Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/K0qNfa8k3SlrDNKvcmLIkG1gj4w.roa
File: K0qNfa8k3SlrDNKvcmLIkG1gj4w.roa (raw, json)
Hash identifier: dR8fe3fTk7ozjwP4fqnkEsHuQPh0D7eeyP0526PFvZE=
Subject key identifier: 2B:4A:8D:7D:AF:24:DD:29:6B:0C:D2:AF:72:62:C8:90:6D:60:8F:8C
Certificate issuer: /CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Certificate serial: 01906E57AF3006A5DD30FB0D95085521901F
Authority key identifier: C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/K0qNfa8k3SlrDNKvcmLIkG1gj4w.roa
Signing time: Mon 01 Jul 2024 12:49:18 +0000
ROA not before: Mon 01 Jul 2024 12:49:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52142
IP address blocks: 46.174.179.0/24 maxlen: 24
91.210.128.0/24 maxlen: 24
91.210.129.0/24 maxlen: 24
195.69.80.0/22 maxlen: 22
2a03:c940::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jul 2024 13:14:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6e:57:af:30:06:a5:dd:30:fb:0d:95:08:55:21:90:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Validity
Not Before: Jul 1 12:49:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b4a8d7daf24dd296b0cd2af7262c8906d608f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:be:9d:c2:de:ca:8f:fc:00:c4:b7:13:bd:be:
ae:48:fb:4e:ef:f8:7c:5e:62:b9:e8:66:2b:69:8e:
c7:ba:61:40:c8:ad:8e:34:14:23:17:f3:0e:4a:3a:
25:da:66:71:28:78:45:31:85:71:bb:82:65:8b:14:
08:93:4a:2a:a3:e9:ce:ea:d3:19:26:3b:e8:f9:73:
77:25:55:ec:04:92:e0:d1:31:65:44:e2:1d:ae:d2:
a9:fc:fb:55:a3:45:19:f9:cb:9e:26:37:8e:bb:a0:
06:7b:46:74:6b:70:33:98:57:1a:9d:d3:ec:43:0c:
ec:fd:3a:e2:36:e3:2c:fd:93:3e:b8:e9:ea:bb:f4:
91:27:7d:7a:44:fc:ca:d7:d4:64:4b:94:a3:ca:5a:
a8:6a:29:8e:1e:a6:bf:19:9e:ee:19:14:43:ba:d3:
a9:ed:4d:4b:98:de:b9:e2:29:dd:e1:f7:af:71:27:
ce:e8:e7:0f:6a:75:56:c2:c5:59:4a:a5:0d:32:e3:
e5:28:1f:bf:3c:8e:58:b2:d2:a3:ec:a3:bc:a1:5e:
33:f8:dc:ae:d3:44:b4:35:34:3e:4a:d0:73:98:b9:
59:33:70:43:4d:21:f3:30:51:cf:fc:8c:a6:f4:d7:
b4:bc:de:e4:d4:bf:33:ed:97:5c:50:7a:5e:6e:54:
9b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4A:8D:7D:AF:24:DD:29:6B:0C:D2:AF:72:62:C8:90:6D:60:8F:8C
X509v3 Authority Key Identifier:
keyid:C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/K0qNfa8k3SlrDNKvcmLIkG1gj4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.179.0/24
91.210.128.0/23
195.69.80.0/22
IPv6:
2a03:c940::/32
Signature Algorithm: sha256WithRSAEncryption
7f:21:12:8c:1d:27:6c:8d:4e:2c:e0:c9:3d:7a:3a:eb:6b:e1:
7d:59:f1:c0:6b:07:44:d0:18:8a:7f:fd:a4:74:66:a7:36:24:
2d:73:d9:3c:ab:ff:38:8e:0a:85:9e:be:fe:4b:90:59:2c:9d:
f5:ea:ba:78:43:c7:af:ae:a7:28:a2:aa:77:bb:95:d1:fa:80:
46:7b:9a:b0:f6:af:af:2c:1d:76:3a:05:dd:6c:e8:0b:76:4a:
43:97:c9:3e:12:40:c5:03:ad:09:ed:0c:5b:0e:52:65:8c:5d:
95:d9:78:40:90:ca:0e:3c:bb:cf:73:b4:17:7b:25:0b:9d:17:
e3:58:7a:d8:0d:58:eb:84:25:2a:00:db:1a:1a:55:63:72:90:
dd:25:31:35:d0:98:ce:b5:f9:e0:37:fc:a0:bc:d7:2d:42:5e:
5b:4a:b6:a4:12:32:ca:9e:72:58:8e:69:a6:5e:63:8f:ab:24:
00:ed:8a:c4:22:3e:05:a0:8b:a1:27:7e:31:85:e8:51:b6:4a:
d7:a3:cd:f6:46:e6:ce:a3:ab:99:25:75:00:b9:a9:d6:f8:84:
d9:05:4b:e5:f9:0a:8e:ee:5b:dc:d8:58:25:2c:65:34:24:8a:
21:c9:e0:34:ac:22:a3:db:99:76:31:93:8a:62:67:fc:fc:34:
dc:49:3d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:55:10 2025 by rpki-client