Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/Rt_iMhPqlIdpr68oUlZtl1sFemg.roa
File: Rt_iMhPqlIdpr68oUlZtl1sFemg.roa (raw, json)
Hash identifier: MKedUu0iHqTff/gHiw9EaczVmLAmrwe/y2PoxfjbQsg=
Subject key identifier: 46:DF:E2:32:13:EA:94:87:69:AF:AF:28:52:56:6D:97:5B:05:7A:68
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 01938F75EB6CE7F0EC6449F2D402E272572B
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/Rt_iMhPqlIdpr68oUlZtl1sFemg.roa
Signing time: Wed 04 Dec 2024 02:18:10 +0000
ROA not before: Wed 04 Dec 2024 02:18:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213772
IP address blocks: 45.82.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:54:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8f:75:eb:6c:e7:f0:ec:64:49:f2:d4:02:e2:72:57:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Dec 4 02:18:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46dfe23213ea948769afaf2852566d975b057a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ea:e5:a4:72:d1:b2:6f:bc:20:7a:02:3d:32:
97:57:10:a3:0a:3e:58:de:0c:6c:81:fc:ca:12:d1:
97:5d:eb:05:3f:ec:20:33:fb:e9:ba:ae:49:5d:f3:
e8:73:fd:54:3f:c6:84:34:29:e4:67:bc:0d:a5:a8:
cd:5b:55:91:1b:8d:2f:06:fe:9d:ce:6c:b7:41:62:
77:c4:56:97:a6:5a:1b:97:f0:0e:a9:53:93:fb:30:
9d:ce:c3:73:54:fa:84:22:42:b5:f9:fe:90:2c:e1:
7b:13:20:f5:d5:56:95:7d:a2:4f:cb:df:6a:96:b9:
24:83:28:a4:48:0d:41:0e:f0:97:bf:af:21:bb:3e:
3e:ee:c4:a7:64:f4:40:6b:56:02:0d:a3:ec:cc:e2:
dc:ff:c8:03:58:5d:4a:b1:20:cc:41:28:b1:30:c8:
63:c0:a2:0d:3f:ae:35:90:7c:ba:7d:3e:9e:16:da:
bd:86:22:4e:e5:33:e7:84:ac:50:48:df:0a:f5:59:
c3:72:b3:62:7c:3f:a7:df:02:a8:96:20:22:22:f8:
24:cc:b1:cd:4d:ab:8b:c4:7b:08:3a:75:f7:a6:85:
6b:3c:be:03:8f:1c:ba:39:5e:df:c5:93:92:11:83:
8a:ae:0d:14:ad:d7:da:15:27:f8:75:7b:6a:65:fd:
98:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DF:E2:32:13:EA:94:87:69:AF:AF:28:52:56:6D:97:5B:05:7A:68
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/Rt_iMhPqlIdpr68oUlZtl1sFemg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.42.0/24
Signature Algorithm: sha256WithRSAEncryption
44:f6:10:6b:19:37:6c:56:d3:48:83:b4:2b:69:6a:90:50:8a:
41:b2:d6:ef:d2:70:9c:17:3c:da:78:18:03:41:79:62:d6:3b:
56:79:e2:b7:97:e6:4c:b8:3e:c3:fb:15:cd:81:97:84:78:b7:
53:8d:69:f6:0f:d0:0c:61:f0:3f:da:e1:fc:5e:8e:a3:d1:d7:
08:bc:c7:4f:18:51:bb:8a:47:10:c7:36:4e:c0:ee:73:16:08:
b6:0b:84:99:46:91:ef:cd:15:4b:7d:95:cc:7d:6c:61:a1:0d:
c5:cc:35:8b:a8:11:80:9f:7d:a3:61:03:b2:c8:99:76:39:45:
4e:2d:86:79:4f:e0:1f:a9:a1:3e:bd:82:48:14:be:1d:15:36:
a6:01:d3:de:07:65:70:91:34:0a:09:32:2c:e1:81:dc:68:a0:
4c:fc:41:37:58:e2:75:a8:d1:b1:97:f7:97:b2:cb:ca:43:7b:
b3:96:bd:6f:bb:b2:8e:a7:71:2a:89:c2:e5:da:8e:69:3c:e4:
0f:28:d3:f5:4e:b9:79:96:50:c6:b7:58:9c:b6:d4:20:05:a9:
c5:22:bb:f8:0c:90:7e:8f:9a:40:d3:d1:3a:f2:39:fb:8a:b9:
ed:43:82:84:2a:9b:78:b1:81:1b:26:09:b3:95:4e:38:d7:2b:
9f:dc:e6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:41 2025 by rpki-client