Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/3djV4ajmbzjyoj0geLZllxdKmUA.roa
File: 3djV4ajmbzjyoj0geLZllxdKmUA.roa (raw, json)
Hash identifier: uW8BnbqjhYGJbXg5X6o1mcc1Q961JzEG57MAd6PEiqA=
Subject key identifier: DD:D8:D5:E1:A8:E6:6F:38:F2:A2:3D:20:78:B6:65:97:17:4A:99:40
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 0189EDA7B5AF66248D67937161983EA757E1
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/3djV4ajmbzjyoj0geLZllxdKmUA.roa
Signing time: Sun 13 Aug 2023 06:48:58 +0000
ROA not before: Sun 13 Aug 2023 06:48:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5
IP address blocks: 46.148.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Aug 2023 13:24:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ed:a7:b5:af:66:24:8d:67:93:71:61:98:3e:a7:57:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Aug 13 06:48:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddd8d5e1a8e66f38f2a23d2078b66597174a9940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:47:05:8e:bb:06:f9:19:2a:3a:45:39:f9:
fa:aa:ab:d6:41:0a:d2:5c:a6:95:98:0d:e0:0e:80:
8c:be:3a:72:64:cc:a5:53:7e:4e:5e:14:68:9c:8d:
d4:3d:7b:41:da:ae:f7:d5:a3:5e:46:68:98:00:7e:
5e:1a:94:6a:fc:50:6a:0d:4b:2e:0d:2a:5d:24:14:
cd:7d:67:d8:ca:78:8b:cb:60:68:24:51:34:67:1b:
01:20:f3:be:53:d3:b8:aa:86:5b:5c:87:9f:98:bb:
37:f4:e5:d2:ca:f0:79:9a:f9:d4:1f:5e:0a:1e:e7:
fe:9e:37:6f:96:95:25:86:7c:f0:29:07:3b:dd:8e:
79:c4:8e:fd:6b:f3:b1:3f:0e:53:74:48:02:2b:d5:
e7:0f:22:6e:55:67:0e:7a:bd:3e:2c:40:f1:b8:65:
f3:26:f4:46:d1:cc:bf:e7:07:9b:79:52:84:ed:c4:
fa:52:ee:01:fc:82:9d:25:90:02:ad:2a:9d:8c:78:
e2:15:b8:8c:41:84:be:de:12:dd:e1:40:36:ba:36:
c1:72:29:83:5e:8c:6c:e8:3e:d7:7e:0b:a0:b4:3d:
03:0d:33:05:41:5b:82:d5:e1:9b:0e:91:c4:62:26:
4c:4e:3b:36:cd:af:da:80:08:9b:4a:1b:ba:f9:24:
a4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D8:D5:E1:A8:E6:6F:38:F2:A2:3D:20:78:B6:65:97:17:4A:99:40
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/3djV4ajmbzjyoj0geLZllxdKmUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.38.0/24
Signature Algorithm: sha256WithRSAEncryption
88:f2:f9:04:ad:0a:3b:b2:43:20:c2:92:21:7b:a9:d6:31:5c:
69:17:0a:91:d7:60:7a:c9:3c:e5:20:2d:50:61:24:83:35:b5:
cd:5b:45:6d:84:9d:39:67:0c:90:f1:d4:3a:5e:eb:08:3b:59:
2d:f7:73:60:6b:8f:1a:f6:73:10:30:52:6c:b5:65:82:51:ba:
ee:33:82:7c:a4:c3:5a:63:cc:39:70:5b:b3:d7:da:da:2c:ec:
4b:a2:2c:15:56:7b:b3:62:01:c9:7a:f8:ce:1f:c1:fc:74:ef:
5e:3e:d5:90:cd:99:c0:60:e1:e8:51:51:58:8b:87:24:2d:c3:
f5:28:ff:be:94:ba:ef:cb:aa:05:03:1d:e7:2f:f5:7d:c3:67:
61:fb:17:ce:fb:9e:90:bf:91:ca:fe:4e:14:df:a9:1e:f3:30:
97:9c:17:45:a8:9e:a4:74:49:54:78:6f:1c:39:d9:06:ef:43:
5e:b3:b3:66:5f:3e:f2:1c:6d:fc:4e:38:e8:a6:76:71:72:bd:
30:42:3f:5f:a4:2a:61:0d:c4:0f:52:5d:b8:f0:a5:f1:06:75:
6d:81:90:55:0a:99:0e:da:e0:0e:3c:12:27:c0:0c:49:67:00:
3b:b9:01:70:06:81:92:c2:12:2b:9d:70:a3:7b:b4:1a:71:8f:
f4:e0:2c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:21 2024 by rpki-client on console-fra.rpki-client.org