Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/sN4N1yeaLKMJorp6FjKiIymx9Jc.roa
File: sN4N1yeaLKMJorp6FjKiIymx9Jc.roa (raw, json)
Hash identifier: 4suuL/yxK6nMWEwK/gyxYIJ1Hqk7tTVKTg5KQ7oIzzA=
Subject key identifier: B0:DE:0D:D7:27:9A:2C:A3:09:A2:BA:7A:16:32:A2:23:29:B1:F4:97
Certificate issuer: /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial: 018CC348F14310F0A81E195A4500CC759343
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/sN4N1yeaLKMJorp6FjKiIymx9Jc.roa
Signing time: Mon 01 Jan 2024 04:29:46 +0000
ROA not before: Mon 01 Jan 2024 04:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33915
IP address blocks: 145.46.255.0/24 maxlen: 24
145.46.191.0/24 maxlen: 24
145.46.192.0/18 maxlen: 18
145.46.128.0/18 maxlen: 18
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f1:43:10:f0:a8:1e:19:5a:45:00:cc:75:93:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
Validity
Not Before: Jan 1 04:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0de0dd7279a2ca309a2ba7a1632a22329b1f497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a7:0b:d8:0a:de:e2:62:64:e9:07:01:0f:26:
ed:90:76:c1:72:5c:4e:b4:a9:f3:1a:1b:7d:be:73:
dd:39:b9:39:4c:0b:f6:47:56:53:33:6d:b5:d1:47:
bd:84:84:07:d2:76:2d:80:d4:82:06:3f:28:9d:d4:
fd:03:9c:01:1d:42:bf:54:53:a5:db:a0:22:9a:28:
2c:11:7b:02:43:96:7f:06:1d:ad:04:7b:fd:8e:81:
98:b0:b8:fb:2c:26:fc:c9:07:52:9e:00:98:24:e8:
96:cc:9a:eb:60:59:65:52:66:41:cd:53:3a:c4:ba:
68:90:26:af:0b:24:28:d3:e2:b9:3b:21:c1:32:8d:
70:86:6d:eb:f3:65:00:09:61:1a:40:97:23:ee:73:
f8:0d:8b:65:c4:b1:01:b0:9a:05:fe:35:ef:17:02:
dd:43:e1:43:9b:77:0b:52:f4:ac:8e:d7:5c:e3:e0:
88:37:10:6c:00:63:2f:aa:9f:34:aa:cf:ab:35:dd:
31:0f:66:43:ec:03:f3:1a:00:1d:3f:31:ee:82:cb:
b0:7e:82:41:ac:18:ad:45:89:c0:fb:5e:a6:09:82:
b6:4e:7b:d7:5a:c4:13:23:2d:5f:38:cf:ea:fe:dc:
b6:f0:34:94:0a:b9:7f:7d:1a:e4:00:7e:20:e5:49:
3d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DE:0D:D7:27:9A:2C:A3:09:A2:BA:7A:16:32:A2:23:29:B1:F4:97
X509v3 Authority Key Identifier:
keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/sN4N1yeaLKMJorp6FjKiIymx9Jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.46.128.0/17
Signature Algorithm: sha256WithRSAEncryption
52:1f:d4:59:91:e6:b7:d7:f8:18:88:a5:59:8c:a6:9e:ce:af:
e6:4e:7c:76:b0:cf:6e:f6:4f:d7:59:1b:7b:2a:cd:61:ce:73:
78:f9:6f:fb:6f:d8:36:6a:84:8b:4d:a2:25:fe:f4:a0:2b:9c:
35:f3:ed:3f:77:9d:79:da:68:df:3a:25:bd:d8:47:bd:8b:1f:
b8:1c:03:e6:af:0e:73:f8:df:99:b6:82:30:40:cb:c1:56:5e:
87:22:44:d1:ee:e8:7b:87:02:0d:4c:8e:e7:5e:9a:14:9e:51:
30:eb:28:19:ac:b3:a7:be:4a:dc:0e:66:27:e0:4e:34:23:05:
16:38:79:00:9b:11:cd:0a:2a:8a:3c:f8:39:0e:e9:56:4b:56:
35:9e:de:cd:c9:89:12:a2:d0:27:9c:f2:97:0c:08:41:e0:af:
b1:93:2c:4a:3a:be:f9:18:c8:10:e4:dc:85:fe:13:83:9d:7e:
e1:22:0c:25:83:e4:32:0a:f5:ad:55:99:63:27:9d:b4:33:9e:
ed:02:fa:d2:33:0b:37:ef:63:6a:7f:1c:3e:67:17:c1:cb:80:
10:a6:19:8e:bd:60:21:e5:1a:16:97:fe:46:2a:f5:53:d9:d0:
cf:3d:42:2d:54:c1:c9:d3:2d:d8:3c:a0:b3:f7:da:9f:a7:ce:
98:2c:91:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:44:23 2025 by rpki-client