Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/XKbs1Ca9makcrgzvkMYD6ugGjcc.roa
File: XKbs1Ca9makcrgzvkMYD6ugGjcc.roa (raw, json)
Hash identifier: GQTLDQnWPKXrXnzzi3q5I5FpxpxclOqKHVCRtJjXYnU=
Subject key identifier: 5C:A6:EC:D4:26:BD:99:A9:1C:AE:0C:EF:90:C6:03:EA:E8:06:8D:C7
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 01917A9220FF759E2B61C6C0B5B8EF79D92B
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/XKbs1Ca9makcrgzvkMYD6ugGjcc.roa
Signing time: Thu 22 Aug 2024 14:51:22 +0000
ROA not before: Thu 22 Aug 2024 14:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 46.8.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 15:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7a:92:20:ff:75:9e:2b:61:c6:c0:b5:b8:ef:79:d9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Aug 22 14:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ca6ecd426bd99a91cae0cef90c603eae8068dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:73:3b:f8:e2:d6:ed:bf:89:54:90:b2:18:1c:
18:03:80:ac:12:b3:1f:14:65:f7:f0:8a:18:9d:00:
a8:b7:6d:df:c8:1b:2e:cb:ae:63:20:6a:3f:0f:cb:
6e:c5:64:ed:13:e2:65:1b:59:7e:d8:c8:89:1c:0a:
01:b5:19:71:9c:c9:25:cb:70:9a:93:a1:6d:51:56:
36:f8:fb:5f:04:9a:11:ae:b9:ce:33:1d:dd:8a:0f:
1a:53:f0:9a:f0:24:d2:4b:19:5f:36:2e:29:ef:e9:
67:2f:b8:6b:e6:bc:29:15:01:43:a3:e4:21:97:3a:
df:94:31:14:a1:a3:e7:d9:a0:c0:03:9b:39:aa:50:
c0:40:91:bd:31:14:94:3d:4f:e1:02:42:23:fc:0f:
96:1b:e0:07:52:89:e2:a1:9b:e0:68:6a:06:13:ee:
71:d6:cb:58:c7:08:65:8e:62:a4:cb:50:d1:db:64:
23:bb:22:c9:ac:17:fa:86:84:29:02:79:86:14:bf:
a3:75:71:db:3a:e7:27:33:4d:77:18:43:fe:ba:00:
ea:08:b3:38:ee:b5:64:9d:9a:17:1a:4e:b5:5c:33:
dc:01:63:76:f8:f8:ce:59:8b:05:a6:81:49:9c:36:
ed:05:b8:0a:87:ab:8d:18:80:d4:19:c0:36:70:dc:
53:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A6:EC:D4:26:BD:99:A9:1C:AE:0C:EF:90:C6:03:EA:E8:06:8D:C7
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/XKbs1Ca9makcrgzvkMYD6ugGjcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.200.0/24
Signature Algorithm: sha256WithRSAEncryption
46:9c:c0:b4:9c:1a:b3:a6:c2:81:64:df:4f:3a:9f:e0:da:19:
c4:33:4d:73:14:a8:18:62:78:1c:c1:a0:b4:90:65:6e:e5:8d:
a3:c2:54:75:af:0a:ec:1b:e3:83:d3:b2:54:cd:8b:87:d0:36:
58:03:1e:51:f0:3b:ad:fd:bf:c5:1a:34:76:c4:6d:a0:7d:2f:
97:e0:90:20:2b:64:98:f9:81:e8:d8:c0:86:c1:28:55:72:0e:
e5:a8:5b:b0:43:23:d2:3c:92:e2:a5:1d:28:78:e1:fd:5d:12:
ab:7a:17:3c:2a:4e:1f:2c:b4:99:1a:3a:0e:4f:a4:67:73:31:
70:8b:bf:1b:7c:9c:88:35:f8:61:9e:56:a6:bd:02:39:7e:fd:
7f:41:96:cf:2b:a2:a2:26:b2:a4:09:c2:da:7e:9c:87:af:1c:
d4:14:99:d0:90:78:ff:ba:46:e3:f7:19:57:61:b4:70:64:2b:
88:e5:4e:a7:34:77:de:58:6e:27:bc:42:c2:7e:81:d7:7e:a0:
bc:08:bd:3f:c2:91:f8:15:2f:b8:d5:65:ce:10:2c:57:b7:53:
bd:a0:20:15:2c:a6:2a:ae:5e:57:12:cf:23:95:46:2e:cf:b4:
11:95:01:f6:8b:7f:fd:41:dc:7c:07:be:dd:a8:6d:c8:2a:ff:
3b:ff:1c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:36 2025 by rpki-client