Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/B8rwftGD8YDJnk49pznAyjvTTNw.roa
File: B8rwftGD8YDJnk49pznAyjvTTNw.roa (raw, json)
Hash identifier: 2tf9mCstVcFLJ1ZysMI0NwciXTNMohtlJuC9fE5Cx9Q=
Subject key identifier: 07:CA:F0:7E:D1:83:F1:80:C9:9E:4E:3D:A7:39:C0:CA:3B:D3:4C:DC
Certificate issuer: /CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Certificate serial: 018CC726511A608503C058A8D41EEE0B057B
Authority key identifier: 5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/B8rwftGD8YDJnk49pznAyjvTTNw.roa
Signing time: Mon 01 Jan 2024 22:30:26 +0000
ROA not before: Mon 01 Jan 2024 22:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42816
IP address blocks: 46.16.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:51:1a:60:85:03:c0:58:a8:d4:1e:ee:0b:05:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Validity
Not Before: Jan 1 22:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07caf07ed183f180c99e4e3da739c0ca3bd34cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:03:46:9b:8f:e6:74:30:26:09:78:f7:de:3d:
b8:91:6b:99:11:55:be:aa:92:93:a5:2a:f0:f9:4f:
9c:d4:d1:5f:23:23:c0:91:2c:93:57:2e:cd:8c:b4:
d1:e2:72:26:56:05:a6:b5:e4:71:13:12:7d:ba:da:
b0:fa:98:6c:0c:c5:28:48:4f:c4:ed:ba:00:36:c2:
cc:e7:6a:8b:54:35:a6:7a:a3:85:af:a0:fd:65:5f:
1e:d5:6a:73:ed:e5:3b:55:ce:95:1f:67:33:4f:71:
9d:aa:d8:2a:ed:7f:75:4d:18:5c:bb:0e:aa:ef:44:
4c:b4:8f:6c:2a:e3:8f:bb:72:fa:d2:ee:14:f8:3d:
d4:a7:8b:92:a1:c0:90:8d:69:df:91:d3:06:ae:cc:
96:0a:d6:21:d6:c9:4a:4a:20:b7:5a:2c:fb:b7:d8:
92:23:fc:2d:e2:49:b9:d8:89:6e:90:58:e4:88:b8:
cf:f0:e1:8f:9c:64:df:c2:54:ae:86:d1:01:06:a6:
15:d8:b7:b5:b6:4f:13:3a:5c:4e:fb:57:5a:8c:b3:
09:7f:78:ac:a2:e3:86:1a:aa:76:5b:9b:34:1f:55:
dd:44:08:be:6e:a1:96:ef:15:46:54:7c:e7:32:5c:
48:f6:94:90:cd:7f:8f:96:92:5a:0b:d5:d8:7d:c2:
37:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CA:F0:7E:D1:83:F1:80:C9:9E:4E:3D:A7:39:C0:CA:3B:D3:4C:DC
X509v3 Authority Key Identifier:
keyid:5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/B8rwftGD8YDJnk49pznAyjvTTNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.39.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:42:e9:69:86:e2:89:2d:87:2c:09:52:0d:49:2f:4b:71:69:
e1:7e:be:c2:a3:f3:ee:b4:85:43:12:97:32:d0:2a:88:e0:e1:
46:4b:bc:8c:2a:37:68:58:1a:48:f9:cc:f4:1c:ee:a8:f1:80:
d0:6f:eb:af:4c:a7:b4:1f:66:b7:95:06:9c:d4:4f:06:bc:09:
ca:82:44:d0:2e:67:e7:e0:01:92:79:a8:1e:7b:bb:d4:79:ca:
f9:b6:d8:a8:39:09:90:80:7d:ee:f4:2c:ff:84:59:1d:a8:8d:
b6:1e:cf:63:16:db:c9:4e:23:59:11:38:78:60:9f:65:df:be:
d9:3e:0f:b3:11:2f:ff:7c:69:79:5f:c6:d9:24:43:59:e5:3b:
11:66:e0:46:df:dc:bc:60:b9:54:be:43:f7:35:2a:ce:b4:b0:
1f:dd:49:61:90:33:5f:b3:1b:73:0a:49:a4:9e:7d:78:8d:40:
47:d4:f0:c7:3c:f0:75:f0:19:d6:d5:86:18:25:72:ab:7f:77:
ef:9c:cc:8d:82:4b:0f:97:e1:69:73:89:75:6c:c6:fe:e9:5b:
1e:9b:7a:7f:85:bc:af:14:69:16:41:5b:5a:b4:dd:f6:be:a9:
e9:fc:d3:fc:d6:95:04:e9:1c:29:ef:aa:0b:f6:5b:6a:85:cc:
30:ed:c1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:18:52 2025 by rpki-client