Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vFjd2qdtCQQYtIO1WmSz-Ry5YOw.roa
File: vFjd2qdtCQQYtIO1WmSz-Ry5YOw.roa (raw, json)
Hash identifier: r9CghPHQzCn70nt5FnQZZuBDnGVMTCiHqAe+yPnDWCs=
Subject key identifier: BC:58:DD:DA:A7:6D:09:04:18:B4:83:B5:5A:64:B3:F9:1C:B9:60:EC
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01950919D59621342F73ACED84ECD4604AC9
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vFjd2qdtCQQYtIO1WmSz-Ry5YOw.roa
Signing time: Sat 15 Feb 2025 10:14:02 +0000
ROA not before: Sat 15 Feb 2025 10:14:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211560
IP address blocks: 46.102.237.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Mar 2025 10:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:09:19:d5:96:21:34:2f:73:ac:ed:84:ec:d4:60:4a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 15 10:14:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc58dddaa76d090418b483b55a64b3f91cb960ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:02:29:6f:0b:70:e2:a6:00:e1:32:64:39:73:
6f:9d:5a:56:b4:d0:96:f8:56:bd:1e:aa:4b:b2:dc:
f8:a8:10:21:30:f9:7f:77:40:d5:e6:5d:bc:cc:46:
79:28:b3:9a:49:23:8e:41:6f:75:9e:bd:ee:69:ce:
83:22:46:41:db:ef:fe:68:07:60:d1:6c:bc:dc:14:
91:a5:bc:a9:d9:27:63:87:27:fc:16:18:cf:a8:d7:
aa:fa:77:70:c6:88:16:87:81:06:f8:e1:a0:3e:be:
8e:89:a2:52:23:a7:2c:b6:ef:b0:38:21:bc:a4:e0:
5c:45:d4:47:d7:29:b4:7b:12:9c:60:25:18:50:d7:
a9:39:b8:da:a9:f3:76:62:1f:c0:80:8a:de:e0:3b:
a1:dd:44:77:82:ed:0f:ed:70:74:e2:d0:3a:eb:95:
78:d5:12:69:bd:27:dd:0c:90:06:84:99:cf:e4:c2:
68:53:e2:28:56:8b:15:07:ba:ec:77:db:15:c5:de:
3f:28:c4:c6:76:94:bb:ab:4e:f0:28:6a:e4:31:7c:
64:26:69:90:d2:44:b5:71:72:7e:83:7b:f7:59:08:
a1:dd:ad:90:f1:89:66:1c:f6:35:46:a0:f3:43:0e:
9c:36:ca:ba:c0:86:19:9d:24:60:3d:e1:86:e3:9d:
23:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:58:DD:DA:A7:6D:09:04:18:B4:83:B5:5A:64:B3:F9:1C:B9:60:EC
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vFjd2qdtCQQYtIO1WmSz-Ry5YOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.237.0/24
188.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
16:e3:26:04:dd:ef:e6:fc:00:b5:f3:82:89:58:b7:0f:6c:4d:
88:a1:69:d6:d9:91:a9:ec:62:0d:71:82:a8:c0:fe:2e:54:ad:
c9:4e:a9:77:d2:2f:63:60:68:15:82:e5:49:76:e7:2c:66:19:
a3:fb:b3:ee:ed:dc:47:ed:59:6a:c2:03:79:1c:cf:0d:33:0d:
d0:2c:e9:5e:da:9c:03:0e:59:99:e9:06:1d:78:06:43:17:e5:
6e:d8:87:5a:a2:58:c5:5d:ad:c0:d2:d5:ed:0e:4c:6e:12:1b:
89:64:50:55:2a:63:c8:cc:8f:4d:5c:c6:4c:d9:1d:ad:28:82:
7c:17:7b:be:50:dd:81:9a:12:c7:cc:c8:dd:a0:45:5b:e3:05:
9b:b1:d5:72:8e:c1:44:a2:03:42:d1:f6:69:d7:92:36:80:0d:
a4:89:58:ee:f8:12:1e:9b:49:6b:41:02:2c:44:57:95:22:d4:
1c:14:dc:2b:a5:07:0d:19:cc:0f:58:27:93:42:04:74:f6:b6:
38:06:fe:d2:80:00:fc:db:34:22:bf:4a:ab:3b:83:4e:5a:dd:
ba:85:a3:21:d3:e2:a6:1b:76:47:ec:c4:d4:08:2f:ca:3d:0c:
d3:dd:73:b6:9d:91:6a:61:c9:94:de:e5:6b:3c:fd:4c:c4:5f:
1e:69:f1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:39 2025 by rpki-client