Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/6rOz-S-AQ54KOIlMU_CC9ibFq08.roa
File: 6rOz-S-AQ54KOIlMU_CC9ibFq08.roa (raw, json)
Hash identifier: brV0FS49QLfT8nLChEwgAiGhIbL8nc+2CIvinFNhUGg=
Subject key identifier: EA:B3:B3:F9:2F:80:43:9E:0A:38:89:4C:53:F0:82:F6:26:C5:AB:4F
Certificate issuer: /CN=0d69e3ee55dd862674d458661ba34908b0617fa1
Certificate serial: 01944BA60571D72D995A7B4D727ACA66FB58
Authority key identifier: 0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/6rOz-S-AQ54KOIlMU_CC9ibFq08.roa
Signing time: Thu 09 Jan 2025 15:19:19 +0000
ROA not before: Thu 09 Jan 2025 15:19:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8899
IP address blocks: 46.245.216.0/21 maxlen: 21
150.5.0.0/18 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Jan 2025 08:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:a6:05:71:d7:2d:99:5a:7b:4d:72:7a:ca:66:fb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d69e3ee55dd862674d458661ba34908b0617fa1
Validity
Not Before: Jan 9 15:19:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eab3b3f92f80439e0a38894c53f082f626c5ab4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:63:fb:67:e4:f2:93:01:b6:5e:16:6d:b8:
42:af:ed:81:da:af:ce:1a:4b:0b:2f:3a:60:10:e7:
4c:1b:35:e9:61:e2:0b:3d:0a:90:ca:85:b5:ca:47:
cb:e3:e7:b8:e7:53:bf:76:32:4e:0c:29:ec:df:2f:
25:52:74:34:52:4d:a7:e5:9a:dd:97:8f:8f:f4:24:
22:21:91:c2:f9:94:87:e0:26:6a:61:d0:ac:74:2d:
3f:e7:8a:79:8d:84:d3:9d:8a:c6:40:1c:14:90:25:
3f:6b:73:7d:71:7c:8d:f0:32:9f:c7:ef:e2:a8:47:
6f:58:66:36:be:a3:78:15:e7:9f:08:69:14:11:d9:
d4:08:13:a8:85:2e:b2:08:fb:fd:3a:67:f5:c9:0c:
16:0e:a5:83:eb:7e:b6:18:ef:de:5b:92:03:b1:a0:
01:c2:97:9b:88:cb:a7:84:e4:6d:3f:e0:06:b2:54:
84:f5:c1:da:76:77:9c:9a:c2:ae:6b:57:24:ec:bc:
a2:cd:21:93:58:77:3d:3f:a0:a9:73:35:5e:37:30:
c4:62:5c:55:56:99:8f:a3:08:8e:76:f4:93:98:94:
4d:f4:98:28:4b:25:bc:2f:b5:17:6a:15:57:e8:63:
e7:e1:be:8e:0b:38:8f:e3:12:ea:da:73:08:59:7f:
e5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B3:B3:F9:2F:80:43:9E:0A:38:89:4C:53:F0:82:F6:26:C5:AB:4F
X509v3 Authority Key Identifier:
keyid:0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/6rOz-S-AQ54KOIlMU_CC9ibFq08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.216.0/21
150.5.0.0/18
Signature Algorithm: sha256WithRSAEncryption
08:af:c9:2f:fa:21:5c:f7:3f:10:fc:d7:27:af:10:95:0a:b0:
b0:d5:b6:74:df:09:07:7f:f7:3d:89:46:0d:be:ac:0b:f4:1f:
48:d0:f7:d7:8b:74:f3:e5:28:4e:5b:c8:1b:eb:27:88:ec:87:
8e:57:9a:55:cd:35:a0:e8:8f:e5:f0:13:e6:41:86:2b:d4:ce:
73:c9:fd:7f:9f:26:0e:27:fa:d2:7c:7e:36:83:77:64:b3:cc:
8c:17:89:e9:59:69:14:e6:db:b2:e1:cb:8e:5c:1e:de:9e:e9:
bf:ae:2e:05:6e:69:72:ae:45:4d:61:f4:2e:01:2d:cc:10:4f:
00:75:cb:12:c1:0f:6b:88:d2:23:99:69:57:23:18:26:93:fd:
1c:61:70:d1:6e:e6:5c:9e:e8:4d:de:7c:f1:08:9a:e6:78:90:
72:cf:cb:57:3a:80:3f:73:45:46:e9:f1:83:42:4a:95:dc:98:
d4:da:c4:d4:d2:c8:f4:ca:95:25:54:e8:45:1f:f4:d1:35:61:
cb:7b:e9:7c:8c:cf:8f:cf:40:b8:02:20:64:c3:04:20:84:c3:
23:25:61:43:58:75:dd:3a:e5:e3:e4:17:5e:96:61:ca:5b:07:
72:df:ce:ab:e8:94:db:d0:d4:c7:21:57:77:f6:c9:cc:25:8e:
23:54:22:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:50:54 2025 by rpki-client