Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/DbeSAuOJu4JeHdnVUNkDEswpKBQ.roa
File: DbeSAuOJu4JeHdnVUNkDEswpKBQ.roa (raw, json)
Hash identifier: ps4UelVLKgRGUBwV1CET+RNYVlB4eRmJESFJHvXROA8=
Subject key identifier: 0D:B7:92:02:E3:89:BB:82:5E:1D:D9:D5:50:D9:03:12:CC:29:28:14
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 01900215CA4428683D2B8FFB738B764A3610
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/DbeSAuOJu4JeHdnVUNkDEswpKBQ.roa
Signing time: Mon 10 Jun 2024 12:18:20 +0000
ROA not before: Mon 10 Jun 2024 12:18:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214741
IP address blocks: 46.107.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Nov 2024 09:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:02:15:ca:44:28:68:3d:2b:8f:fb:73:8b:76:4a:36:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jun 10 12:18:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0db79202e389bb825e1dd9d550d90312cc292814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3a:a0:fb:a0:ba:89:9e:b1:96:f6:d8:1f:4f:
63:ae:88:a3:83:f1:d0:0f:17:48:57:51:6c:4d:28:
94:4f:77:bb:c9:3f:4d:d4:e5:c2:66:0a:f3:37:dc:
0e:7a:1a:6d:ed:98:32:bf:1c:56:98:ee:27:4c:ed:
51:65:e6:b6:3f:db:90:db:d3:5d:de:45:c8:0a:f8:
ed:77:e8:1a:b1:a2:63:40:c9:66:5e:a9:2a:ee:57:
8c:cd:54:2c:96:97:54:5b:38:16:79:90:3e:24:a1:
aa:ac:49:3a:f2:ed:d1:19:cf:8e:f4:f4:e4:07:b3:
8c:76:c8:6d:64:62:45:8f:fb:c1:ba:57:0c:33:8b:
1d:ae:fa:51:55:84:68:6a:0b:ba:de:4e:9f:9d:f5:
63:f5:20:7e:c3:d2:96:c8:5b:f0:0d:21:34:b6:a7:
91:aa:59:9e:f3:64:c8:f0:49:9b:a0:dc:f7:e4:a7:
2b:cf:b3:bf:a5:e6:82:d6:c1:0a:9d:0b:16:30:ad:
f1:2c:d6:4a:c7:1e:47:de:04:0e:4f:45:2c:a7:8c:
ec:f5:b0:11:82:b7:e3:ea:e1:0b:64:ae:be:d9:2a:
48:31:63:0b:96:b7:53:0a:24:8f:eb:c5:6e:fe:15:
19:5c:56:96:7d:c2:2e:ff:90:0b:8a:59:a0:8a:56:
e1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B7:92:02:E3:89:BB:82:5E:1D:D9:D5:50:D9:03:12:CC:29:28:14
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/DbeSAuOJu4JeHdnVUNkDEswpKBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.107.11.0/24
Signature Algorithm: sha256WithRSAEncryption
65:4f:a4:b1:77:db:03:28:14:af:05:09:1d:e4:c6:5a:78:33:
0a:1e:2f:1b:99:ae:6e:04:a3:ac:6c:e6:17:ce:0d:35:4a:81:
f9:40:2a:ec:70:b9:4e:49:ac:a0:e9:5e:bc:50:5d:46:2b:22:
73:da:50:48:53:2f:b5:e0:8f:2b:d7:85:b1:bf:ac:ed:27:ab:
ae:79:74:e1:4d:3b:df:ce:53:9d:39:f4:e0:19:ff:bd:fb:fd:
e6:a4:63:99:35:f8:49:ff:75:e4:15:2c:f1:2d:f8:6d:e0:f0:
55:0d:0e:ee:96:f4:9a:fa:86:ec:2c:ac:1b:24:d9:4c:f8:5d:
29:3b:3e:ec:fe:ba:3b:54:b2:e7:e7:73:91:87:ca:6b:bb:6c:
db:0f:bc:c0:f5:23:85:a8:8d:07:a4:c1:ec:25:66:90:50:c3:
1e:07:34:2d:00:32:97:c5:c5:de:fd:3f:cc:9c:9b:bc:45:54:
19:09:f2:fe:30:43:07:a8:69:35:44:58:50:bb:1e:a0:02:81:
ea:c3:a2:97:b9:99:cb:92:3e:d4:38:69:a3:cc:b0:04:8c:87:
66:09:50:1a:ee:e7:82:bc:37:f2:d1:77:02:5b:08:e2:fd:22:
50:7a:af:02:8a:aa:cd:63:20:18:e5:7b:1c:e0:49:33:35:5a:
3b:13:bf:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 04:39:49 2025 by rpki-client