Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/vVX4VyRLpmDdb9ca6LoNLOMmDrQ.roa
File: vVX4VyRLpmDdb9ca6LoNLOMmDrQ.roa (raw, json)
Hash identifier: hAEx8Q5sTnges4rxRuMC4MNROP70Spbqnums+ajZVKk=
Subject key identifier: BD:55:F8:57:24:4B:A6:60:DD:6F:D7:1A:E8:BA:0D:2C:E3:26:0E:B4
Certificate issuer: /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Certificate serial: 018CC64B81FC2A9A8970A1DF375D449FCA73
Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/vVX4VyRLpmDdb9ca6LoNLOMmDrQ.roa
Signing time: Mon 01 Jan 2024 18:31:26 +0000
ROA not before: Mon 01 Jan 2024 18:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 46.18.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:81:fc:2a:9a:89:70:a1:df:37:5d:44:9f:ca:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Validity
Not Before: Jan 1 18:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd55f857244ba660dd6fd71ae8ba0d2ce3260eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ad:75:43:11:d1:1f:f8:02:b3:c8:a5:7f:a3:
84:50:35:f0:7b:07:dc:9e:a6:11:fe:30:0d:db:e5:
ed:75:48:26:05:8e:b2:05:86:96:92:b0:6c:94:ff:
3e:93:0a:ef:e8:45:00:de:ee:11:b0:ed:04:51:75:
27:30:77:36:1a:c9:94:f5:8b:a4:f5:6a:48:e5:a1:
8d:a3:c1:d7:ef:02:20:02:69:aa:04:74:61:1b:e9:
ae:ec:72:d8:96:b1:33:97:ac:73:17:b1:ed:c0:62:
3d:63:d4:30:5c:bc:c1:b8:fa:c2:b3:02:c5:fb:0b:
67:7f:7a:4c:d7:77:8a:53:01:2e:2d:93:82:6b:76:
b8:8b:f7:1e:17:08:8a:bc:37:d8:07:3e:4d:92:49:
ce:26:72:77:e7:c0:83:e9:7d:22:ab:11:05:aa:0f:
c7:ab:4e:d0:15:eb:0e:8b:4f:0f:ae:21:9d:6a:17:
38:2b:f1:0b:e7:3e:aa:61:87:af:b2:6e:5d:fb:d5:
e3:32:19:fe:e1:ca:4c:5d:1d:69:e8:6f:be:48:4b:
e5:86:b3:ac:6f:d8:02:20:00:01:90:38:a3:a0:84:
1c:75:e7:a7:0b:82:80:92:46:01:a0:0d:2e:38:c6:
33:f9:d4:d4:79:f6:4e:83:a6:9b:9d:cd:3b:3c:fa:
58:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:55:F8:57:24:4B:A6:60:DD:6F:D7:1A:E8:BA:0D:2C:E3:26:0E:B4
X509v3 Authority Key Identifier:
keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/vVX4VyRLpmDdb9ca6LoNLOMmDrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.245.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:17:60:ce:64:f4:0b:4b:df:9b:51:27:36:bc:08:e8:aa:b1:
a5:e8:df:ef:46:77:4c:b4:51:b4:34:2f:a0:b8:56:57:36:29:
a7:78:fe:77:f5:65:e3:ec:f1:d2:4f:7d:23:e6:d0:ce:80:ec:
d3:fb:50:57:13:3f:f4:41:82:00:1e:24:14:90:09:62:58:95:
e0:2e:20:32:3f:38:18:98:2f:8a:60:3f:0e:31:57:1d:64:0e:
6e:6d:e4:03:8d:9c:b3:9a:8c:d2:13:18:fd:c1:f4:f4:43:ca:
41:7c:3c:52:57:5c:81:8c:f6:97:24:95:de:c8:e1:7f:2d:fd:
55:a4:1c:37:76:75:c4:40:ce:0f:4f:13:28:a7:9d:d2:d4:c1:
3a:5a:a1:eb:01:0f:b3:a4:09:65:6d:58:67:e3:5b:2a:ed:85:
c7:10:f5:a0:1c:7c:a3:9e:cc:1a:4c:90:c4:6b:79:fa:9d:bc:
c4:a1:e2:02:b2:b0:07:11:da:7b:f6:a8:79:ec:13:d2:20:89:
3d:fb:4c:4b:08:96:f0:f6:da:5f:7c:80:f0:a6:44:9d:91:43:
9f:87:ac:22:f4:83:bd:d8:5b:ad:c8:9b:b4:36:ef:97:88:cc:
a1:f5:57:7c:c9:57:fb:60:dd:74:fe:94:76:d9:73:2a:51:7c:
43:3d:62:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:33 2025 by rpki-client