Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/ivRcq4sAkySEt4s8DpzZ1TIgTBo.roa
File: ivRcq4sAkySEt4s8DpzZ1TIgTBo.roa (raw, json)
Hash identifier: 1izn9Cd2p9gXLS6XSDhoXQ7jEXeO7hfffhncSmnv5c0=
Subject key identifier: 8A:F4:5C:AB:8B:00:93:24:84:B7:8B:3C:0E:9C:D9:D5:32:20:4C:1A
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 01956515750D419F71B795059E8C68963F7A
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/ivRcq4sAkySEt4s8DpzZ1TIgTBo.roa
Signing time: Wed 05 Mar 2025 06:54:19 +0000
ROA not before: Wed 05 Mar 2025 06:54:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213852
IP address blocks: 46.34.163.0/24 maxlen: 24
89.42.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Mar 2025 10:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:65:15:75:0d:41:9f:71:b7:95:05:9e:8c:68:96:3f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Mar 5 06:54:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8af45cab8b00932484b78b3c0e9cd9d532204c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b3:a1:89:cb:86:3f:86:cd:49:ac:50:02:0b:
3a:3b:2f:85:ed:90:90:9b:6d:a8:08:44:cc:1b:a7:
74:4c:81:5e:12:ba:56:f2:ad:24:06:9e:ed:e4:2b:
46:db:f9:0f:18:3d:16:a8:33:fa:78:06:85:97:fe:
6d:d8:a6:08:de:5c:38:c4:5d:a4:de:41:dd:3d:cb:
07:ee:d6:57:57:f5:ef:d5:8d:1b:54:23:8a:55:6e:
64:06:80:b7:6c:b8:2a:19:a7:f8:aa:6b:65:be:c3:
d6:b3:73:ae:a7:80:14:98:91:40:94:8d:86:85:f6:
ed:6f:1b:e3:04:8d:92:69:fa:e4:9a:8a:3e:32:94:
20:9c:36:51:36:45:b7:94:c6:6b:bb:89:6b:66:60:
6f:89:aa:23:a2:c7:51:6e:4a:ee:f7:ce:44:ed:59:
ea:65:87:72:59:02:3a:6c:90:5a:a4:a0:0d:db:a3:
16:34:70:a3:27:8f:b7:f2:6e:12:45:99:60:1c:ce:
d5:33:7a:53:b4:3a:82:d6:b0:29:8a:7e:b5:3d:ac:
47:72:bf:e3:ca:fe:f7:87:e9:28:c7:6b:60:ae:e1:
89:09:78:98:e6:5f:ba:36:f3:6e:79:73:1b:ea:4f:
c2:8b:f1:86:81:19:97:0b:04:a8:74:59:d4:af:cc:
01:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F4:5C:AB:8B:00:93:24:84:B7:8B:3C:0E:9C:D9:D5:32:20:4C:1A
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/ivRcq4sAkySEt4s8DpzZ1TIgTBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.163.0/24
89.42.199.0/24
Signature Algorithm: sha256WithRSAEncryption
39:8f:b3:2a:51:04:0a:fc:13:a7:8b:e8:fa:8c:1f:32:78:4d:
03:24:31:26:26:74:be:82:d4:fa:b6:01:e6:b6:cd:86:37:ec:
d1:cc:90:dd:75:bc:c2:98:3c:28:a2:0f:8d:84:24:47:2e:c0:
96:39:57:ed:e5:5a:68:30:af:bc:86:22:7d:84:01:ed:48:18:
a8:65:b6:6c:94:d2:86:b3:d4:14:2c:6a:61:5b:25:9c:3e:e1:
ee:a9:7a:f7:7c:36:b2:9e:5b:9f:4c:2e:52:59:8a:b4:8e:4c:
d3:b2:72:59:90:33:e2:77:49:7a:92:4e:b2:79:e0:ce:e0:af:
3d:36:f4:59:e8:39:29:5b:f0:e8:b8:5c:b3:e0:16:4e:f7:8e:
78:91:5c:f0:02:9c:b9:3d:b5:a4:69:99:fd:be:bc:0e:18:00:
03:fc:0f:78:e4:78:c5:45:71:30:18:2e:0c:4f:7b:45:c0:fb:
ff:34:ad:79:ba:0b:12:bc:ec:0d:ae:48:11:3f:29:3f:4d:92:
26:59:64:02:67:29:f5:61:6d:49:9e:ef:9f:09:08:e6:15:e4:
10:49:cd:35:5f:8f:d4:f5:51:eb:ad:95:33:f4:4b:76:50:5b:
1f:a1:21:1e:6c:e1:fb:f4:2b:a0:4a:99:61:c0:5a:44:11:aa:
bf:81:1b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:10:10 2025 by rpki-client