Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/1-eKP4D1EBCOcP0zZIeYS6FPJfeM.roa
File: 1-eKP4D1EBCOcP0zZIeYS6FPJfeM.roa (raw, json)
Hash identifier: C6XuvAlb/5mt1Ky8Wf0GA9C/BQI0pv4FLXT2fvqCS9s=
Subject key identifier: F9:E2:8F:E0:3D:44:04:23:9C:3F:4C:D9:21:E6:12:E8:53:C9:7D:E3
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 019667E174BAD559EA28BB25E2C3CE9A7F7A
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/1-eKP4D1EBCOcP0zZIeYS6FPJfeM.roa
Signing time: Thu 24 Apr 2025 12:59:10 +0000
ROA not before: Thu 24 Apr 2025 12:59:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 May 2025 08:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:67:e1:74:ba:d5:59:ea:28:bb:25:e2:c3:ce:9a:7f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Apr 24 12:59:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9e28fe03d4404239c3f4cd921e612e853c97de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:03:e6:b2:e5:24:38:f9:30:b5:47:04:12:
62:b9:6a:2f:b6:37:55:91:39:da:55:42:5a:e3:56:
e1:45:92:d6:09:31:29:4e:76:7f:80:23:22:95:bc:
99:59:a0:6a:0d:60:d8:8c:a1:11:98:5a:30:b0:65:
80:b9:37:82:54:fc:ee:e6:f9:59:27:1c:29:30:7b:
ca:44:1e:26:15:75:b3:92:0f:df:38:5a:3b:ff:58:
40:42:9a:c0:97:bb:c2:04:06:1d:dc:dc:f0:33:c5:
1e:ce:10:37:3c:60:b2:44:93:eb:70:26:5a:02:80:
f6:aa:a8:e6:02:77:4d:f6:56:0a:cf:d3:8c:10:48:
83:2c:13:6d:36:47:5d:ee:37:ab:35:c7:9d:2a:04:
92:30:60:e4:3c:f0:89:54:99:b7:fd:2d:0e:43:8f:
a1:ad:00:85:96:09:ea:d5:21:a2:99:28:99:1b:50:
ba:c5:e2:2c:4c:b9:03:36:db:5c:ee:f6:a8:32:19:
c1:26:99:8f:15:19:28:20:ef:b2:36:30:95:41:d7:
c6:bd:b5:70:2d:85:c0:db:82:5f:53:a0:ac:f2:2d:
2b:ae:35:de:cf:f8:c0:94:f3:1f:52:2d:e3:fa:4b:
48:f0:f7:4f:dd:73:9f:3d:27:66:cc:7d:cb:cd:24:
bd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E2:8F:E0:3D:44:04:23:9C:3F:4C:D9:21:E6:12:E8:53:C9:7D:E3
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/1-eKP4D1EBCOcP0zZIeYS6FPJfeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
01:e2:63:4c:5d:2f:51:79:29:2a:7a:fe:88:58:5c:b8:09:c4:
a9:b6:b5:fd:60:bf:bf:2c:47:56:1f:d6:34:8a:bb:dc:5f:b4:
37:77:a6:90:04:23:83:cf:2e:de:44:32:d7:49:9d:2f:9e:cd:
8e:03:f0:b0:7b:cc:ca:e2:7b:47:ee:61:21:36:3c:5a:0c:0e:
dd:01:bb:de:4c:43:01:c4:65:5c:42:c4:14:b0:b2:0a:8a:c0:
7e:7a:f8:1c:d9:62:c4:94:af:f2:ea:06:24:79:e7:74:8e:05:
45:61:35:77:5b:42:3e:f3:56:f4:5e:fd:d8:01:7a:c9:6e:93:
22:b8:75:6d:97:8d:8d:77:73:b5:d4:75:0e:e1:31:b4:e1:47:
c1:1e:70:59:a1:9f:82:9c:4c:ca:5e:dc:99:fe:2e:52:67:99:
ed:95:60:e5:ba:05:b4:a7:82:09:96:b9:ec:eb:07:e7:d7:c7:
d1:f5:20:d9:f2:27:71:4e:45:56:eb:ea:81:fd:89:12:12:3e:
ee:92:5f:28:a2:2d:62:12:0e:c5:6f:5c:2e:ed:4d:dd:c6:28:
c5:df:1b:b5:10:fd:a8:4e:3b:4a:23:b0:63:f3:89:7d:d7:23:
1e:ae:c4:e3:a1:1c:a3:93:a9:fb:d9:05:43:1b:54:6d:df:9d:
d9:73:d1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:14:54 2025 by rpki-client