Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/1-oCBBvY8r1Wo1WDhRjTqvgIODG4.roa
File: 1-oCBBvY8r1Wo1WDhRjTqvgIODG4.roa (raw, json)
Hash identifier: WXlH34R4pbbC1TTi0L/bFhS+kZWjQOHNA8vWXHM82qQ=
Subject key identifier: FA:80:81:06:F6:3C:AF:55:A8:D5:60:E1:46:34:EA:BE:02:0E:0C:6E
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 018F049647B2C12335603E0814C6DF390286
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/1-oCBBvY8r1Wo1WDhRjTqvgIODG4.roa
Signing time: Mon 22 Apr 2024 06:55:08 +0000
ROA not before: Mon 22 Apr 2024 06:55:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15704
IP address blocks: 46.6.16.0/21 maxlen: 21
46.6.24.0/21 maxlen: 21
46.6.48.0/21 maxlen: 21
46.6.56.0/21 maxlen: 21
178.237.224.0/21 maxlen: 21
178.237.232.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 29 Apr 2024 05:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:04:96:47:b2:c1:23:35:60:3e:08:14:c6:df:39:02:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Apr 22 06:55:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa808106f63caf55a8d560e14634eabe020e0c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:52:bc:c8:e3:99:56:38:3a:76:bd:3b:34:0f:
be:bd:39:a4:27:c9:7b:a8:73:20:a4:8c:54:87:e2:
23:d8:30:bf:d4:31:58:b9:f4:35:15:4c:4c:3d:8e:
a5:1d:0d:36:40:4f:32:3b:ff:13:e3:ee:23:b9:f4:
35:d6:cb:03:28:e1:bc:5a:1c:73:01:0c:2c:20:a9:
c8:9e:d5:11:a7:43:f0:6e:41:76:82:29:7a:8e:10:
f5:70:66:e0:30:b7:ba:20:08:24:3c:29:30:20:93:
0b:3e:75:1e:c1:82:04:5d:1a:64:86:7a:81:28:33:
a2:5f:07:55:7e:df:a7:0b:56:c9:30:d9:2c:ff:61:
22:46:0b:0e:ba:19:90:3d:c0:cc:b7:71:10:9f:69:
5f:15:c6:f4:ef:80:e9:e0:ee:d0:42:f1:6d:5d:f1:
0d:bf:8c:68:2f:ce:04:2f:54:67:23:b2:22:13:07:
4a:db:f4:20:2f:de:e4:c9:20:bd:f2:3a:37:79:90:
76:65:5d:65:0d:3d:db:f9:7c:aa:62:a8:79:98:60:
d9:45:58:e8:7e:34:95:66:22:d2:81:9b:00:a7:4d:
c5:57:65:cd:0c:09:71:0e:61:41:d3:6d:ad:fa:3a:
f1:c7:f4:f8:51:35:9d:12:5d:9e:3a:61:95:d4:73:
a4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:80:81:06:F6:3C:AF:55:A8:D5:60:E1:46:34:EA:BE:02:0E:0C:6E
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/1-oCBBvY8r1Wo1WDhRjTqvgIODG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.6.16.0/20
46.6.48.0/20
178.237.224.0/20
Signature Algorithm: sha256WithRSAEncryption
14:90:17:47:d2:e1:52:48:d5:a3:8c:28:2f:ff:b1:02:f2:fa:
5a:97:ef:af:14:a7:d1:84:df:ab:a1:9f:e1:48:21:a3:75:2d:
9e:85:15:7d:b2:1c:79:da:81:f8:3a:6e:83:9c:59:91:16:f8:
3a:4e:59:1b:6b:b1:63:1c:1e:98:ef:dc:bf:fc:0f:c5:db:26:
ed:95:14:16:b6:29:bb:1f:14:3a:f5:ec:14:e1:fe:ba:7f:8b:
d8:30:a9:b1:14:e3:51:72:e7:0a:6f:f3:86:0a:1d:d1:4b:df:
14:ab:0c:1d:c1:01:58:32:d8:6e:00:d8:d7:14:96:13:d7:2f:
ae:3a:c3:6f:c0:ae:e5:87:68:8c:4b:2b:99:83:ad:94:64:34:
5d:3c:7f:aa:05:f8:12:aa:c1:ec:03:e5:a4:cf:0f:34:1b:00:
fd:05:aa:35:d6:49:19:a7:fe:39:c8:66:df:d8:f0:3e:7b:4a:
8e:94:c9:03:d9:58:13:5d:1c:90:0d:93:fd:53:a1:8a:f7:b3:
6b:1b:b5:1c:1b:5b:6d:fd:58:c3:ee:9a:bb:a4:6b:4e:f3:09:
ad:64:23:b1:1b:15:86:c8:b7:5a:06:3c:06:02:3d:5f:9f:46:
e8:ca:4c:70:eb:ac:00:24:8f:a9:1b:96:6e:d2:5d:2f:37:12:
5b:6f:40:b2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:09 2025 by rpki-client