Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/FwouV6A464JCW7vHz_FSjjY96KU.roa
File: FwouV6A464JCW7vHz_FSjjY96KU.roa (raw, json)
Hash identifier: URBaZLWqmi5O5NDOy2QS48q04AUmYnXyAOeJ9dfVIac=
Subject key identifier: 17:0A:2E:57:A0:38:EB:82:42:5B:BB:C7:CF:F1:52:8E:36:3D:E8:A5
Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial: 01934FBDF840EDC04ED89E7DAF422A64970A
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/FwouV6A464JCW7vHz_FSjjY96KU.roa
Signing time: Thu 21 Nov 2024 17:21:10 +0000
ROA not before: Thu 21 Nov 2024 17:21:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 146.19.142.0/24 maxlen: 24
185.218.184.0/24 maxlen: 24
185.253.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4f:bd:f8:40:ed:c0:4e:d8:9e:7d:af:42:2a:64:97:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Validity
Not Before: Nov 21 17:21:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=170a2e57a038eb82425bbbc7cff1528e363de8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2e:31:e7:cb:66:a8:d5:2f:0d:63:e1:e4:db:
92:55:ef:94:2f:0a:ba:47:08:3d:12:c1:c7:c3:10:
5e:05:83:9a:10:51:1e:e6:7d:3c:a5:d0:9a:b6:a4:
86:2f:d1:72:02:33:96:e3:b8:d0:b1:c2:b5:c2:f5:
5c:3e:38:67:7c:29:90:14:70:71:b2:b2:62:3c:69:
db:d7:18:cb:a9:60:cb:28:23:42:be:08:d5:03:3c:
c7:af:43:aa:83:58:9d:97:36:dc:8b:59:d0:fc:55:
c8:29:70:32:db:f0:21:6e:7d:66:76:a1:a8:8c:40:
32:b3:55:96:cc:53:c9:3b:f7:d8:99:8f:bd:fc:b5:
a5:b9:f8:8a:57:09:56:18:ab:ba:db:e5:0f:91:37:
4b:17:d7:8b:ae:c4:f0:6f:ef:e8:1f:f5:1d:1f:e0:
1a:cc:4d:0d:3a:ce:87:f5:82:98:a5:c0:4c:e4:c1:
ac:8e:07:78:f8:49:12:34:06:3b:0e:8f:40:c4:bc:
72:5e:56:12:10:23:63:7b:82:4b:8a:97:ff:b6:b5:
7d:32:a0:f5:dd:ab:29:fd:66:bd:2f:5d:4c:7d:a4:
cf:ae:e7:a3:e8:35:be:11:19:2d:08:03:c7:26:6c:
d8:a0:50:36:29:37:49:7b:d8:56:c8:88:c5:81:78:
fc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0A:2E:57:A0:38:EB:82:42:5B:BB:C7:CF:F1:52:8E:36:3D:E8:A5
X509v3 Authority Key Identifier:
keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/FwouV6A464JCW7vHz_FSjjY96KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.142.0/24
185.218.184.0/24
185.253.3.0/24
Signature Algorithm: sha256WithRSAEncryption
26:b9:6e:23:e0:31:cb:a1:1b:cb:37:c7:d6:37:5d:44:4e:c5:
73:e5:10:d4:b6:6d:73:52:f4:5f:10:6d:b6:d2:b1:f1:88:2c:
2a:e8:91:1b:c3:ae:5b:73:36:51:af:65:30:40:fd:e8:6c:43:
9d:f8:bb:99:22:c1:8d:84:d0:19:20:e2:f4:ea:3b:03:40:88:
24:82:16:6b:63:18:a0:0c:bf:d6:30:e2:a8:bf:39:60:c4:83:
dd:1d:3d:f7:6d:cd:ed:90:ca:f3:8f:ae:46:3a:12:74:d6:f4:
a1:f7:19:30:c5:47:7b:9a:bd:94:36:08:f5:a5:57:83:8c:c0:
00:51:05:0b:fd:3e:71:be:15:71:a2:cd:45:47:64:47:0d:88:
16:aa:ce:8c:8a:c0:2f:b8:c8:ed:8e:07:68:80:82:ab:88:8b:
ec:36:2f:dd:f9:94:da:f3:d1:48:3e:dc:64:59:d4:dc:8b:ed:
37:11:79:c8:f1:95:91:cb:32:2a:9c:43:3f:45:cb:03:23:42:
d3:c2:15:48:b0:db:d1:16:44:5b:60:95:57:a4:59:c7:d4:95:
ad:85:21:27:f6:be:48:61:a8:02:83:90:6a:0e:83:17:4d:e6:
74:b1:2f:70:c4:b8:77:b1:49:5f:06:0f:75:ef:84:16:e3:87:
92:92:a3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:37:34 2025 by rpki-client