Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/YXUX_T9xEgC_TU794tCJQN_vG8Q.roa
File: YXUX_T9xEgC_TU794tCJQN_vG8Q.roa (raw, json)
Hash identifier: dbsv3Cp1iJ8yR+RAQPgGDk5a0tzZ/I5xx8iGZw/HXek=
Subject key identifier: 61:75:17:FD:3F:71:12:00:BF:4D:4E:FD:E2:D0:89:40:DF:EF:1B:C4
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 01856ECB6A6B6B71B156E79D88574FC8BABB
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/YXUX_T9xEgC_TU794tCJQN_vG8Q.roa
Signing time: Sun 01 Jan 2023 19:25:02 +0000
ROA not before: Sun 01 Jan 2023 19:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58192
IP address blocks: 46.148.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Aug 2023 06:48:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:6a:6b:6b:71:b1:56:e7:9d:88:57:4f:c8:ba:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Jan 1 19:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=617517fd3f711200bf4d4efde2d08940dfef1bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:05:68:82:2d:4b:a1:e3:2a:b1:2d:ab:03:c4:
41:80:aa:05:4f:c5:ae:73:6e:d5:ed:7f:95:00:45:
4c:95:a3:77:0e:76:c6:56:df:d5:ff:ae:20:4d:88:
00:c0:2b:f7:e9:fc:c6:33:6c:a0:6b:66:b7:90:d0:
91:28:1b:5e:eb:f0:29:20:1d:5a:e5:26:8f:42:2b:
28:84:18:1d:da:d6:c3:a5:ee:b1:8f:a7:c9:ae:7d:
b4:73:c1:36:e6:42:09:3b:f2:c6:90:60:3f:7b:88:
fd:f8:8f:f6:49:54:ec:e7:cf:9e:82:20:64:1e:5b:
a0:84:2d:fa:b5:3a:2a:28:cb:6d:bc:7d:85:32:bc:
7d:f4:45:ab:6f:77:76:63:0a:e8:34:f8:3b:ea:e7:
5d:8f:d5:ea:0c:65:84:19:8d:6d:ae:c5:7c:cc:fe:
4e:95:94:6f:a3:ad:91:a9:98:70:60:96:fc:a0:c8:
c7:bd:8a:01:4d:b2:5c:8a:35:7d:a5:b8:98:08:a8:
a0:f8:64:b4:c7:d5:ad:36:47:56:55:ce:73:5c:aa:
12:ec:af:7a:4c:aa:42:1f:5d:27:6b:1c:82:39:d4:
68:1e:69:c4:b5:ca:d6:d9:29:ac:74:93:f9:88:1e:
9f:d6:e8:55:a2:a0:a8:17:d5:22:54:02:ed:6a:65:
03:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:75:17:FD:3F:71:12:00:BF:4D:4E:FD:E2:D0:89:40:DF:EF:1B:C4
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/YXUX_T9xEgC_TU794tCJQN_vG8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.41.0/24
Signature Algorithm: sha256WithRSAEncryption
45:17:29:88:c1:f8:30:1e:8f:d8:19:39:da:cc:6e:55:ce:40:
72:1e:bd:85:a8:21:07:9f:ea:84:8a:03:b8:0d:29:32:25:88:
f6:38:56:4b:4d:8e:08:b7:f8:31:1a:60:f6:b9:df:b8:f4:87:
a4:15:3a:15:1f:ab:60:cb:9d:00:fb:a6:97:0c:82:ef:86:be:
be:10:60:19:73:c6:d8:10:dd:6f:9b:15:ad:8f:b5:90:89:61:
7b:96:55:ea:b4:f6:a3:f9:14:f1:1e:0c:1e:85:d3:49:42:01:
e4:9d:35:bd:2e:85:94:b4:4d:3e:2e:79:b7:a4:79:a3:ad:95:
5a:bb:25:6c:7e:bc:1d:40:34:0e:6c:4b:b8:48:25:75:f1:08:
50:c5:a7:f1:6f:d4:b0:f1:7c:1a:32:0d:e2:f5:29:62:f0:c9:
83:a7:11:77:23:2a:07:31:1a:85:60:51:e9:9a:36:77:7f:15:
d6:23:e4:62:b8:62:89:f1:8d:1e:9d:26:5d:4f:16:06:76:b6:
d3:69:ce:00:c8:91:54:29:d4:67:c2:c7:7d:7a:9a:85:de:e0:
8f:a1:b9:57:a9:fd:c4:dd:49:89:12:fb:fc:d8:af:96:c2:a3:
de:f4:a4:3b:be:e2:a5:b1:5d:8f:00:c2:b3:2a:62:0b:d6:28:
56:6b:a9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:47 2024 by rpki-client on console-ams.rpki-client.org