Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1-vbMqahkld0ZeFiOBNHi-nS443Q.roa
File: 1-vbMqahkld0ZeFiOBNHi-nS443Q.roa (raw, json)
Hash identifier: OwohTxDjTtMIAqujdmPBURBZuQ3I+mFEhhaIXqCzufs=
Subject key identifier: FA:F6:CC:A9:A8:64:95:DD:19:78:58:8E:04:D1:E2:FA:74:B8:E3:74
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019257FBBD475042141E6FC7AB17D01578CE
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1-vbMqahkld0ZeFiOBNHi-nS443Q.roa
Signing time: Fri 04 Oct 2024 14:42:48 +0000
ROA not before: Fri 04 Oct 2024 14:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 46.37.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:57:fb:bd:47:50:42:14:1e:6f:c7:ab:17:d0:15:78:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 4 14:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=faf6cca9a86495dd1978588e04d1e2fa74b8e374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:54:c4:6b:7f:24:4a:63:9b:14:7e:06:70:
5b:28:40:ea:9b:74:16:f9:77:fb:24:35:18:43:da:
3a:7e:e9:44:07:af:ec:f5:89:59:a4:1c:2c:1b:9a:
4e:df:32:c3:e6:5b:19:3b:40:87:6d:58:bb:33:fe:
d4:3d:44:78:3c:e2:d8:47:8b:66:c2:60:84:b9:93:
2f:8c:7d:cd:90:21:8a:2f:e3:32:5a:ac:f0:94:a6:
54:17:4d:1b:94:e0:88:1e:5c:d7:df:fc:55:9b:7c:
59:bc:1f:7d:46:51:da:4d:c3:29:14:84:b2:bc:e2:
35:7a:c6:d4:d6:63:ec:ff:2a:14:18:ea:86:4b:f0:
d8:1f:85:53:51:68:2f:20:f6:33:54:63:45:10:a9:
01:17:bd:55:97:5a:e5:e1:21:53:3d:d6:51:8f:03:
c7:0d:5b:82:c1:ed:cb:a4:10:46:58:5d:9d:29:f0:
7f:db:96:5f:41:c9:ac:57:13:2d:1c:88:e3:4c:6e:
c3:92:2b:80:9f:e3:8a:79:2d:8d:0c:d7:32:bc:07:
33:35:d2:3d:64:32:8a:9a:1a:60:94:2f:8d:58:11:
68:42:79:84:9c:0b:62:e2:90:6c:aa:5c:92:da:0a:
7b:09:b7:66:25:52:3f:3a:7a:52:3e:6f:77:c8:b7:
1d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F6:CC:A9:A8:64:95:DD:19:78:58:8E:04:D1:E2:FA:74:B8:E3:74
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1-vbMqahkld0ZeFiOBNHi-nS443Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.126.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ec:43:0c:a6:e5:78:b6:af:3a:d3:39:e6:04:58:a6:bd:81:
a2:7b:24:51:d2:0f:c7:9c:54:a3:ed:8d:fe:f0:54:48:e9:9a:
a1:b6:5e:24:9e:b5:b1:a4:ed:eb:83:c8:00:59:f7:f6:7c:81:
43:85:a9:bd:28:68:f2:17:f3:34:55:19:71:f2:ca:c1:f9:d0:
41:98:d3:17:ec:6a:e3:4b:5d:a7:ad:54:aa:3d:41:57:17:f7:
2d:a0:87:88:3e:02:72:66:5b:09:a1:c9:17:ff:c9:8d:31:d9:
9e:31:e7:23:bd:c9:59:8a:7f:1e:92:26:53:e1:75:83:12:37:
fa:b0:9f:cb:ad:f0:34:85:69:c5:39:bb:f0:17:92:b9:fc:b3:
ff:a5:db:d2:83:7e:55:52:31:2c:b7:26:d1:f4:4a:e8:b1:dd:
21:d8:9d:5b:84:f2:24:96:19:fc:b6:a2:0a:49:a0:09:3a:d5:
41:2d:d1:1b:7a:3d:5a:b9:e9:c5:00:6a:9b:c9:f8:56:1f:e7:
af:f7:62:bd:ef:37:11:20:c3:05:d1:e3:da:b0:29:4b:46:8c:
d3:56:4b:57:37:e2:3b:4d:b3:2b:b4:71:f7:c2:b7:b0:e2:ec:
f6:4b:fc:01:3a:a2:08:21:a1:c8:a4:93:84:35:6b:2c:a1:bb:
45:3c:e1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:53 2025 by rpki-client