Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ByDLrt2RC_tJTUazlYGaBCY57pI.roa
File: ByDLrt2RC_tJTUazlYGaBCY57pI.roa (raw, json)
Hash identifier: SYyu32SGq3zPAjrsSwEOE0KuYzcHA2Ubk4cjozto/VQ=
Subject key identifier: 07:20:CB:AE:DD:91:0B:FB:49:4D:46:B3:95:81:9A:04:26:39:EE:92
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01936F20A3ED4C6332DC42D8D71D0158E270
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ByDLrt2RC_tJTUazlYGaBCY57pI.roa
Signing time: Wed 27 Nov 2024 19:37:10 +0000
ROA not before: Wed 27 Nov 2024 19:37:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214003
IP address blocks: 46.38.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Dec 2024 07:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6f:20:a3:ed:4c:63:32:dc:42:d8:d7:1d:01:58:e2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Nov 27 19:37:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0720cbaedd910bfb494d46b395819a042639ee92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:ef:9c:fb:27:26:04:f0:3f:db:75:40:62:
fb:54:3b:f6:fd:a2:2a:13:37:18:eb:b0:d1:14:ab:
29:ec:0f:5f:37:ef:d0:7c:5b:15:d2:f7:4f:f1:64:
c9:00:29:51:7d:47:8b:fe:27:56:02:65:42:dc:7f:
a8:ea:c0:b8:aa:74:13:12:8e:3a:de:a2:d5:f2:b5:
e4:83:c5:08:ec:76:6a:c9:5e:80:20:1a:8d:8f:af:
cb:72:e5:ff:ec:98:f6:24:ae:be:4d:0b:66:c6:7d:
49:7d:b1:11:21:21:c3:14:ca:1f:f8:ba:e9:25:52:
ad:e3:58:58:7c:30:8e:dc:67:0f:bb:31:33:3b:c4:
d5:42:d5:35:fc:c1:ee:5d:34:b0:42:43:36:d6:c3:
ba:c3:dd:eb:1a:8f:ff:7f:e2:5d:db:2a:dd:91:d7:
d4:70:7b:81:8e:4b:ba:ad:cb:4a:61:aa:87:9c:a1:
5e:6d:c3:48:16:52:0c:f4:06:58:0d:3a:f7:e3:4b:
62:e5:b2:f7:c4:e1:f5:a9:51:df:56:3c:df:62:41:
c8:83:21:84:9b:c8:4b:80:29:46:35:4b:af:2b:86:
9b:b2:11:fd:e8:fd:4f:05:6b:d6:3c:83:cd:15:23:
02:1f:1b:76:61:06:ef:c5:92:df:5a:ed:0b:a4:b7:
c3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:20:CB:AE:DD:91:0B:FB:49:4D:46:B3:95:81:9A:04:26:39:EE:92
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ByDLrt2RC_tJTUazlYGaBCY57pI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.154.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:c8:2f:59:c6:d6:bb:48:d5:f2:98:93:71:17:e0:a8:0b:2b:
4e:42:8b:f8:e0:f1:a4:63:1d:fa:b7:f4:21:24:24:98:4d:24:
3f:be:ee:bb:37:f7:39:dd:f9:c4:dd:8e:28:bb:6a:31:71:dc:
f1:b2:a6:0f:16:92:98:9c:15:b7:1d:fc:ec:f2:bf:a9:56:4d:
08:fd:e1:ae:23:0b:11:bc:bb:12:a8:e3:2d:b3:df:3a:9d:5d:
de:da:3f:da:66:d6:17:a6:dd:b6:b5:f6:1d:97:bb:b3:05:25:
54:05:7b:0d:7a:12:fb:52:56:7c:2a:9e:6f:71:f6:2d:e2:53:
7a:af:5b:ff:34:59:97:58:74:f9:0f:b2:21:65:9e:8c:bc:7b:
ff:59:42:26:6e:f7:4b:a4:51:34:56:a1:b7:81:c4:12:0e:4c:
77:54:eb:b5:fb:ba:2a:6d:d2:06:6f:25:ac:3b:b6:02:1a:64:
1b:00:72:38:fa:a1:1e:7e:22:7e:c0:ab:e0:c5:36:02:18:fc:
7a:46:f7:dd:a9:e8:57:2a:4a:0a:82:37:fb:40:d1:c9:a7:b6:
5a:f2:9a:9e:ee:a5:bd:aa:75:26:09:78:48:49:f7:b0:19:d7:
45:ee:57:b5:17:23:ec:6f:c1:e0:13:a7:98:ef:e4:69:18:0c:
66:f4:80:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNvIKPtTGMy3ELY1x0BWOJwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjQxMTI3MTkzNzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzIwY2JhZWRkOTEwYmZiNDk0ZDQ2YjM5NTgxOWEwNDI2MzllZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG/vnPsnJgTwP9t1QGL7VDv2/aIq
EzcY67DRFKsp7A9fN+/QfFsV0vdP8WTJAClRfUeL/idWAmVC3H+o6sC4qnQTEo46
3qLV8rXkg8UI7HZqyV6AIBqNj6/LcuX/7Jj2JK6+TQtmxn1JfbERISHDFMof+Lrp
JVKt41hYfDCO3GcPuzEzO8TVQtU1/MHuXTSwQkM21sO6w93rGo//f+Jd2yrdkdfU
cHuBjku6rctKYaqHnKFebcNIFlIM9AZYDTr340ti5bL3xOH1qVHfVjzfYkHIgyGE
m8hLgClGNUuvK4abshH96P1PBWvWPIPNFSMCHxt2YQbvxZLfWu0LpLfD4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAcgy67dkQv7SU1Gs5WBmgQmOe6SMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvQnlETHJ0MlJDX3RKVFVhemxZR2FCQ1k1N3BJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiaaMA0G
CSqGSIb3DQEBCwUAA4IBAQCxyC9Zxta7SNXymJNxF+CoCytOQov44PGkYx36t/Qh
JCSYTSQ/vu67N/c53fnE3Y4ou2oxcdzxsqYPFpKYnBW3Hfzs8r+pVk0I/eGuIwsR
vLsSqOMts986nV3e2j/aZtYXpt22tfYdl7uzBSVUBXsNehL7UlZ8Kp5vcfYt4lN6
r1v/NFmXWHT5D7IhZZ6MvHv/WUImbvdLpFE0VqG3gcQSDkx3VOu1+7oqbdIGbyWs
O7YCGmQbAHI4+qEefiJ+wKvgxTYCGPx6RvfdqehXKkoKgjf7QNHJp7Za8pqe7qW9
qnUmCXhISfewGddF7le1FyPsb8HgE6eY7+RpGAxm9IDX
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:55:02 2025 by rpki-client