Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/AQnSrPWloUdYR1tBb4Jd_VMw3vY.roa
File: AQnSrPWloUdYR1tBb4Jd_VMw3vY.roa (raw, json)
Hash identifier: tKKmUr2CuNwemivkIpzsTrF8+8bbXFPgPWb3ysPH13c=
Subject key identifier: 01:09:D2:AC:F5:A5:A1:47:58:47:5B:41:6F:82:5D:FD:53:30:DE:F6
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019426D84EF388050B041D69B3402B117ADB
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/AQnSrPWloUdYR1tBb4Jd_VMw3vY.roa
Signing time: Thu 02 Jan 2025 11:48:17 +0000
ROA not before: Thu 02 Jan 2025 11:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 46.37.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 22:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:4e:f3:88:05:0b:04:1d:69:b3:40:2b:11:7a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 2 11:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0109d2acf5a5a14758475b416f825dfd5330def6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:97:94:d6:7b:cc:bc:c7:25:7b:c5:9e:e2:7d:
e6:57:44:a7:10:b4:01:4b:ba:2b:9e:15:43:40:21:
89:3e:3b:23:18:7b:53:27:ee:12:52:30:88:ca:85:
ff:6e:9e:78:63:52:36:76:91:fa:89:09:87:a8:4d:
c0:79:49:f1:e5:47:27:38:1c:ff:cc:f9:95:d4:7f:
59:61:31:e1:d1:97:87:06:9d:36:a9:96:95:b9:ff:
51:e9:9a:4c:a3:f6:cc:11:23:31:3d:e1:37:0c:5f:
35:b0:6d:0b:86:74:9f:14:14:3b:71:19:51:d6:40:
8c:58:19:58:ab:89:2b:8d:3e:ae:91:4d:34:72:aa:
1e:a0:ba:78:d2:2b:04:86:a6:7b:de:7d:3b:75:4c:
0c:29:49:13:09:7d:ed:83:fa:cb:b5:e9:0c:ce:d5:
0e:c2:4b:58:ab:b4:82:60:92:3d:61:d1:64:5c:12:
e9:41:dc:84:30:08:b8:43:4f:28:b9:74:fb:de:f5:
62:dc:b7:e5:28:53:ea:0c:d2:63:1c:ad:47:e5:e3:
66:11:98:98:e5:8a:12:65:25:6c:3d:d9:bf:ec:1b:
43:d2:12:6a:e0:70:d2:10:00:29:e1:b9:cd:7b:6b:
ee:2d:cc:8e:5e:b1:f6:a3:72:e0:b7:8e:61:84:a5:
23:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:09:D2:AC:F5:A5:A1:47:58:47:5B:41:6F:82:5D:FD:53:30:DE:F6
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/AQnSrPWloUdYR1tBb4Jd_VMw3vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.116.0/24
Signature Algorithm: sha256WithRSAEncryption
87:72:95:99:d6:f5:56:7f:0c:07:a8:54:50:81:fb:b4:e5:c9:
fb:6a:bd:b8:5f:67:8b:b5:f6:b1:d1:d9:e1:d2:01:47:7d:93:
8e:d1:f3:63:ab:a7:91:a4:60:43:c1:50:46:a3:90:43:4f:7b:
ac:50:b4:d8:40:d4:82:8e:ff:d8:d4:8b:ad:57:d7:ce:ba:31:
91:93:9f:e9:3d:5c:58:24:e8:ad:e3:83:17:e0:c5:5d:e4:32:
13:d4:da:92:61:5a:78:e0:dd:9a:0f:f6:47:4d:ca:2d:09:8c:
21:9c:9c:a0:3a:0c:ce:f6:a1:e9:45:4d:f7:cf:b5:49:d6:60:
c7:1e:bc:46:ab:9f:60:5b:05:b0:7f:d3:26:d5:ec:51:18:27:
c4:0e:22:f1:c1:bf:f4:ab:8f:70:6a:0d:d0:b7:06:71:6f:b3:
c6:98:13:c0:a3:90:8e:fc:d5:a6:b0:de:46:42:0b:9f:25:08:
00:1d:16:5c:53:a2:27:e9:b2:17:ee:f3:7a:17:ee:69:a3:df:
e8:a1:96:02:9f:ff:ca:8e:3e:7f:2f:72:1d:81:2a:27:2d:e6:
ce:b1:f9:be:93:47:02:f2:26:41:ba:db:70:e0:51:4e:67:68:
99:e4:3a:ed:74:d9:81:7c:08:17:3b:9e:eb:b8:e1:00:44:42:
4e:50:f4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:18:11 2025 by rpki-client