Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/xz2PE_KAkZBHdGq2aHQ54qK4XX4.roa
File: xz2PE_KAkZBHdGq2aHQ54qK4XX4.roa (raw, json)
Hash identifier: OiICJFOLJQmkpzPyBOTS9vTkIrulMZG1nNqy3+RnTYc=
Subject key identifier: C7:3D:8F:13:F2:80:91:90:47:74:6A:B6:68:74:39:E2:A2:B8:5D:7E
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 018CC3B6D5FC9FEB1EEE2E81B5228CB9682F
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/xz2PE_KAkZBHdGq2aHQ54qK4XX4.roa
Signing time: Mon 01 Jan 2024 06:29:48 +0000
ROA not before: Mon 01 Jan 2024 06:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43624
IP address blocks: 46.8.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:d5:fc:9f:eb:1e:ee:2e:81:b5:22:8c:b9:68:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Jan 1 06:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c73d8f13f280919047746ab6687439e2a2b85d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:ea:ed:27:21:dc:06:41:e1:25:7a:35:8a:
37:14:96:fb:7f:7d:3a:3d:49:14:34:c8:01:77:75:
85:2a:13:02:c0:b0:01:48:de:28:a5:bc:64:6d:b3:
48:9f:62:a1:1f:4c:20:fe:d6:52:39:1f:53:b4:b2:
d4:73:a7:93:2e:42:4f:6b:2f:fb:41:2e:71:c5:91:
fd:95:5e:dc:e8:87:6f:63:da:83:9e:17:65:12:36:
d3:46:64:12:99:e6:42:ad:e3:63:f3:28:c3:ce:7d:
c4:9c:a8:50:16:0b:62:09:5f:5a:6e:23:54:ec:35:
b0:f0:95:04:81:30:7f:b9:27:9f:94:c0:e3:79:77:
8e:6e:e4:47:c8:53:df:19:5b:7c:fa:bf:98:69:b5:
50:07:cc:51:0d:4b:af:08:9a:60:39:2f:3c:6b:eb:
83:58:73:5b:a5:21:c8:54:98:2a:0f:b9:0f:20:29:
8d:85:33:f9:54:cc:06:69:66:25:31:17:5f:01:71:
03:bc:77:27:87:9c:da:7f:e8:d0:f0:c0:8e:cf:86:
e3:95:31:e5:18:28:7f:82:96:91:cb:7a:be:e9:52:
74:df:ce:77:25:1a:da:e6:f8:99:95:62:bd:4a:41:
11:2d:f0:8c:57:04:ee:1a:26:c0:7f:3e:f6:6f:f0:
16:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3D:8F:13:F2:80:91:90:47:74:6A:B6:68:74:39:E2:A2:B8:5D:7E
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/xz2PE_KAkZBHdGq2aHQ54qK4XX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.202.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:70:a1:e3:f9:6d:ec:2f:b0:68:ca:90:86:6d:da:1b:bb:a9:
7b:36:a8:c2:a7:5d:73:fe:62:61:04:ed:27:cb:8c:4f:6b:43:
0c:f3:d8:63:f8:34:bd:2a:50:69:cb:49:b8:11:2e:1c:95:32:
19:a8:9a:9d:c0:63:53:4e:46:18:b7:4a:f3:3f:9c:a3:7a:11:
54:80:69:7f:cb:13:a7:69:92:0e:61:8d:3a:5b:9c:99:4b:20:
cd:e5:f4:fe:b2:78:79:f6:08:e2:fd:e1:08:ac:f3:9d:ba:d8:
30:8a:70:0a:4a:19:2c:e7:ca:3b:95:72:2e:b1:eb:90:32:2a:
50:af:f4:29:a9:76:e7:0a:94:cc:39:16:ad:d7:a9:a0:18:86:
0c:f3:85:28:4e:4e:1c:6c:a0:be:f9:80:2f:4f:26:9a:09:9f:
f4:9a:52:ba:71:de:69:f1:7e:39:62:3b:a4:82:ee:94:c8:2c:
0d:68:a3:73:27:83:68:23:1a:43:5a:f7:9a:39:ad:8a:f5:3f:
99:f9:c7:b2:7b:42:af:8c:79:12:2f:ce:15:2f:27:56:8d:1b:
26:e9:a1:86:e9:36:d6:6d:aa:96:0b:39:ae:d5:80:ab:cc:69:
e5:5f:bf:f7:ac:4c:6a:e5:91:7e:02:4d:76:11:9f:58:90:3d:
7f:4b:b9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:38 2025 by rpki-client