Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/fWR8vp3ELN1difddAJ-Y182Yhs4.roa
File: fWR8vp3ELN1difddAJ-Y182Yhs4.roa (raw, json)
Hash identifier: QUuq6siBGap6zbQu5SJnX2KonqL4xjHyNZ5mlE5Rcic=
Subject key identifier: 7D:64:7C:BE:9D:C4:2C:DD:5D:89:F7:5D:00:9F:98:D7:CD:98:86:CE
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 01856ECB668AA3F37CF92C3DEA8DD5C9CB06
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/fWR8vp3ELN1difddAJ-Y182Yhs4.roa
Signing time: Sun 01 Jan 2023 19:25:01 +0000
ROA not before: Sun 01 Jan 2023 19:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15828
IP address blocks: 46.148.38.0/24 maxlen: 24
46.148.40.0/24 maxlen: 24
46.148.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Aug 2023 13:24:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:66:8a:a3:f3:7c:f9:2c:3d:ea:8d:d5:c9:cb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Jan 1 19:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d647cbe9dc42cdd5d89f75d009f98d7cd9886ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e3:4c:01:da:35:29:0f:2e:5f:19:7c:31:44:
62:98:1c:00:05:3e:19:f8:6f:9e:24:15:96:62:81:
8a:df:0e:48:ba:7a:47:41:d5:83:a9:d3:c0:d9:bc:
b2:b1:f5:dc:fa:b2:40:84:c0:90:91:82:1c:41:89:
34:b0:6f:dd:04:33:69:35:d6:38:66:4b:c9:c6:68:
a1:97:45:4e:38:7b:26:4a:31:02:0d:0d:4d:49:74:
b4:0b:a1:0d:ef:56:4d:82:d0:06:ff:26:2b:58:94:
97:c5:da:15:e1:22:3e:33:bb:ca:83:8b:d7:a6:af:
de:57:d7:d9:e2:db:f0:c9:cb:7b:60:0d:35:1c:64:
b0:b6:ff:58:54:c8:76:bb:19:03:a8:16:fd:9a:3a:
06:75:45:cb:6d:e0:32:39:76:19:aa:e9:e0:16:81:
a8:41:e4:55:62:9e:c3:6a:b9:31:10:e5:ce:43:2c:
be:7d:c3:3b:fc:9f:32:97:db:55:bf:5c:d3:0c:d9:
f7:9f:c5:05:1b:97:21:57:47:a7:a7:a5:b1:b5:f4:
da:31:0f:8a:bc:c7:65:5c:49:f2:69:99:8e:d8:bb:
62:99:89:28:a8:c0:8d:22:14:5b:70:dc:c4:3d:fa:
20:1c:fa:8e:7c:df:a9:7c:28:92:cd:11:8f:6c:b3:
f6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:64:7C:BE:9D:C4:2C:DD:5D:89:F7:5D:00:9F:98:D7:CD:98:86:CE
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/fWR8vp3ELN1difddAJ-Y182Yhs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.38.0/24
46.148.40.0/23
Signature Algorithm: sha256WithRSAEncryption
25:99:8e:c4:3a:4a:7c:ab:c5:ca:ae:07:02:e7:94:37:8d:cb:
72:f9:f1:9f:33:09:63:72:5c:07:1a:66:20:ee:ae:1d:8d:5a:
ad:3c:cc:8a:58:a2:9c:49:72:40:93:fc:7f:a3:99:66:69:bb:
43:21:5a:62:e0:28:3b:ce:6e:20:13:e2:b8:40:11:10:4c:13:
bb:66:21:c2:e6:b0:03:57:f4:16:c5:59:00:ad:31:ce:9d:eb:
ad:0b:cc:e0:c2:e2:f4:78:ae:a3:e6:09:c5:a3:79:dc:9b:7c:
dc:16:10:0e:64:65:58:fc:d2:24:aa:de:88:39:ed:a4:10:87:
29:f4:b6:de:56:cc:0e:f7:0c:6d:7e:19:74:72:00:1d:95:b5:
bc:f2:2d:b6:19:7d:81:71:7f:1b:1c:c8:fa:f1:5b:68:14:d8:
38:f0:58:72:bb:dc:aa:07:93:92:18:71:5f:4a:c6:34:18:cf:
67:2b:de:15:1f:87:56:15:4b:ef:6e:65:3f:41:c7:c9:31:5e:
6f:f2:3f:d9:c3:d3:5b:44:4c:e2:ca:00:09:46:11:a7:16:25:
d5:8f:62:a4:2d:3e:db:57:4e:38:5a:71:b6:b0:ec:1c:8e:d8:
77:55:4e:3e:94:e4:4c:4e:16:d3:86:7d:ff:fc:8e:6b:c0:b1:
74:76:49:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:47 2024 by rpki-client on console-ams.rpki-client.org