Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/qKlaqFW9kjJvD-3tCCrHShLIAEo.roa
File: qKlaqFW9kjJvD-3tCCrHShLIAEo.roa (raw, json)
Hash identifier: uEATkJ0iCMDPHGOQjjwpfSFTyfgw8NnRQCjjtcDRpAw=
Subject key identifier: A8:A9:5A:A8:55:BD:92:32:6F:0F:ED:ED:08:2A:C7:4A:12:C8:00:4A
Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Certificate serial: 018CC348A7657BE7CE34E168E5AD7D01BBD8
Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/qKlaqFW9kjJvD-3tCCrHShLIAEo.roa
Signing time: Mon 01 Jan 2024 04:29:27 +0000
ROA not before: Mon 01 Jan 2024 04:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211882
IP address blocks: 46.231.240.0/23 maxlen: 24
2a0c:e303::/32 maxlen: 32
2a0c:e300:12::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:a7:65:7b:e7:ce:34:e1:68:e5:ad:7d:01:bb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Validity
Not Before: Jan 1 04:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8a95aa855bd92326f0feded082ac74a12c8004a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:ec:90:fd:72:47:0e:5d:b7:3b:71:28:20:
ea:0e:b4:f7:65:4f:ba:ad:c0:b5:2d:f5:37:9b:c2:
20:a9:64:b7:1c:6f:5e:f3:88:8e:22:32:17:f2:b5:
a2:ad:0c:12:c6:90:e9:89:32:df:ce:94:5c:86:e8:
90:78:ee:9a:3f:dd:d7:0f:a7:b8:39:09:d7:f4:66:
2b:74:9f:86:66:f2:21:4c:d3:d9:17:72:3d:71:5e:
02:86:44:8e:f1:96:08:c7:74:d6:8f:0c:6a:24:f7:
e8:13:95:d1:2b:c3:cf:00:21:b9:07:e4:ac:ed:e0:
6d:d5:1a:9f:12:20:c0:12:6a:67:02:53:2d:5a:d1:
5c:b1:e2:26:3b:79:20:e3:91:30:b7:d7:dc:f0:ca:
f4:ba:2f:b0:cd:0a:7e:58:ae:69:00:b3:6e:40:f3:
a2:82:d6:a3:d7:a3:0c:e8:23:b2:74:77:5a:ea:f9:
21:9d:51:e2:a7:31:1b:a3:60:bf:4a:08:da:67:ca:
b5:f5:da:3a:99:5d:4c:a3:a4:1f:47:39:69:ea:35:
87:d0:7a:87:78:89:c8:ca:0e:8c:55:00:91:51:9c:
6e:cc:db:27:b6:fb:a4:28:96:46:ba:23:be:d6:93:
48:52:0d:5b:b4:d3:5f:bc:8d:52:15:7d:34:5c:d9:
7a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A9:5A:A8:55:BD:92:32:6F:0F:ED:ED:08:2A:C7:4A:12:C8:00:4A
X509v3 Authority Key Identifier:
keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/qKlaqFW9kjJvD-3tCCrHShLIAEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.240.0/23
IPv6:
2a0c:e300:12::/48
2a0c:e303::/32
Signature Algorithm: sha256WithRSAEncryption
56:e7:9a:7d:21:0a:58:f0:d8:16:65:ef:ac:e8:73:4e:bd:13:
72:04:c2:c9:26:ce:30:bc:2c:6e:9e:f7:5f:f9:3a:e1:9a:50:
a3:e0:e6:62:7e:d5:3b:7a:f4:d8:83:3c:42:ae:81:2a:e6:d2:
11:be:da:b9:20:25:fc:fa:2d:f7:7b:54:ef:81:72:20:90:e0:
e0:7c:6e:f0:11:a7:76:e6:5b:2f:b7:13:e6:fa:97:19:e9:bd:
73:11:98:d5:7e:6b:55:d7:da:c8:c2:a3:fc:1f:c9:69:4a:1e:
43:b8:0a:5d:75:d2:35:54:09:73:af:4c:1c:60:99:66:a1:5d:
5a:cf:b4:e8:7b:a8:90:1b:49:70:6e:05:f8:dd:b0:2e:8e:7d:
04:de:82:d2:72:c5:44:0f:7b:bb:25:39:4d:53:94:d1:ee:43:
1a:7b:1d:f0:c1:86:51:8e:24:0f:f3:05:46:4e:1b:03:b2:b2:
f3:b5:d0:b4:05:89:89:7d:10:d6:b6:6c:4e:79:ad:df:e8:e2:
c9:34:94:d8:6f:2a:87:4e:1a:f8:cd:ad:41:97:b7:28:f2:0a:
38:39:6c:8a:37:07:cf:cd:1d:ca:07:f8:cc:2c:e4:e2:1d:37:
6e:32:4d:77:35:8f:57:19:50:a9:d5:fd:ca:9d:d8:84:a0:3b:
3a:56:93:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:16 2025 by rpki-client