Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/4TrWIoGrEaFwFUvr9SZJ-NHs1-4.roa
File: 4TrWIoGrEaFwFUvr9SZJ-NHs1-4.roa (raw, json)
Hash identifier: dbVbkkrVLWdasBDm2XiPVI0w6H+jePB0TmexHqyULjk=
Subject key identifier: E1:3A:D6:22:81:AB:11:A1:70:15:4B:EB:F5:26:49:F8:D1:EC:D7:EE
Certificate issuer: /CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Certificate serial: 01941F8C5DD78AD23F4D22EF1A5CAD9CB440
Authority key identifier: DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/4TrWIoGrEaFwFUvr9SZJ-NHs1-4.roa
Signing time: Wed 01 Jan 2025 01:48:00 +0000
ROA not before: Wed 01 Jan 2025 01:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58018
IP address blocks: 46.36.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Jan 2025 22:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5d:d7:8a:d2:3f:4d:22:ef:1a:5c:ad:9c:b4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Validity
Not Before: Jan 1 01:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e13ad62281ab11a170154bebf52649f8d1ecd7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:66:79:93:0a:b0:c7:d3:bc:84:be:0a:79:9a:
2f:d3:f6:ff:eb:37:90:b2:14:d2:87:ad:95:80:ac:
b1:92:1b:da:c7:1d:86:83:67:91:4d:fe:dd:1b:f4:
5b:9c:81:17:70:9e:ba:f0:dc:41:3e:7a:61:f5:8f:
a0:5d:a1:59:9a:3c:b4:23:72:e4:12:b2:38:2f:d9:
5a:57:3f:e3:00:99:2d:ca:b4:9a:41:e4:bd:ea:87:
75:7e:0d:95:0c:4b:c1:7f:dc:9e:16:f2:b7:53:8e:
13:7a:8e:82:bb:24:e0:ca:a2:37:ac:57:4b:7a:fe:
bd:73:97:7b:26:8c:d1:9a:7d:70:3d:a2:ec:21:b0:
fb:4d:e2:4b:b5:86:03:ac:88:aa:23:6e:ae:d6:ae:
a8:70:89:a8:f4:d9:6a:7f:71:0c:2a:38:86:5b:b2:
30:7d:1d:70:f5:8c:19:65:3e:e1:7d:9a:c0:b4:6f:
ee:97:ab:0c:14:94:09:a5:1f:06:8f:02:e9:31:bb:
b0:bb:ff:16:f3:0c:dc:bd:06:35:e4:9f:7d:97:df:
61:4f:58:6b:4a:30:60:80:aa:75:49:ec:3a:e6:84:
7e:18:83:8e:81:7e:bd:78:b9:fb:f3:fd:9b:9a:41:
3a:ee:1e:eb:e6:0c:a2:d2:b8:bd:af:28:38:86:d2:
78:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3A:D6:22:81:AB:11:A1:70:15:4B:EB:F5:26:49:F8:D1:EC:D7:EE
X509v3 Authority Key Identifier:
keyid:DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/4TrWIoGrEaFwFUvr9SZJ-NHs1-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.200.0/24
Signature Algorithm: sha256WithRSAEncryption
97:80:24:10:02:ea:53:97:2d:c6:18:5c:28:d1:58:7c:cc:4c:
4b:b4:4b:fe:65:7e:6e:81:9c:90:ca:2e:89:d5:97:07:72:0f:
b7:7b:6f:14:8d:6c:15:e8:e2:21:7f:0a:56:84:91:54:7c:9c:
be:02:67:30:19:7f:a4:6c:6e:14:83:a9:a7:51:21:3e:50:05:
51:95:3c:c8:b2:d4:93:59:f8:c2:6d:a8:6d:c4:81:1c:18:39:
48:86:6b:20:3b:99:62:87:29:44:f3:dd:cc:20:47:87:40:96:
2c:9c:1a:c3:45:fd:b0:67:8d:95:42:ef:0e:96:69:6b:a6:d8:
bf:02:63:53:03:b7:35:be:d8:9a:fd:ae:5a:c8:79:c5:02:07:
3e:41:cc:5d:15:4a:de:5e:c8:b2:78:1e:20:b5:74:e2:f8:02:
32:2d:e3:20:3e:42:57:8b:73:ae:62:34:e9:cf:1a:47:6a:a8:
6d:f7:b1:a2:40:54:a5:19:8d:e6:25:ec:64:03:3c:c3:7a:a4:
50:bd:12:7f:6f:5e:fc:d4:0d:c2:46:c7:75:5c:5f:30:58:99:
d7:3d:23:e0:35:85:03:2f:d8:52:68:8e:0c:85:66:68:aa:d2:
0c:f7:20:d3:86:e6:68:bb:a9:fc:16:07:94:fb:c7:ff:36:b3:
8c:53:e5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:05:18 2025 by rpki-client