Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/rAJRloeabHoUW2s2ChrioUU-TJk.roa
File: rAJRloeabHoUW2s2ChrioUU-TJk.roa (raw, json)
Hash identifier: lpquQ3Wjs29HuZbg8JLuhGxSvY+GM2Z4T3DZLCyemxw=
Subject key identifier: AC:02:51:96:87:9A:6C:7A:14:5B:6B:36:0A:1A:E2:A1:45:3E:4C:99
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0194B10CB15CF9294E5C8719709B68EC1E1E
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/rAJRloeabHoUW2s2ChrioUU-TJk.roa
Signing time: Wed 29 Jan 2025 07:53:06 +0000
ROA not before: Wed 29 Jan 2025 07:53:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 46.8.184.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jan 2025 07:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b1:0c:b1:5c:f9:29:4e:5c:87:19:70:9b:68:ec:1e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 29 07:53:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac025196879a6c7a145b6b360a1ae2a1453e4c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0e:00:0c:90:19:57:95:fa:b3:69:30:09:1e:
d6:96:cd:8b:ec:34:38:48:07:e6:57:11:f4:37:64:
ae:22:d3:44:86:a8:0b:2e:9c:9c:78:a0:be:75:e3:
cf:10:9b:63:16:95:84:e9:6e:b7:89:99:3b:3f:d8:
78:c6:2e:a9:ad:db:74:81:b0:12:f7:df:b5:0d:21:
1c:b8:a3:95:4d:a5:78:b7:80:16:91:51:8b:53:a3:
c9:09:02:fc:78:30:ab:25:7e:6b:70:08:7e:00:33:
af:ca:f8:f4:01:75:02:dd:93:b0:23:a1:98:f3:c6:
fd:f5:6a:ac:44:19:bc:40:ce:d7:b0:a1:48:65:5f:
fd:53:8b:22:56:86:4e:f2:62:00:ea:3f:a2:bf:fd:
3d:c1:3c:bf:4f:43:57:fb:84:cd:f8:c7:e9:92:c3:
f3:2d:c3:ad:3c:24:5f:f9:d3:14:d6:84:b0:bf:33:
37:0d:11:85:e0:15:d4:4f:a2:74:09:41:22:db:78:
67:44:95:44:12:0f:7c:43:f9:3b:0a:3e:3d:1e:4f:
b3:35:6a:e4:ab:3c:fc:75:cf:3c:2d:fe:ae:28:ba:
04:4d:10:3a:39:78:56:ef:ef:5a:f7:fc:eb:cd:80:
f5:ce:27:c4:dd:36:7d:3c:16:b3:20:86:d8:2a:f8:
b9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:02:51:96:87:9A:6C:7A:14:5B:6B:36:0A:1A:E2:A1:45:3E:4C:99
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/rAJRloeabHoUW2s2ChrioUU-TJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.184.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:62:1b:e6:74:ae:bb:44:56:55:b2:d7:28:17:6d:84:83:77:
d0:44:3f:ba:74:16:02:33:67:42:55:c6:44:3b:80:90:05:50:
42:6b:89:06:ce:14:06:77:89:f3:f1:b1:d9:bc:41:6d:46:17:
f7:08:44:db:b4:5a:e1:a6:61:c8:f7:d0:87:f3:29:00:c0:5a:
ea:ab:20:7c:d5:43:91:f0:cf:57:69:9d:5b:b9:4f:f4:7c:5c:
54:5e:c7:f7:f8:3e:3a:19:43:a7:9a:2b:d9:a4:03:c2:4e:3d:
38:8e:90:f7:51:b2:45:41:39:ba:2c:64:0c:11:ef:c2:5d:ee:
98:cc:f5:d3:cf:0f:eb:40:d0:c7:88:b5:2a:08:e3:b4:95:ac:
5c:e3:42:6d:0b:27:c0:2a:b6:93:ff:fb:da:2e:27:0d:85:c8:
03:12:18:43:15:d4:0c:2a:14:ed:73:f8:5e:ab:65:a6:17:51:
67:a1:4f:25:7c:e0:0f:16:36:8e:e1:4f:b9:e0:f3:09:9a:28:
ac:15:a7:9e:16:4b:27:b1:c0:37:bd:e8:f9:23:4d:c3:19:5a:
8f:db:8a:c4:8d:6a:b5:54:cb:07:41:bb:aa:cf:f0:84:ce:30:
a0:86:8b:76:6b:a9:5d:71:03:f0:5a:40:09:fa:b3:24:94:54:
1e:19:a0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:54:37 2025 by rpki-client