
5c:5d:75:a2:d6:0d:e7:93:41:af:05:97:e3:0e:ad:49:1a:7d:
70:f8:b6:4f:14:1b:39:35:a9:82:ba:1b:e6:9e:68:fc:84:cb:
2b:c7:3d:15:d4:e0:79:75:a3:d7:0a:04:2f:a1:b2:4f:bb:8c:
2b:46:d5:81:de:4a:70:3d:c1:0e:9b:12:a1:55:df:01:f5:52:
ed:aa:8c:35:a1:04:a8:c9:c3:1b:a2:1f:f1:99:c7:e2:ce:90:
fa:1c:37:e3:cc:d4:1f:c9:20:12:36:88:4b:88:c4:c6:c8:6d:
f4:ca:01:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:45:24 2025 by rpki-client