Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/ADZMP9vAdlxQXsv_2VHzibuTsuQ.roa
File: ADZMP9vAdlxQXsv_2VHzibuTsuQ.roa (raw, json)
Hash identifier: EHyj9bnspwydTFfXyNsqyq5M5jMx9pgbGEBWb06yVQ8=
Subject key identifier: 00:36:4C:3F:DB:C0:76:5C:50:5E:CB:FF:D9:51:F3:89:BB:93:B2:E4
Certificate issuer: /CN=59a9e9f8ea47486d80c9d6dcfd568f654d4f07ee
Certificate serial: 018CC56EF5BCB9C7D96853E003F2AAF58F08
Authority key identifier: 59:A9:E9:F8:EA:47:48:6D:80:C9:D6:DC:FD:56:8F:65:4D:4F:07:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wanp-OpHSG2Aydbc_VaPZU1PB-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/ADZMP9vAdlxQXsv_2VHzibuTsuQ.roa
Signing time: Mon 01 Jan 2024 14:30:32 +0000
ROA not before: Mon 01 Jan 2024 14:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51539
IP address blocks: 46.30.226.0/23 maxlen: 23
46.30.224.0/21 maxlen: 21
46.30.228.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 28 Jan 2024 08:40:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f5:bc:b9:c7:d9:68:53:e0:03:f2:aa:f5:8f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59a9e9f8ea47486d80c9d6dcfd568f654d4f07ee
Validity
Not Before: Jan 1 14:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00364c3fdbc0765c505ecbffd951f389bb93b2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:ca:e2:9f:88:4d:88:b1:e3:b1:c7:d4:a4:
0d:a8:0d:52:8c:9a:a6:ab:be:3f:b8:88:fd:bb:aa:
3c:7f:e2:d5:ff:d2:fb:21:9d:6f:66:25:e9:e8:65:
47:50:c2:6e:2c:6d:54:9d:c2:45:5e:d6:4a:61:62:
01:3a:c9:07:ea:2a:c6:55:e9:c6:e9:3f:f9:0e:8b:
94:62:56:44:21:22:56:b3:e0:11:49:85:16:9a:10:
d4:b3:de:4d:53:cb:8a:2e:c5:12:3d:23:2f:f6:5b:
01:87:d4:43:67:2b:df:75:53:c1:a4:c0:5d:9e:7f:
55:85:d0:f5:49:33:f5:bb:3b:86:e3:f7:4b:bf:cb:
56:7e:d7:a9:a8:7d:0b:dd:0a:bb:f4:11:c2:2b:e2:
06:1c:4a:40:e5:a5:a9:f5:77:b1:9b:47:21:46:f5:
2d:11:5c:e9:a6:f3:ed:78:b9:fc:5f:57:6d:d0:9d:
bd:c9:c9:ba:34:90:77:6c:2c:ad:fe:7a:ae:5a:70:
a7:18:5b:46:9f:c2:9f:bd:27:08:fc:87:de:bb:f4:
ca:cd:0b:0f:ff:7c:66:63:ac:57:51:6f:f1:71:dd:
d2:c8:cc:73:eb:15:3b:eb:79:bc:14:e8:0d:c0:fb:
89:ae:4c:92:23:ad:98:2c:21:f0:0b:80:52:95:37:
e5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:36:4C:3F:DB:C0:76:5C:50:5E:CB:FF:D9:51:F3:89:BB:93:B2:E4
X509v3 Authority Key Identifier:
keyid:59:A9:E9:F8:EA:47:48:6D:80:C9:D6:DC:FD:56:8F:65:4D:4F:07:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wanp-OpHSG2Aydbc_VaPZU1PB-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/ADZMP9vAdlxQXsv_2VHzibuTsuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.224.0/21
Signature Algorithm: sha256WithRSAEncryption
76:ef:b9:da:4b:9c:bb:bf:93:bb:6b:5a:db:ec:d6:50:80:e4:
92:38:a8:a1:9a:7c:50:31:b7:5a:bd:4d:9c:38:b4:90:45:45:
ad:a9:6c:c1:37:3e:74:12:e0:1f:d9:53:d5:75:c9:a9:7d:41:
f8:5e:01:1d:a6:bf:54:77:a6:5c:f9:14:83:9e:38:77:ad:fa:
35:ce:dd:7a:5e:51:ed:13:09:08:ce:c4:31:24:df:bf:43:4e:
ad:80:b1:a6:ec:79:fe:59:23:28:ce:83:dd:26:3d:f9:b0:66:
2e:7a:e8:1e:5e:b3:ab:2f:0c:39:be:e9:62:23:ad:48:76:af:
b2:84:1b:84:e4:6c:7c:cc:90:0f:a0:7e:20:78:c8:d1:94:64:
9a:87:8e:d5:b8:e5:04:61:1e:ca:53:67:4f:af:c8:e0:f0:a2:
71:c1:8b:dc:9d:98:10:9c:39:a3:35:7c:47:2d:ce:ba:40:c0:
63:10:78:3d:15:6a:ff:9f:bc:a6:65:05:c4:95:05:8c:d0:32:
90:79:38:00:51:00:f2:f1:ef:6c:cc:8e:76:65:e0:d5:78:f6:
77:b9:3f:51:0e:2a:bd:e7:db:da:ae:a8:4e:c4:86:ce:56:f3:
f1:be:94:9b:00:d6:a1:bf:0d:2b:ac:ff:25:eb:80:4d:df:33:
30:f4:3a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:10 2025 by rpki-client