Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/vu2vnr-yjqMbXbNMxxJKtAEo_Io.roa
File: vu2vnr-yjqMbXbNMxxJKtAEo_Io.roa (raw, json)
Hash identifier: mQXKL48Bb4QlhKej6UsvFJ58H7NCljc/E8DZrcwOJwY=
Subject key identifier: BE:ED:AF:9E:BF:B2:8E:A3:1B:5D:B3:4C:C7:12:4A:B4:01:28:FC:8A
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018D36229190D0D8B44CD9ECFB5E3E08781F
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/vu2vnr-yjqMbXbNMxxJKtAEo_Io.roa
Signing time: Tue 23 Jan 2024 11:44:11 +0000
ROA not before: Tue 23 Jan 2024 11:44:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48449
IP address blocks: 46.20.104.0/24 maxlen: 24
46.20.106.0/24 maxlen: 24
185.100.168.0/24 maxlen: 24
185.100.171.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.160.195.0/24 maxlen: 24
185.169.220.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jan 2024 13:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:36:22:91:90:d0:d8:b4:4c:d9:ec:fb:5e:3e:08:78:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jan 23 11:44:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=beedaf9ebfb28ea31b5db34cc7124ab40128fc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ba:d1:d3:36:e2:98:a7:59:63:5a:cc:4c:62:
a3:ab:3e:ce:1a:c9:bd:34:6e:d1:93:78:93:3a:07:
02:47:1a:5c:bf:ce:79:8a:b6:f8:c3:8c:a4:f0:9b:
91:d4:60:15:aa:de:ad:87:d2:12:d6:01:e0:1f:13:
3c:f9:4f:5f:cc:1a:f9:51:c8:6e:2c:b6:c8:a5:80:
03:6f:df:90:9c:a8:22:4d:17:a1:4e:1b:5e:b2:70:
ef:dd:e3:e3:0f:8d:4e:49:24:c3:01:28:61:bf:6e:
ba:a6:c0:17:2a:fc:9b:f7:b9:53:11:52:fe:30:94:
d5:07:18:cf:43:01:fd:19:74:70:db:19:72:67:c3:
31:b5:17:2a:47:e8:dd:2d:d8:9b:cb:8e:e7:4d:9b:
8a:d4:53:96:a0:71:2d:7a:b6:61:f6:5d:e7:09:3d:
c9:c5:7a:50:20:85:45:a1:2a:18:73:5a:0b:73:e7:
1c:2a:8c:c3:09:f8:d9:5e:4d:b7:0d:71:3c:b7:ca:
be:88:2c:63:5b:ee:99:33:a9:0c:e9:62:88:a2:15:
29:39:d9:6d:1f:d6:82:9a:75:27:0f:7d:a2:94:73:
ea:45:4b:e3:c3:84:32:aa:77:ab:5d:04:78:55:dd:
18:5e:d1:22:c0:bf:ae:77:7b:30:07:3f:d2:3e:8d:
9e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:ED:AF:9E:BF:B2:8E:A3:1B:5D:B3:4C:C7:12:4A:B4:01:28:FC:8A
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/vu2vnr-yjqMbXbNMxxJKtAEo_Io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.104.0/24
46.20.106.0/24
185.100.168.0/24
185.100.171.0/24
185.160.194.0/23
185.169.220.0/22
Signature Algorithm: sha256WithRSAEncryption
94:c0:3a:13:50:d3:ad:c9:39:c2:27:2c:da:da:da:66:ff:58:
50:fa:a8:cd:d8:36:42:5b:b0:4f:89:30:a6:93:fc:6f:c4:37:
3e:76:96:3e:0c:c7:ce:4d:d4:a7:07:d4:0c:79:cc:8c:94:10:
ce:6c:a7:8f:2d:e5:ce:7b:68:ea:44:d5:e2:5c:aa:57:65:03:
9a:1e:f0:98:1b:34:b2:d1:39:81:39:87:66:fd:aa:22:02:d9:
01:47:07:2b:a4:05:95:38:b3:ff:e7:7a:10:39:1c:f6:d1:2e:
c9:92:36:b2:ee:3f:f6:d8:d4:c9:be:a5:71:44:e0:79:7d:47:
4f:c3:35:f2:68:eb:20:f1:26:8d:63:63:1f:d2:2a:0c:55:53:
f9:9e:69:3a:51:49:1b:41:dd:85:4b:59:23:fa:df:94:6e:a1:
9a:8f:ae:40:7a:d1:dc:0f:c6:6a:e3:14:9f:c1:bc:72:c4:49:
b1:11:e4:4e:a2:f7:e8:54:12:c6:89:ba:a5:bd:49:42:12:a7:
17:fb:6d:89:80:2f:fe:c4:7b:dc:29:88:05:7c:83:7f:61:57:
3c:8a:6f:cf:f2:b1:18:22:10:1a:03:f5:58:0e:59:8e:3c:c9:
68:ae:a0:6b:bd:30:19:80:1a:cc:1f:d3:b7:9b:dd:9b:8d:ec:
f7:f7:fd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:54:11 2025 by rpki-client