Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/DE5FimVf11HOPH2yJ_YMmFuIn2o.roa
File: DE5FimVf11HOPH2yJ_YMmFuIn2o.roa (raw, json)
Hash identifier: AbZ6WNYQoN4Kz8sZ+rkKHkdicNBh90+felmnuNEwCyM=
Subject key identifier: 0C:4E:45:8A:65:5F:D7:51:CE:3C:7D:B2:27:F6:0C:98:5B:88:9F:6A
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0194CDF3FBEA509504F22C03CA3FA9CE9ECA
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/DE5FimVf11HOPH2yJ_YMmFuIn2o.roa
Signing time: Mon 03 Feb 2025 22:35:06 +0000
ROA not before: Mon 03 Feb 2025 22:35:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 07:32:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cd:f3:fb:ea:50:95:04:f2:2c:03:ca:3f:a9:ce:9e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Feb 3 22:35:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c4e458a655fd751ce3c7db227f60c985b889f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:7c:33:44:5d:8b:90:9a:dd:52:a9:35:26:
cb:f2:a2:6d:81:f4:a7:36:7f:97:96:68:66:de:35:
41:5d:2e:16:8c:c7:b8:f3:44:ce:2e:c9:c1:c1:b0:
15:d1:7c:63:67:6d:15:7b:92:0d:3f:11:e7:6f:b5:
a5:de:6b:0f:4b:ba:d4:15:7e:c5:00:da:53:ea:3c:
d4:a6:db:c5:1e:9b:0e:41:b1:06:32:0e:2a:a7:49:
80:8a:ef:5e:e2:d6:2a:66:b8:ce:99:4f:bc:24:9e:
9b:1e:51:90:24:2b:fa:37:43:41:f0:43:b7:26:70:
de:80:0a:c6:ee:48:37:4f:2e:e1:e5:c9:34:e5:64:
d9:1e:8f:eb:2d:c1:de:b3:64:51:32:d9:78:7b:06:
9d:8e:99:18:6e:5c:92:00:7e:40:f1:5d:b4:45:47:
58:cd:5c:1e:4e:37:a4:29:c2:7c:86:71:e7:39:bf:
11:95:9a:61:49:c2:f5:3b:ac:7d:26:8b:c4:da:67:
34:59:6a:44:1d:75:66:65:af:6b:7d:21:11:ac:21:
d4:ff:5e:24:46:1f:99:59:23:13:d0:f9:4d:8b:73:
3c:98:19:74:f8:c8:c8:d0:9e:b1:4e:dc:8c:fe:72:
a3:08:4f:67:40:1e:33:6d:fb:26:b9:ed:9c:9c:53:
0f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4E:45:8A:65:5F:D7:51:CE:3C:7D:B2:27:F6:0C:98:5B:88:9F:6A
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/DE5FimVf11HOPH2yJ_YMmFuIn2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:a1:27:09:e6:5d:60:93:e5:a1:1e:d4:83:75:8c:15:fb:37:
e3:e2:4d:cc:50:64:76:5e:9c:cb:2a:f1:95:ef:6c:fd:ea:fc:
5e:88:0f:b9:f5:19:a1:8b:95:37:4c:f4:db:99:18:f8:5c:56:
73:73:53:de:5e:0b:af:c2:29:b4:35:71:79:a6:f2:66:f7:53:
d6:c2:12:aa:d2:a5:d8:e7:5a:72:d5:a6:7c:b4:4c:da:6f:13:
4e:62:f2:69:05:ed:61:65:4c:67:12:8b:e3:04:d4:72:94:50:
ce:a4:dc:42:fc:76:0f:d0:d2:3f:4d:e2:76:4c:61:18:6d:02:
6b:3b:3f:6a:14:cc:6d:dc:98:82:81:f8:48:1e:bc:3a:f5:39:
45:37:1e:ae:ee:1c:42:07:42:d8:40:70:19:47:29:e0:68:6f:
6c:a6:1c:0b:bf:23:e2:49:f9:2f:ed:48:63:b3:63:0e:51:3e:
7e:e7:b1:dc:10:c4:6d:e7:1a:00:65:97:0f:0d:02:34:fd:e1:
c3:23:fb:67:d8:55:27:34:24:d5:3c:de:77:84:5c:bd:e6:24:
bf:86:2c:78:3b:5e:4e:09:dc:94:2a:d0:e3:46:bb:29:08:17:
9a:eb:84:72:d0:aa:51:04:f4:2b:20:2e:bf:83:02:fd:3b:4f:
52:83:93:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:00:33 2025 by rpki-client