Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/0kGiFbtojXHiilkdxjt83VkHPkw.roa
File: 0kGiFbtojXHiilkdxjt83VkHPkw.roa (raw, json)
Hash identifier: qXdBs0yqDmxLDMmkSRuhl+/aBP3iXS1QmRlpOuy+Oq0=
Subject key identifier: D2:41:A2:15:BB:68:8D:71:E2:8A:59:1D:C6:3B:7C:DD:59:07:3E:4C
Certificate issuer: /CN=32507f9e078be89932e91b23acf882ab467c6aa7
Certificate serial: 018CC500958C10919A60C11B4385CCD1D862
Authority key identifier: 32:50:7F:9E:07:8B:E8:99:32:E9:1B:23:AC:F8:82:AB:46:7C:6A:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/0kGiFbtojXHiilkdxjt83VkHPkw.roa
Signing time: Mon 01 Jan 2024 12:29:58 +0000
ROA not before: Mon 01 Jan 2024 12:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197503
IP address blocks: 46.149.144.0/20 maxlen: 20
46.149.146.0/23 maxlen: 23
46.149.152.0/23 maxlen: 23
46.149.148.0/23 maxlen: 23
46.149.150.0/23 maxlen: 23
46.149.156.0/23 maxlen: 23
46.149.158.0/23 maxlen: 23
46.149.154.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:95:8c:10:91:9a:60:c1:1b:43:85:cc:d1:d8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32507f9e078be89932e91b23acf882ab467c6aa7
Validity
Not Before: Jan 1 12:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d241a215bb688d71e28a591dc63b7cdd59073e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:40:63:c5:21:dc:7c:31:56:95:2d:ff:4c:cc:
f3:79:b8:27:c3:58:21:cc:5d:21:d3:54:84:96:95:
99:df:c6:c3:38:7d:7a:07:54:a4:c7:0b:a7:9c:58:
e5:ad:cf:ef:d1:e0:16:a9:e3:b0:db:18:52:0c:26:
01:33:a8:5e:63:8b:6d:4e:c7:4d:0a:3f:c9:2f:5b:
7f:09:d7:2e:f0:d5:12:d8:05:42:b9:de:cf:bc:aa:
db:81:f7:db:2d:14:fa:cb:95:48:43:eb:1b:07:d5:
04:7f:7d:9d:18:59:93:f3:86:d9:b9:df:ee:a4:90:
c6:fe:28:28:13:37:1b:0c:e4:fe:85:f3:f2:84:76:
c2:08:ca:da:d6:f0:6f:9f:2e:c2:94:27:24:80:93:
6e:4f:79:8a:cd:bf:bd:77:07:b0:89:ad:15:f8:13:
28:c8:62:37:28:91:9a:a9:50:1d:e8:b5:54:48:c6:
2e:78:45:ff:a1:59:86:4d:7e:4f:ef:75:ba:0d:1f:
c7:9c:62:8a:67:ee:ff:90:39:ed:a7:12:0b:36:c5:
9d:06:67:cd:30:a3:13:6d:9a:cb:75:90:ac:bf:d9:
97:84:30:22:f6:e5:7e:0e:87:19:a4:36:26:34:d0:
2a:d6:47:e9:a4:45:4e:11:b7:bb:e6:d1:ab:f7:10:
7a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:41:A2:15:BB:68:8D:71:E2:8A:59:1D:C6:3B:7C:DD:59:07:3E:4C
X509v3 Authority Key Identifier:
keyid:32:50:7F:9E:07:8B:E8:99:32:E9:1B:23:AC:F8:82:AB:46:7C:6A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/0kGiFbtojXHiilkdxjt83VkHPkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.144.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:d4:41:60:80:8a:ae:d3:c7:18:3b:0a:25:8b:a8:99:e3:a1:
21:ab:46:6a:f5:3b:2f:9d:d8:80:cb:2d:63:1c:3d:d8:4e:0a:
62:c0:ff:b0:af:6b:e6:bf:44:25:34:8e:47:3b:67:b8:f6:4f:
68:34:05:d9:42:50:bc:50:ad:85:f6:24:33:3a:8f:ca:18:18:
d7:a8:ec:0f:4d:63:7e:fd:14:34:42:42:f8:4e:d0:b1:9a:5b:
bd:b4:fa:c6:12:5c:aa:66:e5:be:e2:15:2b:91:51:50:e8:8a:
e7:f7:c7:28:4f:ee:a0:4b:45:69:b8:4c:79:de:35:e2:34:fc:
7a:5c:c8:b6:8a:b9:29:df:7a:24:c2:0a:06:4c:75:91:a3:79:
d4:36:74:43:49:c8:ca:59:0f:a3:39:b7:a9:cf:48:5b:43:09:
65:37:0f:4a:09:2a:f3:46:1f:d3:37:33:13:4b:24:39:af:41:
bc:83:01:93:dc:c6:e6:35:1b:10:8a:9d:e9:37:07:53:c7:d0:
54:d3:5c:fa:89:f1:2c:63:55:51:3a:13:9b:3a:a2:f0:e3:65:
5a:63:01:dd:3d:5d:43:49:ec:bf:49:15:c3:9d:61:ee:69:a0:
bb:fc:c5:7c:c2:0c:31:03:5d:f6:41:6e:f6:b3:fc:8d:44:d8:
e8:97:bf:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:06:35 2025 by rpki-client