Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/lTtKaWvtAiQqTa7deybK9sInRSY.roa
File: lTtKaWvtAiQqTa7deybK9sInRSY.roa (raw, json)
Hash identifier: TWxNN+2w68+tCdQlaKwFlpvGsZ37CXxF9WhPy0AoisI=
Subject key identifier: 95:3B:4A:69:6B:ED:02:24:2A:4D:AE:DD:7B:26:CA:F6:C2:27:45:26
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 0194D657CF72035E909C460599EDD674D8CD
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/lTtKaWvtAiQqTa7deybK9sInRSY.roa
Signing time: Wed 05 Feb 2025 13:41:06 +0000
ROA not before: Wed 05 Feb 2025 13:41:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206663
IP address blocks: 185.94.46.0/24 maxlen: 24
185.94.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Feb 2025 11:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d6:57:cf:72:03:5e:90:9c:46:05:99:ed:d6:74:d8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Feb 5 13:41:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=953b4a696bed02242a4daedd7b26caf6c2274526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:67:c8:2c:e2:8a:c2:f6:ce:29:34:b9:3d:
73:5f:c5:00:b7:2c:ea:b0:ac:46:20:08:cf:87:b2:
36:66:8e:07:33:0b:95:78:cf:e4:d5:ee:e7:03:ec:
8f:32:fa:87:ec:41:8c:2b:2f:f2:1f:d7:93:d0:f1:
b3:9e:7a:02:59:e1:58:07:19:a6:3a:65:06:69:7d:
65:40:ec:dc:c8:e1:4e:5d:2b:82:c9:3c:22:af:5e:
aa:4e:3c:be:9b:5c:c9:b1:81:75:7d:73:5f:ff:9f:
70:61:46:22:5f:cf:73:e7:34:2f:4d:68:9d:4a:54:
b7:6f:96:f6:9e:dc:fe:69:7c:b6:d4:7e:c0:a4:30:
ea:b3:ac:f4:43:67:79:11:91:c2:4b:ad:3b:85:f9:
32:21:5a:d8:47:5e:e5:f1:69:7d:9a:a3:8e:c7:de:
9e:40:52:b3:b7:fe:b0:83:7d:bd:76:06:31:29:73:
76:3c:6b:c1:5e:3a:fc:52:71:cf:b3:36:b0:77:88:
ff:87:de:2d:ab:47:71:68:4a:6f:93:27:c7:28:49:
e1:0a:d2:9f:95:8c:d5:9f:66:73:e7:94:a5:07:06:
1a:ff:02:d7:4c:2f:61:f4:65:a0:af:5b:99:ad:15:
de:1d:84:e1:fb:e3:c5:36:92:b2:55:13:8c:1e:4d:
6c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3B:4A:69:6B:ED:02:24:2A:4D:AE:DD:7B:26:CA:F6:C2:27:45:26
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/lTtKaWvtAiQqTa7deybK9sInRSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.46.0/23
Signature Algorithm: sha256WithRSAEncryption
82:21:2e:3f:66:e0:20:d2:40:e1:14:7b:6b:2f:b7:5f:79:f7:
87:5e:76:da:ac:b6:ac:e2:9a:0a:7f:14:73:d4:03:ea:7f:51:
12:d2:85:20:ad:c3:b3:30:91:08:78:15:fd:5d:cc:00:0d:2f:
b5:41:cd:ee:48:4d:e3:3c:4c:a1:76:75:a4:3a:dc:09:92:f7:
47:2a:f3:72:98:c9:1d:12:6c:50:d3:e3:c7:e4:c4:71:6b:fe:
07:89:b1:c9:91:54:cd:2b:4f:ce:9e:ad:63:9e:6f:64:c2:e3:
49:84:23:52:03:14:f1:11:a5:d3:a2:13:39:87:7f:4f:a3:e1:
c5:a1:82:8b:c5:db:e1:e8:b5:6d:51:27:e6:96:72:fb:26:9c:
41:80:91:25:f5:1a:78:d1:81:b4:a3:c5:05:d7:96:7d:ee:2c:
16:4a:59:49:ae:44:8b:e8:09:61:0f:f6:1b:30:0d:06:f4:e6:
1c:3d:c7:49:b2:94:6c:28:e1:a6:93:49:60:39:0f:7a:bf:2e:
2d:cc:fc:6c:41:9b:c6:21:db:8f:ac:e2:b7:a5:66:4d:cd:81:
d5:d5:28:28:e9:aa:91:82:71:f2:49:9c:f1:f5:99:43:cb:c9:
fb:ac:18:63:1a:14:7b:72:bc:5f:7c:a7:d5:c7:9c:5c:5b:67:
ee:d4:54:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:22:17 2025 by rpki-client