Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/uE7A14uOOmgEAOfW73uFsnhSHHs.roa
File: uE7A14uOOmgEAOfW73uFsnhSHHs.roa (raw, json)
Hash identifier: rC+vMeuGj2FwbYbzLswPxWzYDYcnyDKWqz9PI7bzDG8=
Subject key identifier: B8:4E:C0:D7:8B:8E:3A:68:04:00:E7:D6:EF:7B:85:B2:78:52:1C:7B
Certificate issuer: /CN=e822d845e153992a78e8f44523264d2614b17b9d
Certificate serial: 018D87D22FC61198281DC1E7C29F926BB4C9
Authority key identifier: E8:22:D8:45:E1:53:99:2A:78:E8:F4:45:23:26:4D:26:14:B1:7B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/uE7A14uOOmgEAOfW73uFsnhSHHs.roa
Signing time: Thu 08 Feb 2024 08:25:15 +0000
ROA not before: Thu 08 Feb 2024 08:25:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12693
IP address blocks: 46.167.32.0/21 maxlen: 21
46.167.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 14:51:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:87:d2:2f:c6:11:98:28:1d:c1:e7:c2:9f:92:6b:b4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e822d845e153992a78e8f44523264d2614b17b9d
Validity
Not Before: Feb 8 08:25:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b84ec0d78b8e3a680400e7d6ef7b85b278521c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d6:87:b4:dd:94:0b:c4:59:ef:fb:1b:f2:f3:
6c:3b:9c:98:be:1c:c6:7d:3e:d7:ad:1a:68:ee:03:
a3:44:28:4a:e9:24:a6:eb:6c:a9:44:4f:7c:92:6c:
c3:18:c2:ab:cc:32:d2:dd:14:bb:28:e1:c4:74:dc:
72:fb:be:f9:21:d1:7e:85:26:95:7f:40:12:a5:13:
9b:4a:9c:ac:d8:a9:fa:d1:98:c0:53:80:be:8a:92:
ff:14:66:42:a2:08:41:94:c2:bd:6f:f7:da:98:9f:
cb:75:89:d1:b9:b0:76:d1:1e:f3:69:e0:fc:5c:43:
3e:27:b2:c5:91:79:cc:0a:51:47:c4:d6:35:67:83:
df:10:30:46:48:c2:16:0c:a1:f1:94:49:47:06:d0:
ac:2a:1d:b0:99:10:84:ac:01:8f:fe:d0:d4:4e:dd:
ca:93:19:a1:ee:c6:06:45:75:16:2e:b3:26:d4:ed:
c3:c2:9a:1a:4e:ff:66:17:02:31:2d:85:31:11:47:
8f:35:e1:b8:90:86:e8:73:0e:e5:63:c1:31:a5:71:
7f:f6:ab:23:63:32:ac:5e:28:55:2f:ab:d0:06:23:
f8:fa:af:64:8c:20:4f:4b:7f:35:c2:3e:9c:d9:b9:
9b:a4:79:e1:c8:01:8d:c6:c1:06:04:68:98:67:73:
41:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4E:C0:D7:8B:8E:3A:68:04:00:E7:D6:EF:7B:85:B2:78:52:1C:7B
X509v3 Authority Key Identifier:
keyid:E8:22:D8:45:E1:53:99:2A:78:E8:F4:45:23:26:4D:26:14:B1:7B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/uE7A14uOOmgEAOfW73uFsnhSHHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.167.32.0/21
Signature Algorithm: sha256WithRSAEncryption
c1:de:96:6e:88:87:23:df:e9:58:41:32:12:fb:4f:77:c2:ea:
99:90:27:10:30:a2:bc:71:06:b1:cb:23:63:aa:d4:be:e0:41:
cc:79:12:60:1b:fe:22:b9:6b:12:49:23:42:c9:1f:df:0b:07:
e8:be:b8:fa:72:97:77:af:85:20:28:c2:66:80:d8:3f:d1:f7:
0f:69:2b:5f:10:73:23:0e:09:5c:5e:d6:da:a1:f8:37:ef:ae:
80:92:3d:e8:8b:b7:f8:cd:f6:1d:6f:43:a5:11:91:26:e4:34:
e1:fe:e0:22:cd:84:bb:9b:93:e5:29:7c:0e:7a:63:a0:7a:71:
9d:8b:8e:21:04:de:bf:10:8a:a1:b0:c4:bd:3d:0a:97:53:c0:
4f:e0:48:7b:10:bd:4f:e9:ff:e2:1b:0b:bf:7d:7d:30:e8:47:
3e:e7:3a:d7:73:46:bc:0c:b9:57:80:79:bc:a5:86:ae:7a:ea:
88:da:b5:5a:8e:0f:dd:ba:71:f3:61:fe:57:bf:ab:f0:0b:53:
08:9c:76:ed:ea:61:9a:49:c6:0d:05:7a:43:05:88:b9:05:6f:
40:eb:de:92:26:7c:c5:0d:8b:c1:b3:dd:00:3b:57:7b:4b:ce:
c3:0c:48:37:3a:2f:fd:1b:39:87:f0:66:23:ab:ba:ab:df:66:
c2:e5:2a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:28:57 2025 by rpki-client