Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/Nqgfd5kFdJ-oh_1l5dER4-velKs.roa
File: Nqgfd5kFdJ-oh_1l5dER4-velKs.roa (raw, json)
Hash identifier: /T4HpZF/jGYGn1ybRVo/ZM5N25Q4uMrZbAWaoyJ8GNQ=
Subject key identifier: 36:A8:1F:77:99:05:74:9F:A8:87:FD:65:E5:D1:11:E3:EB:DE:94:AB
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 018A184BBC3A93DFE5DC33311D21762D74A0
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/Nqgfd5kFdJ-oh_1l5dER4-velKs.roa
Signing time: Mon 21 Aug 2023 13:32:11 +0000
ROA not before: Mon 21 Aug 2023 13:32:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51274
IP address blocks: 46.148.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Sep 2023 13:27:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:18:4b:bc:3a:93:df:e5:dc:33:31:1d:21:76:2d:74:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Aug 21 13:32:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36a81f779905749fa887fd65e5d111e3ebde94ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:72:e4:72:bb:93:77:3e:a7:45:66:6e:a4:
2c:0d:75:3f:09:b4:a3:a6:e2:6c:83:44:92:14:a3:
ab:c5:37:b4:b5:d3:c8:e1:f9:4b:b1:87:4e:02:ee:
06:d2:5d:c4:33:16:10:cc:bd:07:cd:7b:fd:e8:f7:
f3:c8:4e:85:0b:9b:b8:cf:e3:e3:d1:f3:74:d4:ba:
39:2f:87:3c:0a:64:e9:a8:94:6d:fa:e6:6d:5e:42:
1b:9b:88:e9:d3:66:42:4e:5e:c6:b1:51:62:37:fd:
c3:4f:82:cc:86:44:79:79:da:bc:dd:1b:3b:a4:38:
f1:c2:64:24:e5:f0:5d:e4:bc:7e:ac:d2:9a:d2:66:
f6:4d:fc:e2:aa:65:61:0c:68:e1:46:1a:bd:f9:d4:
a9:f4:d5:fb:9d:41:f0:bc:69:11:1c:ac:3f:5c:70:
fc:6c:d6:ae:ef:46:8c:8c:16:dc:60:24:03:e3:84:
eb:36:78:6a:75:c3:8a:62:31:32:4b:3b:f6:01:dc:
0e:81:37:3f:34:fd:df:f9:a2:37:44:d5:81:fb:6c:
61:df:2f:1b:99:71:4c:d7:1f:84:c4:ae:7d:92:34:
40:20:5f:1a:60:3a:42:0c:2c:4f:de:3a:80:1a:e1:
25:62:77:b0:05:f8:76:39:58:4c:b1:8a:99:f1:22:
93:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A8:1F:77:99:05:74:9F:A8:87:FD:65:E5:D1:11:E3:EB:DE:94:AB
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/Nqgfd5kFdJ-oh_1l5dER4-velKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.41.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:90:4d:01:e1:cb:23:c1:a4:27:85:2d:48:5b:41:d7:af:f8:
cd:d1:09:42:9c:c6:e7:c9:db:b0:ae:a8:0b:44:10:c0:51:cc:
e1:25:ac:a2:87:cf:82:19:09:b4:0d:ed:c8:87:2e:13:7a:8b:
29:c7:ac:76:74:b1:19:90:d9:f7:9c:17:78:30:d6:c2:97:31:
1b:6c:7e:37:9d:e5:03:25:4e:5d:0c:1a:9d:9d:43:d0:af:7e:
3b:66:ac:f8:11:39:79:0d:2d:0c:51:98:b1:da:d4:9b:e8:ab:
8c:57:e1:37:f1:49:a6:80:10:9c:65:51:cc:55:62:be:76:20:
37:c2:47:6d:c6:48:ea:d3:60:fb:ee:16:7b:28:3f:9b:bb:ff:
49:57:06:7e:b0:da:0b:a1:13:b9:9c:4e:a4:18:0b:c8:94:c3:
56:3d:14:1a:b5:8c:ae:ea:e9:e8:4e:9e:bf:01:6b:a5:5b:23:
62:07:14:7d:80:b8:4c:c5:03:35:70:b3:ac:77:f4:17:4b:34:
8f:ef:6d:ad:04:b3:30:9b:2a:17:44:6b:9c:c4:fd:dc:4c:2f:
4b:8b:b0:98:07:72:ba:24:8b:4e:25:f5:bb:e9:62:30:d1:d2:
03:c7:0b:4f:a5:af:65:27:a8:1c:be:d8:3a:58:fa:4f:70:31:
96:fa:8e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:47 2024 by rpki-client on console-ams.rpki-client.org