Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/lAYODwF9qevhOc39kXyqzUDbTJk.roa
File: lAYODwF9qevhOc39kXyqzUDbTJk.roa (raw, json)
Hash identifier: kj5w/QEXM+vqpyKYppdleM5o2CsqARBoYHjMG2fpA8M=
Subject key identifier: 94:06:0E:0F:01:7D:A9:EB:E1:39:CD:FD:91:7C:AA:CD:40:DB:4C:99
Certificate issuer: /CN=27321078f359d7990276dabb0f8c30070e685963
Certificate serial: 018CC3B6C0C3C73D79979EDB987D794158D8
Authority key identifier: 27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/lAYODwF9qevhOc39kXyqzUDbTJk.roa
Signing time: Mon 01 Jan 2024 06:29:43 +0000
ROA not before: Mon 01 Jan 2024 06:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199986
IP address blocks: 46.231.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:47:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:c0:c3:c7:3d:79:97:9e:db:98:7d:79:41:58:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27321078f359d7990276dabb0f8c30070e685963
Validity
Not Before: Jan 1 06:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94060e0f017da9ebe139cdfd917caacd40db4c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d5:41:1b:13:c1:cb:fc:d5:2b:cf:65:bf:d1:
82:a1:6f:ab:22:cc:ab:bb:ac:3f:30:64:76:3b:96:
9d:35:31:2f:ff:04:18:bf:04:fe:19:87:42:8b:ca:
95:4d:16:92:15:2b:11:55:77:3c:dc:70:b9:f5:0d:
a0:98:f9:52:a9:d6:8b:2c:c2:73:7c:05:70:71:da:
66:8c:c0:67:38:7c:a5:64:24:96:7b:33:ab:da:21:
d4:2c:2e:a6:94:f2:f3:0d:a5:86:95:3a:47:5c:38:
40:5e:80:1b:31:fd:cd:80:df:8c:ea:7b:15:84:09:
f2:98:2b:63:49:2e:e4:5a:74:61:45:a4:9f:d6:3f:
bc:47:0b:43:6e:83:eb:c6:79:1e:f2:bc:f1:21:0f:
da:40:32:18:5f:19:1a:7b:72:ac:ee:ee:a7:49:ce:
65:10:45:4d:36:b4:83:a4:fa:04:28:ad:99:82:5b:
30:04:ea:6a:78:07:d7:da:01:32:fb:51:03:b9:70:
ee:ed:9a:56:af:6a:c8:b1:7b:f0:5f:f5:e9:84:b9:
d0:cb:98:69:8c:4a:c8:60:ba:2b:e0:32:1e:8b:e6:
6a:c1:b7:74:5c:dd:4b:ad:04:7d:65:d3:a3:4d:d0:
4f:12:d9:b5:61:3f:75:16:05:eb:70:a2:27:c5:d5:
12:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:06:0E:0F:01:7D:A9:EB:E1:39:CD:FD:91:7C:AA:CD:40:DB:4C:99
X509v3 Authority Key Identifier:
keyid:27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/lAYODwF9qevhOc39kXyqzUDbTJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.231.0/24
Signature Algorithm: sha256WithRSAEncryption
87:c8:69:cc:fa:5c:b7:97:99:75:c7:24:5f:59:4e:c0:f2:49:
6f:6a:c7:9d:d9:5a:fd:c3:f2:5f:36:16:33:80:10:85:bf:0e:
48:2f:2c:e5:96:d0:19:ae:4d:8c:7e:26:4b:da:13:1a:9e:60:
d7:b4:9e:e0:66:e7:61:fc:7c:a3:f0:44:3c:45:ad:f0:11:c6:
a5:b1:7b:c4:5b:b2:f1:6b:92:7e:9b:95:d7:64:99:fe:cb:65:
8d:79:f4:c6:49:b1:81:26:ba:42:0c:5e:59:c6:c7:c9:93:1e:
e8:36:f5:04:d9:7d:f3:66:07:7e:31:f5:46:85:7a:8e:12:56:
75:45:4a:4f:43:cc:55:4c:85:6e:d3:eb:90:d8:42:f2:36:74:
3c:32:15:14:0d:26:c3:cc:3b:33:1a:a8:fa:0c:d9:ce:da:02:
2f:cd:4e:86:d2:75:d2:8b:d2:fb:80:e5:ad:3b:e4:09:c3:3b:
1f:06:14:d5:5e:d9:62:f4:71:12:f3:4b:8a:8e:7b:4f:a8:20:
46:61:20:8b:63:f4:93:0d:14:8e:ae:d2:c9:a7:e8:ee:37:cc:
97:97:fd:ea:9a:b3:dc:93:f1:cf:3e:73:0b:de:d7:05:e7:f2:
81:17:66:80:d0:40:71:14:05:a5:a4:4b:2d:ce:ac:17:04:e1:
68:29:2a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:08 2025 by rpki-client