Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/4vE60Q-_ynmApkyBqu7LiU7IFVI.roa
File: 4vE60Q-_ynmApkyBqu7LiU7IFVI.roa (raw, json)
Hash identifier: PRnx5VCOMQxDFa59qYIJpy6CyuxHf/QmSEuARVbILPY=
Subject key identifier: E2:F1:3A:D1:0F:BF:CA:79:80:A6:4C:81:AA:EE:CB:89:4E:C8:15:52
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019426D853611E95CAFFCCFD25E58D650819
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/4vE60Q-_ynmApkyBqu7LiU7IFVI.roa
Signing time: Thu 02 Jan 2025 11:48:18 +0000
ROA not before: Thu 02 Jan 2025 11:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47436
IP address blocks: 46.37.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 23:10:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:53:61:1e:95:ca:ff:cc:fd:25:e5:8d:65:08:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 2 11:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2f13ad10fbfca7980a64c81aaeecb894ec81552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bf:a0:1f:c4:db:54:3d:62:a9:4b:82:21:d6:
fc:53:84:79:d5:b4:cf:55:81:bf:d9:27:59:c3:e6:
70:42:7e:1b:79:4b:e7:94:b2:aa:77:00:53:17:82:
ea:7c:f2:85:e4:4a:48:98:12:ae:c0:15:1f:d8:62:
2d:f2:8a:2e:90:ee:76:58:c4:18:ff:6a:9b:0a:67:
2c:d5:c6:a4:2f:8a:43:9e:f2:a5:13:f3:7d:66:31:
8c:19:5e:99:0a:de:5c:a8:79:fd:20:44:e4:84:38:
e4:a3:9b:8a:1a:d3:71:8c:4a:39:ab:1e:1f:63:d5:
e3:df:78:a1:98:4d:a6:36:de:ac:b4:a1:0b:d2:ff:
ac:22:28:2f:bf:b8:2f:d8:eb:1f:f6:0d:13:29:14:
5c:e9:dd:52:8f:fb:6a:12:82:8c:ed:63:e4:6d:5d:
c6:06:fa:e2:be:07:19:2d:2b:8a:ab:05:97:7f:3e:
c5:3e:4c:57:9e:93:e7:92:74:4b:15:c8:f0:f4:ac:
47:df:bf:01:08:95:c8:89:6e:ab:a3:3c:ea:9e:5b:
22:21:3f:0b:25:2f:37:de:f8:37:60:16:ba:78:da:
36:b6:9d:62:55:3a:97:e7:00:a5:23:c5:a1:87:89:
8a:e7:f9:47:9c:86:a4:4b:75:62:3e:d4:b8:9b:5f:
08:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F1:3A:D1:0F:BF:CA:79:80:A6:4C:81:AA:EE:CB:89:4E:C8:15:52
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/4vE60Q-_ynmApkyBqu7LiU7IFVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.117.0/24
Signature Algorithm: sha256WithRSAEncryption
01:ab:2e:1a:d1:0c:60:4c:0b:34:6a:13:6d:4c:63:94:cc:f3:
27:9b:84:1c:82:e5:59:51:3a:8a:ab:e8:48:fb:f1:78:5e:5b:
27:02:3b:e5:a9:d6:6e:25:0f:19:e3:87:52:2a:b1:f3:e9:2b:
39:c2:10:ba:78:23:35:1b:15:19:14:27:03:49:a1:f0:f1:e2:
93:d6:5c:2f:2b:21:64:cd:02:7f:ca:90:ed:a0:71:9a:fb:0d:
73:29:23:90:fe:bb:2b:87:a7:a9:c8:00:03:b1:d4:28:2a:72:
7c:95:06:b5:d1:7a:87:a1:81:00:84:ae:24:ef:b1:98:25:2f:
97:aa:81:ad:5c:24:9d:17:b1:d4:f7:48:32:b7:d7:9c:aa:aa:
bc:44:d2:ee:b4:4d:ee:33:27:bb:b4:7a:33:ed:7d:a3:b4:52:
47:13:48:d0:de:6b:e5:f4:bd:03:73:11:e0:fb:2a:1d:71:43:
24:e1:e3:54:19:8f:5b:6d:99:ff:0c:81:23:93:d7:b8:c5:04:
bd:d1:35:8f:e9:57:d0:11:6d:3e:9c:6b:80:72:81:8b:7c:a1:
45:a6:0c:43:d9:13:3f:df:29:b3:cb:cc:7a:10:f4:5f:3d:35:
4c:ba:6e:54:04:f8:df:ae:6b:74:1a:be:f9:54:a9:d8:1a:7a:
b1:3c:0f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:19 2025 by rpki-client