Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/r4exyxYUmWC5yPADmCq5QQNn5UA.roa
File: r4exyxYUmWC5yPADmCq5QQNn5UA.roa (raw, json)
Hash identifier: lj/OcUS0M68200hsMPjtaD23uXNOLf8nSKAC8N//QOI=
Subject key identifier: AF:87:B1:CB:16:14:99:60:B9:C8:F0:03:98:2A:B9:41:03:67:E5:40
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 0194126D997352EBA4D48668A027A2137E36
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/r4exyxYUmWC5yPADmCq5QQNn5UA.roa
Signing time: Sun 29 Dec 2024 12:39:20 +0000
ROA not before: Sun 29 Dec 2024 12:39:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198341
IP address blocks: 46.209.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:12:6d:99:73:52:eb:a4:d4:86:68:a0:27:a2:13:7e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Dec 29 12:39:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af87b1cb16149960b9c8f003982ab9410367e540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:08:4f:6b:63:c0:c7:e8:b8:f3:dc:bb:3f:
e5:6f:2e:19:4e:4e:ac:15:1d:6f:74:d4:f3:53:a8:
2a:00:fc:d2:1f:30:cb:90:b9:48:2d:2a:a1:16:96:
1d:28:fb:a9:b6:11:e9:eb:ef:6f:59:97:a3:f2:57:
fd:78:c0:0b:a8:8f:3a:01:a2:ff:b4:dc:e3:34:45:
9b:d3:3f:b3:b7:77:77:de:4d:7d:c5:11:82:6b:3d:
0d:1d:86:9d:6e:32:04:54:99:11:c1:99:a1:13:86:
15:01:2b:fb:98:c0:5e:db:27:35:5c:eb:72:7d:d4:
d4:1c:74:fd:63:53:d8:9d:db:39:88:48:ee:23:cd:
c3:42:07:81:0a:ae:b5:b8:08:5a:38:1d:a8:52:88:
1d:00:c9:81:83:07:a7:23:ec:ab:2b:50:65:00:68:
a5:05:75:3d:ab:49:44:c6:f2:e0:09:e1:83:3a:cc:
3a:0b:63:fa:65:77:ac:77:35:51:2a:6d:05:29:21:
de:53:3c:8c:4d:a6:61:fb:b2:ca:48:73:d6:bc:af:
71:ea:5f:cf:4f:3d:40:06:fa:ef:4d:f5:d0:0b:49:
f7:7e:2d:ab:5a:b5:4b:f5:fc:ec:7e:f2:14:0c:a6:
c5:46:00:1a:8d:ac:ee:a0:8e:a5:c5:51:2e:bc:f0:
05:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:87:B1:CB:16:14:99:60:B9:C8:F0:03:98:2A:B9:41:03:67:E5:40
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/r4exyxYUmWC5yPADmCq5QQNn5UA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.209.101.0/24
Signature Algorithm: sha256WithRSAEncryption
26:3b:a3:9f:fa:19:48:a7:11:cd:db:10:44:a7:11:9a:e9:2c:
03:81:3e:98:70:8e:59:d5:78:7e:fb:6d:49:71:51:9f:55:d7:
a7:58:5d:58:6c:78:24:f9:69:3c:5e:cb:ea:92:ec:6e:6a:35:
82:cf:ae:56:e8:3a:d6:ab:1e:4e:e8:17:aa:ec:2f:fb:77:c8:
05:35:46:65:76:d6:79:cc:ed:eb:10:4b:d2:2d:aa:5d:4c:da:
41:aa:ff:12:28:4a:e4:5f:a7:77:8f:66:a4:fd:62:35:58:e5:
7e:76:2e:76:e9:e3:0e:17:97:5f:83:99:94:58:8c:61:3b:5d:
29:7d:23:76:f6:02:ea:5b:d1:0a:7b:aa:35:cd:6d:62:36:f1:
e5:2d:4f:7f:1f:c2:5e:b1:f0:55:02:74:75:01:3f:05:35:30:
d8:b9:fa:0b:25:83:19:92:33:8b:7b:c9:89:05:0e:d3:d0:dd:
e8:28:cd:5b:74:12:5a:5f:96:24:89:f3:fa:6a:48:d5:b2:3c:
86:aa:cc:19:b2:fc:c2:c5:1d:e1:fc:ba:87:e1:6a:a9:12:60:
67:0d:6c:2a:b2:81:85:c6:9b:c4:c9:95:3d:65:1a:e8:73:36:
a1:cc:10:68:11:c4:17:d4:5a:4e:55:02:87:b3:21:09:88:ac:
5f:11:aa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:09:18 2025 by rpki-client