Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/lX1E9pYCWm5TWDb546erotrVErI.roa
File: lX1E9pYCWm5TWDb546erotrVErI.roa (raw, json)
Hash identifier: N4DAi33EWQq3dZtFF9SX4z3rhOT5j/h611hezipduUs=
Subject key identifier: 95:7D:44:F6:96:02:5A:6E:53:58:36:F9:E3:A7:AB:A2:DA:D5:12:B2
Certificate issuer: /CN=5f31d979b710ede2068823881aa611ad13af5459
Certificate serial: 018CC7271C277D10CEE73DFE80F156226754
Authority key identifier: 5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/lX1E9pYCWm5TWDb546erotrVErI.roa
Signing time: Mon 01 Jan 2024 22:31:18 +0000
ROA not before: Mon 01 Jan 2024 22:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47513
IP address blocks: 91.204.132.0/22 maxlen: 22
46.150.0.0/19 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 May 2024 17:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:1c:27:7d:10:ce:e7:3d:fe:80:f1:56:22:67:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f31d979b710ede2068823881aa611ad13af5459
Validity
Not Before: Jan 1 22:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=957d44f696025a6e535836f9e3a7aba2dad512b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bc:41:d0:71:bb:ca:a1:fb:35:0e:b7:04:af:
53:a8:cf:b9:84:93:21:95:9a:ba:57:ea:85:59:3e:
69:d1:c7:f1:b0:1a:99:a0:35:11:d3:07:2e:4c:54:
4f:bc:8d:44:a6:45:d4:b9:a6:24:49:20:73:25:06:
2f:f4:6d:e9:57:51:73:a1:e8:45:31:c4:39:3c:fb:
37:e7:d6:09:0f:68:56:fa:f4:1f:05:cd:70:a9:f5:
ad:18:06:91:4a:fc:30:79:f0:4e:17:64:e1:b9:f6:
d0:80:8f:35:8b:5b:44:9d:d2:d5:02:14:57:fc:20:
9e:31:04:f0:dc:59:df:7f:67:c5:2f:65:b3:97:7a:
fc:6c:09:e9:f4:16:d8:0d:87:50:ef:98:d2:e9:02:
5d:12:99:f0:f9:c0:58:ec:c4:7b:aa:20:cc:6c:75:
c0:57:b5:e4:30:12:40:f8:63:46:fe:fc:21:5b:b8:
51:e2:7c:88:36:de:02:8f:76:be:de:c3:4b:2e:97:
0b:ac:e7:47:03:0a:88:51:07:6c:4e:94:5a:77:6f:
49:29:bf:70:dc:c0:76:5a:72:58:68:df:e9:f8:ff:
51:8b:06:a6:94:e5:12:58:28:dc:70:16:e7:a3:18:
8a:c2:6d:69:35:88:60:d9:0f:c4:6c:e4:7f:90:1d:
dd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7D:44:F6:96:02:5A:6E:53:58:36:F9:E3:A7:AB:A2:DA:D5:12:B2
X509v3 Authority Key Identifier:
keyid:5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/lX1E9pYCWm5TWDb546erotrVErI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.150.0.0/19
91.204.132.0/22
Signature Algorithm: sha256WithRSAEncryption
20:53:7d:62:a0:bd:77:8d:05:08:b7:f5:d2:78:68:5c:20:9b:
ef:b5:4b:c4:21:d0:eb:26:dd:88:ce:47:b7:29:ee:df:b6:b1:
f8:12:73:42:86:47:1c:d5:89:9c:3b:f4:c0:ed:1b:67:f0:a6:
6b:64:97:3a:fc:a2:4c:03:dc:57:a2:e1:1d:9c:c3:70:6f:55:
c0:ea:c4:ed:fa:16:2f:4a:9c:e9:4f:b7:0b:f1:e6:e5:71:8f:
cd:92:d8:20:00:4c:b8:26:59:71:78:3c:43:f3:6e:a0:03:9a:
8d:f2:25:db:aa:f6:5f:a9:9c:68:15:da:64:0f:2b:72:54:46:
53:8f:76:7e:81:09:21:32:e1:ba:73:ab:16:83:af:2d:f7:27:
8d:eb:6d:79:d5:8c:6a:56:6a:57:32:42:f5:07:8d:93:1d:47:
06:2f:01:45:dd:4b:d8:64:25:69:ad:91:74:d5:8d:78:2d:13:
47:56:b4:60:a0:f7:78:d5:8e:1d:b6:04:07:bf:bd:33:8b:57:
5a:ca:71:1c:9f:5d:c0:f8:fb:e3:a1:4a:23:82:69:10:24:f6:
13:f9:34:d8:2b:55:bc:6e:86:3d:80:6d:d0:1d:9e:67:4e:69:
b7:a6:62:ae:fd:12:5e:f1:49:da:7c:ec:d3:0d:a5:bf:70:12:
c5:c9:be:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:37 2025 by rpki-client