Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HOzcK9w082dwVN67Bi4e8Xlowi8.roa
File: HOzcK9w082dwVN67Bi4e8Xlowi8.roa (raw, json)
Hash identifier: KO8K6qyerFfJN+uBWT5KE31Wvl4jXugM8zygJKZ8nXg=
Subject key identifier: 1C:EC:DC:2B:DC:34:F3:67:70:54:DE:BB:06:2E:1E:F1:79:68:C2:2F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194E5452169D02FD3EC88FFAE0039108823
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HOzcK9w082dwVN67Bi4e8Xlowi8.roa
Signing time: Sat 08 Feb 2025 11:15:00 +0000
ROA not before: Sat 08 Feb 2025 11:15:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211560
IP address blocks: 46.102.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Feb 2025 10:14:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e5:45:21:69:d0:2f:d3:ec:88:ff:ae:00:39:10:88:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 8 11:15:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cecdc2bdc34f3677054debb062e1ef17968c22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:91:e4:81:8b:9e:e1:b5:13:c1:b9:4b:fa:28:
40:7d:99:75:4f:a2:2f:ab:ae:41:85:96:29:cb:7d:
19:46:e1:a6:73:6a:d5:02:8b:e2:3c:04:09:37:d2:
7d:5a:d8:c0:cb:3b:fa:5f:e0:c4:f8:fc:b0:84:8e:
d7:ce:42:dc:20:74:bb:46:45:4b:13:2b:3c:3e:07:
f4:eb:06:e6:fb:a3:70:bd:28:3e:30:eb:b5:12:97:
46:3c:e7:c2:52:22:c5:39:b6:c3:7a:db:d0:4f:17:
47:2b:d7:c8:84:f1:8c:c5:ea:13:c3:0d:e3:10:81:
a4:72:02:a7:d3:67:06:1c:b3:f9:65:8c:89:1b:4e:
28:49:59:7c:14:7c:cb:72:83:96:4e:99:71:d2:ac:
96:18:cf:6c:81:fa:4a:a3:f2:6b:12:0c:58:45:18:
27:c7:30:a7:fa:7b:ef:f0:7e:24:b0:ff:36:ee:6d:
11:3e:26:06:f8:fb:76:e0:82:c4:2f:d6:f3:26:b9:
fd:72:b2:6e:0a:ae:34:be:ee:10:be:1d:34:49:80:
f3:0f:d9:26:b8:16:eb:7b:d2:87:11:20:96:e5:6b:
37:58:0f:82:43:85:b6:e3:0f:0d:29:ce:24:30:fa:
d6:bb:30:bc:05:7d:e2:7b:84:b4:0e:04:c3:fd:a1:
7d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EC:DC:2B:DC:34:F3:67:70:54:DE:BB:06:2E:1E:F1:79:68:C2:2F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/HOzcK9w082dwVN67Bi4e8Xlowi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.237.0/24
Signature Algorithm: sha256WithRSAEncryption
93:23:06:58:31:d4:67:81:84:f8:b7:08:f5:a1:1a:75:e4:9a:
b6:71:23:70:fe:97:76:90:07:c7:57:f0:68:7a:81:0b:81:67:
64:b1:3b:7a:4b:2c:07:76:42:ef:1c:51:9b:45:4c:66:6b:df:
18:08:34:9a:50:ae:3a:b3:db:78:4f:69:a2:9c:9a:b7:35:0c:
a4:f3:01:e1:cc:fc:df:c9:01:ee:3a:af:5d:e9:a3:5e:fd:28:
b3:1a:56:b6:75:50:8b:97:13:77:8f:ff:14:ef:a1:81:ce:96:
f4:e4:90:8f:e3:87:63:10:fc:30:dc:c1:18:9c:fe:b8:ca:ab:
f5:54:7f:69:41:8d:38:61:64:cc:f5:30:57:83:58:b3:ca:31:
19:ab:55:d8:00:f9:24:ff:72:77:fb:18:14:5f:a6:e4:7f:45:
f0:52:ae:2a:c2:5d:66:5b:51:6b:5f:28:25:c2:b9:91:3f:ed:
73:8b:49:3d:3a:3c:64:f4:82:6d:1d:8e:b0:b3:49:8f:cb:4a:
b9:98:a7:c1:6f:94:93:0c:c9:d6:ae:12:e8:69:a0:dd:d3:9e:
b9:10:44:87:80:3d:06:b8:2a:18:50:83:9c:17:4b:6e:97:ad:
46:1b:16:da:c5:06:47:26:0f:00:97:47:19:9b:a7:c6:04:66:
65:be:b4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:21:13 2025 by rpki-client