Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/KGfagalHLkIvlfNgakoU4bR7X-Q.roa
File: KGfagalHLkIvlfNgakoU4bR7X-Q.roa (raw, json)
Hash identifier: uhe11DXrzRJcKm2n5ygifA3W1/SZjdSscZ4bF4fvjd8=
Subject key identifier: 28:67:DA:81:A9:47:2E:42:2F:95:F3:60:6A:4A:14:E1:B4:7B:5F:E4
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 0190FEB665796C6E60FDB506B12AB071258B
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/KGfagalHLkIvlfNgakoU4bR7X-Q.roa
Signing time: Mon 29 Jul 2024 13:38:04 +0000
ROA not before: Mon 29 Jul 2024 13:38:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48449
IP address blocks: 46.20.99.0/24 maxlen: 24
46.20.104.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.160.195.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Aug 2024 13:28:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fe:b6:65:79:6c:6e:60:fd:b5:06:b1:2a:b0:71:25:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jul 29 13:38:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2867da81a9472e422f95f3606a4a14e1b47b5fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a6:7b:4a:26:a2:cd:91:19:48:37:ec:78:db:
21:84:b5:d6:94:f4:de:e2:21:4f:b9:3f:de:99:38:
77:2b:b9:43:14:45:46:d6:62:87:e7:6c:9a:86:0e:
bb:3c:ac:df:cc:01:70:e0:81:28:2c:ad:9f:94:21:
86:a9:55:7e:e3:35:22:c3:1f:94:08:f1:97:38:32:
c9:e3:fe:8c:7b:a8:7f:1d:87:70:16:ae:14:a5:eb:
5b:fc:3f:41:0a:e7:5c:6a:48:04:38:ae:9b:56:7f:
d5:2c:a2:86:15:2d:81:66:f7:0b:86:56:4e:0e:4c:
ed:36:84:7c:02:ad:86:76:80:f9:ba:44:a4:c1:51:
0c:6b:8f:fa:a5:83:0f:17:46:e3:5c:5a:db:ad:b4:
1e:73:39:c4:1b:6f:38:06:0b:1f:e8:93:c0:b4:2e:
5d:9a:8e:7d:f0:78:f9:bd:28:22:75:f8:b6:1e:23:
68:f1:6f:67:2b:b1:be:99:e4:49:89:f5:2d:1f:cc:
f0:1e:c5:06:94:ee:55:77:49:14:42:45:0f:b1:97:
be:6c:e5:f3:b7:d3:a9:aa:80:f2:82:1c:0d:5f:27:
18:5c:68:f9:6c:63:54:3f:04:7c:a2:47:2b:20:6f:
4b:0d:7c:f2:6b:19:59:cc:4d:2a:82:65:47:ea:87:
ed:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:67:DA:81:A9:47:2E:42:2F:95:F3:60:6A:4A:14:E1:B4:7B:5F:E4
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/KGfagalHLkIvlfNgakoU4bR7X-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.99.0/24
46.20.104.0/24
185.160.194.0/23
185.169.221.0-185.169.223.255
Signature Algorithm: sha256WithRSAEncryption
51:e5:03:dc:54:3f:ef:14:4b:21:e5:97:66:e0:31:1c:35:02:
1e:76:5f:85:93:ab:42:ab:b8:dc:5c:0b:8b:d2:a4:c8:8e:a4:
9c:ec:32:a9:40:13:b9:91:55:3d:4e:6f:d7:c4:14:65:a6:17:
1e:c7:cb:4c:29:df:c5:ac:85:f5:e3:2d:16:3f:e9:f1:a5:49:
30:a2:9e:ed:d9:28:c2:98:0a:0d:8f:70:4e:98:fc:9c:30:a2:
37:bd:56:a4:b6:2d:0f:00:dc:7c:d4:68:54:a1:22:0a:78:98:
b6:6c:50:bd:f5:10:7f:6c:ba:2a:ed:30:bc:54:9f:7e:0a:76:
63:d9:18:2a:65:83:f1:bf:01:16:9a:39:b2:51:4f:d4:b1:63:
4c:8e:86:58:74:4b:25:87:b6:29:c1:89:75:e4:73:aa:18:e3:
eb:ab:72:cb:89:7d:59:85:47:be:4c:a0:67:c8:ba:a7:a4:88:
1d:be:5b:7f:5a:11:7d:48:31:cf:f9:04:65:7b:f3:0c:b6:78:
ea:3f:9d:49:3f:72:f6:68:87:24:61:a1:34:ea:c8:e8:97:c6:
83:86:04:86:58:8b:7e:dc:09:be:e7:2e:55:c4:00:58:e7:fe:
ac:1e:b6:0c:91:4d:c0:32:80:a5:6b:51:bb:3f:60:98:a4:88:
2d:4b:02:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 13:47:03 2025 by rpki-client