Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/400RQU0IeyPNGCGlKWBkiowY2TQ.roa
File: 400RQU0IeyPNGCGlKWBkiowY2TQ.roa (raw, json)
Hash identifier: LIgErLwswEUrpzUORgp6WFEcm0xXSdEwbcarAW4kB4k=
Subject key identifier: E3:4D:11:41:4D:08:7B:23:CD:18:21:A5:29:60:64:8A:8C:18:D9:34
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 01856ECB6B22525BC388E2949778C9A90EF7
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/400RQU0IeyPNGCGlKWBkiowY2TQ.roa
Signing time: Sun 01 Jan 2023 19:25:02 +0000
ROA not before: Sun 01 Jan 2023 19:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203903
IP address blocks: 46.148.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Aug 2023 06:48:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:6b:22:52:5b:c3:88:e2:94:97:78:c9:a9:0e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Jan 1 19:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e34d11414d087b23cd1821a52960648a8c18d934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3f:30:15:65:cc:87:e0:26:a7:e0:5b:be:fa:
9f:64:f9:80:54:44:00:79:8c:62:25:9b:7d:1f:03:
2a:d5:d6:3e:ff:47:2d:85:bc:41:97:ff:a8:19:ea:
da:5b:54:1a:46:51:a6:5f:16:4c:43:2e:27:3a:33:
13:b3:15:67:2c:b8:57:e4:ac:10:2a:1a:fc:e7:73:
86:fd:87:43:e8:41:ed:71:c2:49:0c:01:30:fd:a4:
20:c0:92:37:4b:68:6d:fb:31:2d:b9:3d:78:a1:8e:
63:b5:00:ac:89:72:fd:27:60:36:9f:f2:f1:33:37:
60:bf:36:73:f2:4e:08:58:bf:25:b6:8e:21:8e:4c:
10:c4:96:61:51:2b:63:d8:37:aa:01:26:9d:5c:e8:
92:6c:8b:44:e5:69:8f:d2:32:f8:ac:bd:73:9a:91:
b9:d9:de:3c:7f:80:85:48:52:78:11:d1:8a:1b:25:
52:92:70:7c:d4:08:35:a1:27:89:1f:e2:cf:2c:e3:
41:02:03:82:2b:3b:28:25:fe:b1:68:aa:10:c1:27:
6e:16:ed:3a:f1:d0:55:b8:1b:05:e0:92:86:c2:1d:
0a:00:5b:a6:6d:8a:b6:2d:ed:94:1b:85:01:a3:98:
a5:5b:54:07:ff:a0:9b:0c:0c:45:d4:5f:8f:27:af:
08:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4D:11:41:4D:08:7B:23:CD:18:21:A5:29:60:64:8A:8C:18:D9:34
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/400RQU0IeyPNGCGlKWBkiowY2TQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.38.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:a2:bb:72:5d:38:3f:05:05:40:10:bc:6d:2f:19:87:fc:30:
f7:23:95:81:48:9c:e3:f6:25:91:ab:dc:ee:e0:b5:27:ea:6b:
a2:78:93:cd:b1:ee:e0:63:78:be:bf:26:86:8d:47:b1:e6:bf:
2e:12:76:6f:67:02:3a:30:f8:ca:24:a6:00:ea:87:5a:e9:13:
c6:e0:90:6f:51:0f:29:ea:dc:3d:a6:74:b8:dd:17:e7:64:32:
16:db:7c:e0:9e:96:f0:13:09:21:d5:94:3b:09:83:b5:d3:b0:
7c:a2:53:33:44:53:d0:62:f8:94:61:e5:cc:00:fb:8b:47:98:
75:b3:d7:08:79:2c:dd:92:42:ce:da:95:f4:a4:d0:99:55:57:
42:61:3c:91:27:7a:28:26:37:35:d3:b9:66:b6:fd:2e:e5:7c:
52:e4:9b:a4:e2:40:56:af:27:92:8e:03:1e:f7:bc:b1:9e:54:
1c:bf:d6:aa:a8:ea:9f:d7:91:dc:74:d2:fc:9b:d9:38:52:9a:
41:33:11:e2:8f:c8:a8:82:36:c8:7a:34:d3:2e:db:b2:96:fb:
dd:44:f3:50:49:75:e9:ee:26:ee:d5:23:4a:d9:f5:39:e0:d4:
ad:96:f4:0b:81:54:49:60:ee:03:26:c3:9f:ff:f7:79:0c:a7:
d5:50:83:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:47 2024 by rpki-client on console-ams.rpki-client.org