Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/Kzu8oyBM_1Lxdm0qA0T9ee7iFCo.roa
File: Kzu8oyBM_1Lxdm0qA0T9ee7iFCo.roa (raw, json)
Hash identifier: HzMasaiUfYvuzLH/TWk6vwbGgd0ccvO06Z9QDDXCkXo=
Subject key identifier: 2B:3B:BC:A3:20:4C:FF:52:F1:76:6D:2A:03:44:FD:79:EE:E2:14:2A
Certificate issuer: /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Certificate serial: 0190DA9AD72A47E3F9028D3F17F14EF72763
Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/Kzu8oyBM_1Lxdm0qA0T9ee7iFCo.roa
Signing time: Mon 22 Jul 2024 13:21:38 +0000
ROA not before: Mon 22 Jul 2024 13:21:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53856
IP address blocks: 46.173.68.0/22 maxlen: 22
46.173.72.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 22 Jul 2024 14:19:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:da:9a:d7:2a:47:e3:f9:02:8d:3f:17:f1:4e:f7:27:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Validity
Not Before: Jul 22 13:21:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b3bbca3204cff52f1766d2a0344fd79eee2142a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:b3:44:6b:36:26:f6:52:79:53:21:b8:39:
2f:b6:5c:cd:b7:1a:c2:d0:d6:02:14:a2:aa:0b:85:
25:fa:8c:ec:a1:5c:3f:27:dd:d9:a3:20:ba:e3:72:
e5:dc:46:49:d8:54:ec:12:98:bd:6d:c8:2f:17:85:
2a:15:29:24:53:81:91:37:b8:43:9c:c6:08:b3:32:
61:fe:98:3e:c2:7f:f4:d7:54:c3:5a:df:b0:3f:08:
30:ea:f4:2b:d9:e1:6f:5d:1e:f1:72:3a:55:d9:1e:
01:61:c9:72:a4:0f:7d:f2:ec:44:95:08:0d:51:99:
f8:fc:54:d5:34:ea:89:42:d8:86:a5:ae:65:90:45:
98:9f:78:49:3a:85:12:b1:e0:89:bb:97:85:2e:5d:
8b:31:2a:71:34:35:08:61:5b:8c:bf:f0:d3:31:3d:
10:70:0c:b2:64:23:99:6a:36:ae:13:68:9b:07:03:
d2:b4:a9:96:d5:b0:6c:a0:77:23:c6:cc:09:8e:18:
22:fe:a0:67:ad:28:77:21:15:6f:1e:de:9c:08:20:
f8:31:7f:a0:cb:80:c7:7c:4e:67:d8:f3:32:f0:c1:
cb:64:d3:81:7d:7a:4f:08:ed:1b:ed:03:df:1c:5e:
c4:4d:66:fe:85:a6:c1:3f:41:ff:bf:b2:ff:0a:9a:
2a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3B:BC:A3:20:4C:FF:52:F1:76:6D:2A:03:44:FD:79:EE:E2:14:2A
X509v3 Authority Key Identifier:
keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/Kzu8oyBM_1Lxdm0qA0T9ee7iFCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.173.68.0-46.173.75.255
Signature Algorithm: sha256WithRSAEncryption
74:4d:ab:36:8e:c3:98:5b:2f:86:b7:8c:0f:b9:ef:fb:4e:94:
46:13:56:8a:45:0b:3b:03:6d:5f:de:06:0f:23:d5:e1:cd:2d:
1e:7e:37:d8:3c:20:a9:38:de:82:09:da:d4:7e:ed:b1:0a:af:
ac:df:73:3b:f7:1e:38:1a:1a:17:f6:28:e0:31:36:98:45:a6:
ad:98:89:04:66:9c:53:6f:5f:24:19:b2:fa:b1:e0:d4:f8:5c:
fb:cd:1d:d6:ee:76:79:f5:5f:c7:47:06:b0:30:f1:a6:3b:f2:
7e:d8:0d:b5:a1:0d:48:d4:0b:a7:cc:68:dc:49:79:48:ba:b2:
67:2a:df:42:7b:43:bf:f7:36:61:cd:29:c6:e6:6d:21:22:59:
ae:fc:ec:37:9c:ed:a0:ca:e2:f6:70:2a:32:83:ec:29:a6:6e:
75:57:eb:53:39:77:99:ed:bd:b2:56:c6:23:f2:fa:b3:80:46:
26:2d:cd:dc:91:9a:28:da:cd:4d:16:26:43:44:67:14:64:e6:
99:04:ed:7a:2e:92:7f:60:63:8a:be:91:4f:ec:99:e5:cb:4c:
e3:28:8e:c2:85:24:44:0c:4a:91:bf:a9:4d:e3:5b:48:60:d4:
b0:66:a0:18:01:d4:bc:08:b6:35:bb:75:5c:66:c3:50:20:c2:
9d:58:37:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:47:01 2025 by rpki-client