Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/KP-2Vy2M9JzxSMO1cqZ1fm6EakE.roa
File: KP-2Vy2M9JzxSMO1cqZ1fm6EakE.roa (raw, json)
Hash identifier: QuyhumAnDCYjjifzPZD8/E0SJSuUzd6uFEQ8pc9yC4I=
Subject key identifier: 28:FF:B6:57:2D:8C:F4:9C:F1:48:C3:B5:72:A6:75:7E:6E:84:6A:41
Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Certificate serial: 01961F128FF71D0ED54CB885978F67B8ADDF
Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/KP-2Vy2M9JzxSMO1cqZ1fm6EakE.roa
Signing time: Thu 10 Apr 2025 09:40:32 +0000
ROA not before: Thu 10 Apr 2025 09:40:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 46.17.14.0/23 maxlen: 23
2a02:2870:8000::/33 maxlen: 33
Validation: Failed, certificate revoked on Thu 10 Apr 2025 14:40:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:12:8f:f7:1d:0e:d5:4c:b8:85:97:8f:67:b8:ad:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Validity
Not Before: Apr 10 09:40:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28ffb6572d8cf49cf148c3b572a6757e6e846a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b7:d0:db:b0:f3:26:49:4f:f3:3b:b3:db:b0:
c5:f4:0a:8c:1f:09:44:0e:29:85:bf:bc:72:5e:e3:
ab:33:c1:a0:71:a7:91:f1:16:9a:76:5f:74:1f:85:
11:81:58:2e:63:62:5e:74:51:df:7b:9f:e6:6c:98:
e7:2e:73:0f:26:fc:60:b3:f1:6c:f3:9d:50:5e:5f:
9e:37:c2:41:5a:79:6e:66:32:3c:58:b0:7d:0c:0b:
ed:de:99:0b:6b:64:48:e5:80:80:6d:ec:61:3e:46:
96:d6:aa:0f:87:8b:f0:09:72:60:19:11:2a:01:90:
e7:2d:01:c4:e0:5f:8d:3e:32:52:51:b6:31:c5:35:
57:ab:4e:26:27:3a:ca:0e:a8:0b:77:de:e8:74:f0:
04:49:88:66:4d:08:11:39:96:b9:6e:ef:bf:e8:7e:
78:25:c8:69:75:89:29:f2:fb:f1:88:e7:a8:65:d7:
be:e4:a1:17:11:00:a8:80:0f:8f:fd:e3:01:1a:33:
16:21:ae:80:56:bd:fe:3b:1b:25:a5:65:7d:d1:b0:
93:1c:20:5a:a6:18:0e:74:f3:fc:1c:7c:1e:0b:51:
bc:c9:42:b4:24:26:89:4d:ca:93:d9:13:67:61:cd:
b6:95:75:a6:71:01:21:66:5a:5c:76:c1:03:6c:58:
5e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FF:B6:57:2D:8C:F4:9C:F1:48:C3:B5:72:A6:75:7E:6E:84:6A:41
X509v3 Authority Key Identifier:
keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/KP-2Vy2M9JzxSMO1cqZ1fm6EakE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.14.0/23
IPv6:
2a02:2870:8000::/33
Signature Algorithm: sha256WithRSAEncryption
11:59:d8:26:ee:00:2b:23:22:a2:58:e9:9c:b3:d3:c2:8b:50:
dd:ed:e6:d8:3a:17:3c:c9:8f:f3:2c:ba:f3:e3:a0:a9:5e:e4:
f2:26:90:48:0f:37:c1:0b:15:72:53:0f:13:61:76:5a:17:0d:
e9:9a:e4:a1:29:b2:77:a8:e3:46:0c:ae:8b:be:a9:4c:2b:40:
ff:b3:13:dc:f6:9b:af:a0:0a:1e:31:9d:67:cd:4e:95:07:e2:
64:48:a5:9b:54:7c:a1:fa:f5:41:14:11:76:ed:d1:ad:4f:b1:
74:71:ab:a2:78:16:f3:9e:55:ae:a9:5d:e2:35:6c:02:ec:3d:
5f:4e:12:1f:4a:56:90:bd:95:c7:db:ba:9b:69:b0:09:ef:24:
94:f2:8d:f6:df:d9:ec:ec:ca:f3:4a:81:50:25:d4:ee:73:5e:
c0:bd:46:37:f6:a0:f4:a5:01:54:df:89:0d:9c:54:bc:79:6b:
f0:56:6d:27:28:9d:f0:e7:db:c5:4c:0e:21:76:48:5c:5f:9e:
f8:74:ee:fa:0f:77:58:a5:40:12:69:05:a4:a8:6f:01:72:70:
12:a2:14:d7:6c:d1:d4:3c:f6:0a:0b:cb:c3:c8:ee:1c:88:42:
cc:bf:7d:40:1f:8a:c6:f5:62:de:a5:f0:88:79:90:be:77:9a:
b5:8d:12:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:53:59 2025 by rpki-client