Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/p8JxitghpwFaTyhSS6WaoiVmjW0.roa
File: p8JxitghpwFaTyhSS6WaoiVmjW0.roa (raw, json)
Hash identifier: i7WWOREw8prGZZIa/UjPWmS3LUGPlHpmSHn8ttKdYBs=
Subject key identifier: A7:C2:71:8A:D8:21:A7:01:5A:4F:28:52:4B:A5:9A:A2:25:66:8D:6D
Certificate issuer: /CN=9fc218f67243b47da021fda3feb441474b3ceb94
Certificate serial: 018CC348FF61D29737EE23F8EC41A48B5CCC
Authority key identifier: 9F:C2:18:F6:72:43:B4:7D:A0:21:FD:A3:FE:B4:41:47:4B:3C:EB:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/p8JxitghpwFaTyhSS6WaoiVmjW0.roa
Signing time: Mon 01 Jan 2024 04:29:50 +0000
ROA not before: Mon 01 Jan 2024 04:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51675
IP address blocks: 46.17.112.0/22 maxlen: 22
46.17.112.0/21 maxlen: 21
46.17.116.0/22 maxlen: 22
2a02:2680::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ff:61:d2:97:37:ee:23:f8:ec:41:a4:8b:5c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fc218f67243b47da021fda3feb441474b3ceb94
Validity
Not Before: Jan 1 04:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7c2718ad821a7015a4f28524ba59aa225668d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:55:cb:16:eb:94:a8:f7:ce:da:7a:2b:40:02:
a9:fd:1d:94:14:84:16:f0:65:c1:9e:b9:f3:3a:13:
8a:a8:74:c1:75:7e:02:27:a8:8d:47:d4:f0:04:79:
1a:12:fc:76:a6:b2:72:cc:eb:6b:e3:8d:25:fd:4d:
d9:8a:65:0f:09:41:3b:1c:a8:ae:bb:57:15:60:62:
24:4e:d8:39:8c:04:c4:06:3b:ea:8b:e2:0b:26:45:
84:a2:5e:72:70:f9:bd:dd:f3:5b:a3:0d:e2:be:c1:
c5:5b:a0:45:2c:13:76:10:d9:8c:4d:d5:9e:dd:7f:
0a:a9:60:83:b5:2d:2a:a4:72:72:e3:90:99:6c:48:
05:87:8b:2f:f1:94:b8:bb:ae:de:6a:98:40:da:c0:
a4:4e:28:cf:69:3d:8d:b3:d0:ae:36:ba:b3:23:fd:
0b:c3:93:2d:f3:da:2c:61:7c:7f:8b:2f:71:0b:a9:
eb:00:c4:6e:72:00:0e:dd:60:15:4b:a4:c5:db:82:
d6:bc:64:77:5a:0a:8f:68:8a:bb:72:09:41:b3:1d:
a7:21:92:64:ca:73:36:fc:83:88:96:6d:a5:75:47:
4a:5e:a8:10:3b:46:a6:a3:e8:4b:8b:a0:4d:21:36:
ac:03:b9:06:a6:ff:c6:1b:f4:9c:e9:fd:d7:79:d1:
6b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C2:71:8A:D8:21:A7:01:5A:4F:28:52:4B:A5:9A:A2:25:66:8D:6D
X509v3 Authority Key Identifier:
keyid:9F:C2:18:F6:72:43:B4:7D:A0:21:FD:A3:FE:B4:41:47:4B:3C:EB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/p8JxitghpwFaTyhSS6WaoiVmjW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.112.0/21
IPv6:
2a02:2680::/32
Signature Algorithm: sha256WithRSAEncryption
31:fb:f6:28:2f:b1:6f:7b:87:ca:bc:66:74:c7:7a:27:a3:d2:
91:c0:49:52:9c:e9:22:bb:e3:4c:83:b8:a1:54:15:aa:95:b8:
89:ad:b8:93:71:0c:4d:58:e8:76:68:1c:1f:37:b2:40:95:70:
e8:76:1d:eb:70:ff:3d:d0:ff:67:f1:8d:4f:c5:b3:c2:b7:fa:
e5:92:96:47:ab:02:a6:07:e5:dd:08:20:cb:e4:d1:5f:8d:23:
71:76:1d:d7:16:d4:58:23:de:52:10:63:ac:ec:82:93:5c:7b:
a3:eb:10:cd:c4:4d:62:1a:17:34:53:08:44:b6:c6:0e:45:e3:
18:13:95:93:9e:88:05:97:9b:cd:f8:ef:24:13:9a:0f:ee:20:
9a:be:f2:72:fa:5e:07:f1:a0:a0:93:b0:14:a6:6a:e0:3d:bd:
e3:aa:54:79:24:c5:66:2f:39:16:7c:c8:2f:06:a5:75:65:ab:
d0:b3:07:c4:fb:bb:2e:27:12:54:7d:a9:86:dc:82:80:6d:ae:
2b:67:79:78:ae:69:4e:10:2e:c0:22:73:d3:cc:87:6c:fa:cb:
e9:b7:7e:f8:72:51:85:cc:38:0d:7d:ab:7d:6d:6f:6e:fb:b1:
29:f9:4c:41:55:88:4b:c1:7d:38:56:3a:4e:e1:a5:37:0d:20:
19:a9:ea:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:10 2025 by rpki-client