Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/ScZY3BnKhx4bBLxU-HndExo1R3s.roa
File: ScZY3BnKhx4bBLxU-HndExo1R3s.roa (raw, json)
Hash identifier: C9PGiFiJFEjuEC3oDXx7qjBr83icgIOhxElnd35ayDo=
Subject key identifier: 49:C6:58:DC:19:CA:87:1E:1B:04:BC:54:F8:79:DD:13:1A:35:47:7B
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0194739BEF032478D22EBC4D3151E23210BF
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/ScZY3BnKhx4bBLxU-HndExo1R3s.roa
Signing time: Fri 17 Jan 2025 09:33:06 +0000
ROA not before: Fri 17 Jan 2025 09:33:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 46.8.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jan 2025 07:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:9b:ef:03:24:78:d2:2e:bc:4d:31:51:e2:32:10:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 17 09:33:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49c658dc19ca871e1b04bc54f879dd131a35477b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:a1:f6:09:ac:e6:04:5c:b7:ad:ee:35:8e:
23:fd:ec:92:3a:2a:64:f5:60:82:6b:40:51:5f:e2:
73:25:af:63:44:44:13:a2:ce:7b:0d:78:6b:7f:f0:
c9:12:98:99:10:7b:f6:87:dc:fb:e6:65:28:fe:85:
bb:77:e7:71:e3:c9:ae:61:4c:1b:d7:25:11:f0:2b:
30:44:53:38:ff:55:58:5f:ab:63:17:8d:f0:72:bc:
ce:3f:15:cd:a3:bd:b9:79:a1:13:0b:b6:fe:ea:9c:
29:b4:34:90:20:66:55:3f:aa:b9:45:bd:6e:aa:f6:
95:fb:2e:ff:67:69:29:8d:ac:95:94:43:31:14:26:
83:46:e2:07:66:db:3d:c1:75:25:99:8b:1b:87:db:
00:41:1f:21:cd:4c:b8:f3:b1:20:49:f2:63:46:3c:
34:f5:d6:2d:a0:49:72:ca:1c:9e:dc:97:9e:95:d2:
fe:e6:36:09:12:bc:4a:d0:42:98:ef:fa:4e:f8:92:
84:27:2d:17:64:24:30:f5:b7:f2:08:fa:9a:27:db:
81:cc:ae:73:ed:2f:5e:83:e8:fe:5f:da:da:4a:9f:
18:90:c9:4b:0d:f0:f0:d6:78:b0:83:46:aa:88:b4:
ef:9e:09:54:99:df:e2:4d:9f:d5:72:a4:01:24:32:
d9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C6:58:DC:19:CA:87:1E:1B:04:BC:54:F8:79:DD:13:1A:35:47:7B
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/ScZY3BnKhx4bBLxU-HndExo1R3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.186.0/24
Signature Algorithm: sha256WithRSAEncryption
48:08:d0:3b:ad:5e:64:fc:ba:40:da:69:72:44:50:24:19:8b:
7d:74:16:b5:27:d8:82:98:a3:10:b4:8c:45:cf:88:a6:fc:98:
b6:22:bc:d3:d7:77:ed:1b:3f:9b:ac:11:eb:4e:e9:97:32:67:
93:c9:cf:b3:34:15:e5:1a:a7:10:08:fb:a6:92:91:84:38:9b:
af:28:02:9b:72:84:18:14:06:48:9a:91:02:fc:a2:6b:22:65:
cb:ed:25:8e:57:91:72:5d:f1:a4:27:f6:96:cc:52:5d:2f:10:
02:e2:5b:74:53:c9:4c:bc:d8:0c:27:c6:8e:e9:ad:aa:94:08:
4d:da:4e:0d:08:61:a6:ed:c7:dc:5f:9d:eb:6a:1a:50:3a:9e:
ef:d4:62:04:fe:47:e8:c7:7b:0b:53:e2:7f:f8:64:5d:6d:fc:
60:52:29:d3:37:19:80:ea:e8:59:3c:57:01:31:a1:b7:71:ff:
a7:0e:90:82:96:53:c7:0e:d5:a7:ae:18:6a:d1:a8:f6:c2:0c:
80:0b:da:70:b4:a8:b8:72:f4:05:e1:73:4d:ac:c7:4b:2a:10:
3b:69:a0:8f:2b:77:37:3a:03:54:c8:7c:d2:5e:33:3e:02:27:
e6:92:2a:4c:8a:8d:95:75:05:1f:9c:06:32:4e:73:4c:15:61:
ac:29:7d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:15:31 2025 by rpki-client