Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1-7nISm-3S1yWRi0-42UZ2VDQuvs.roa
File: 1-7nISm-3S1yWRi0-42UZ2VDQuvs.roa (raw, json)
Hash identifier: 9wmfP3d/AY05N95Yqe4r0ijs6bQ/CoQD1VbRYRIxzCE=
Subject key identifier: FB:B9:C8:4A:6F:B7:4B:5C:96:46:2D:3E:E3:65:19:D9:50:D0:BA:FB
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018CC80126BFF71514B8469D4BA2FFC4C9F8
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1-7nISm-3S1yWRi0-42UZ2VDQuvs.roa
Signing time: Tue 02 Jan 2024 02:29:27 +0000
ROA not before: Tue 02 Jan 2024 02:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30823
IP address blocks: 46.19.201.0/24 maxlen: 24
46.19.207.0/24 maxlen: 24
185.176.116.0/24 maxlen: 24
185.176.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 14:53:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:26:bf:f7:15:14:b8:46:9d:4b:a2:ff:c4:c9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbb9c84a6fb74b5c96462d3ee36519d950d0bafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:f5:cf:f6:ce:88:08:f6:0f:ce:51:82:f4:
4a:48:fc:51:2a:92:ad:26:84:7a:73:10:74:0a:c9:
e1:13:ab:6a:96:0c:b2:d2:b0:13:82:7d:38:e7:ac:
f8:b1:36:5e:65:3c:05:94:b1:4a:96:33:36:78:6c:
03:ad:81:5f:c8:b3:d9:a5:97:a6:a8:4e:f3:0a:cd:
66:c6:30:3c:7e:d1:bf:d5:8d:1e:d4:4d:07:9a:25:
ba:fe:67:49:74:05:23:8b:fc:d2:aa:ef:69:db:ce:
6d:8c:24:aa:3e:55:8c:44:c9:77:c5:79:1d:75:46:
eb:af:ad:09:d2:f5:e2:56:15:6f:8c:fb:64:61:8c:
1b:63:58:df:53:5d:4a:96:57:ea:5b:29:a7:36:fa:
47:14:e0:df:27:db:aa:2b:df:c1:f2:3c:fd:26:f9:
04:8b:d2:32:e7:0d:bf:8e:72:bf:65:64:57:2c:cf:
bc:e2:86:7d:f0:4d:47:89:78:72:1f:73:ba:38:c2:
ba:f9:17:16:66:bf:ee:86:7d:d1:fa:8c:d9:32:72:
ef:27:94:db:7f:65:98:53:cd:b4:58:a4:94:ad:c5:
df:b4:fe:d6:8a:ec:28:93:5d:94:f0:79:1d:ef:74:
bc:32:8a:c5:2f:35:ca:7d:17:8e:45:d9:59:79:fa:
fd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B9:C8:4A:6F:B7:4B:5C:96:46:2D:3E:E3:65:19:D9:50:D0:BA:FB
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1-7nISm-3S1yWRi0-42UZ2VDQuvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.201.0/24
46.19.207.0/24
185.176.116.0/24
185.176.119.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:48:e8:d2:04:20:47:22:c8:8a:8a:56:d4:17:6a:2f:ee:e5:
55:c6:e2:08:5a:fd:83:50:34:58:45:03:b7:88:f7:fb:5f:3d:
ef:88:ce:5e:cc:0e:ae:b3:ff:67:f0:f8:75:f3:7a:fc:d4:ad:
08:ff:16:eb:02:af:b6:0f:09:4a:76:93:0c:9f:e3:91:44:c2:
e8:d7:19:e1:c8:f7:5f:8c:3f:e4:a0:07:9a:67:a4:eb:f5:d9:
6e:f9:b4:9a:6e:44:ee:a4:1a:03:e9:70:1b:af:37:e0:2f:0e:
54:db:cd:d0:c7:92:8a:cc:6a:a4:86:68:92:89:8b:dd:7f:4d:
9b:8d:81:3f:6f:c6:64:72:2e:e0:bd:dc:86:b3:41:c2:58:c2:
6a:35:32:4e:c1:29:ef:7d:5a:70:27:d7:16:72:d3:57:15:05:
f6:53:26:3a:59:46:10:b9:f6:aa:89:e8:af:2d:65:1c:e5:d3:
e5:5a:06:f6:9a:f5:4b:45:cc:bb:24:83:a4:03:bf:fe:53:70:
a3:3c:3d:ea:a6:d1:69:ab:98:e0:d6:3d:a8:9f:0a:e0:c8:4d:
29:bb:88:1e:31:2f:fb:40:62:c1:3c:e8:5e:5e:04:6d:e2:38:
2b:85:fa:38:31:8e:08:6c:cd:78:21:cf:c5:73:f7:2b:d8:aa:
31:9a:61:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:52 2025 by rpki-client