Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/v7v-EqhMcHQC1jVwOtVoQrZvOxM.roa
File: v7v-EqhMcHQC1jVwOtVoQrZvOxM.roa (raw, json)
Hash identifier: CtIsWd1sC9tEsrigAn1QY4SV1dZnMi6hfSvr2wrqQ+k=
Subject key identifier: BF:BB:FE:12:A8:4C:70:74:02:D6:35:70:3A:D5:68:42:B6:6F:3B:13
Certificate issuer: /CN=e0a00292c2a1062bb32980a3c443fff383a41002
Certificate serial: 018CC56F052B2E71445A60ADD8D2D2604977
Authority key identifier: E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/v7v-EqhMcHQC1jVwOtVoQrZvOxM.roa
Signing time: Mon 01 Jan 2024 14:30:36 +0000
ROA not before: Mon 01 Jan 2024 14:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34047
IP address blocks: 91.211.172.0/22 maxlen: 22
46.151.40.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:05:2b:2e:71:44:5a:60:ad:d8:d2:d2:60:49:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a00292c2a1062bb32980a3c443fff383a41002
Validity
Not Before: Jan 1 14:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfbbfe12a84c707402d635703ad56842b66f3b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:87:a2:38:cf:4f:24:ed:54:2b:4e:7b:8c:
c9:e8:0c:0c:f1:b2:5b:c2:b4:7c:fb:37:51:2b:1f:
01:25:76:d0:bb:61:bc:f0:73:f7:af:59:e5:f5:10:
95:7b:4c:ab:70:6e:cf:bb:d0:f6:d0:67:54:2e:3d:
c6:81:9e:3b:19:29:7a:db:58:bf:ad:f8:37:26:3b:
e3:91:41:c2:cd:28:25:d7:80:e6:92:34:c2:ea:96:
1d:01:fd:4e:40:04:0b:1a:84:6b:3d:b3:2f:3c:c6:
18:a9:6e:e5:cc:7e:a6:c2:e1:25:e6:6c:e7:ad:73:
40:68:8c:48:90:ed:48:12:e4:34:2e:74:04:0b:6d:
b8:fd:0f:d2:58:4d:f1:25:07:94:3b:21:bd:2f:3a:
0f:9d:3e:a6:63:be:5e:b4:20:4e:43:52:38:45:48:
ce:ab:a0:af:6e:f9:9f:09:38:7d:23:cc:ad:c1:81:
4a:db:1d:50:17:f4:77:3b:3d:04:52:da:7f:dd:97:
06:8f:3e:e5:48:da:f4:00:b1:b7:85:10:50:38:1c:
f9:90:89:40:b4:5c:5d:9d:76:37:1c:36:cb:29:05:
4b:6e:cc:04:4f:70:aa:3a:58:16:bd:f6:f5:1c:99:
c8:e0:a8:7d:6f:3e:5b:71:96:4b:44:4a:ed:aa:06:
72:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BB:FE:12:A8:4C:70:74:02:D6:35:70:3A:D5:68:42:B6:6F:3B:13
X509v3 Authority Key Identifier:
keyid:E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/v7v-EqhMcHQC1jVwOtVoQrZvOxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.40.0/21
91.211.172.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:31:43:ea:05:e3:f5:49:9c:7b:a7:b9:1a:d0:b3:52:5a:ca:
5b:5a:79:aa:c5:94:26:59:80:9f:9e:a7:8d:33:90:ef:2b:ad:
55:76:99:3d:a0:84:e6:0c:fb:f2:88:45:e4:3d:1c:6f:33:73:
2c:fa:f3:bc:e0:31:75:7c:3f:12:04:68:18:6e:1f:90:60:24:
90:de:66:2d:cf:d2:c7:14:9b:c7:b7:37:e6:7a:dc:d9:e8:6d:
46:81:4e:09:a9:74:9a:c5:b2:b7:5d:e2:f8:9c:3a:c0:8b:35:
4c:0f:99:69:a4:4d:7f:b3:b9:8f:34:be:0d:3b:8f:d5:7e:3f:
cf:7e:46:99:b5:72:b6:71:ae:8f:e5:13:7b:2f:1d:05:be:6b:
75:b3:5a:b4:33:07:44:3e:93:97:ac:95:5f:46:b3:ad:e2:d9:
76:09:3c:79:71:4e:da:1c:f4:ce:46:c6:5f:20:6d:13:cf:57:
99:57:4c:f3:9e:1c:e0:6a:95:60:8e:e2:2b:d3:a4:ac:21:8d:
59:9f:cf:9d:85:c7:93:0c:84:5d:95:fc:0f:67:1d:86:e8:f8:
cc:82:b6:1f:2a:fc:9b:a2:40:ca:47:08:df:a6:4f:d4:b9:e8:
d2:6b:5e:d3:e4:e1:f7:6b:3a:64:85:6f:54:55:cc:41:68:02:
ea:eb:dd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:48 2025 by rpki-client