Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/vdplW0cz0uZQT-_mHVjxNeiSC8c.roa
File: vdplW0cz0uZQT-_mHVjxNeiSC8c.roa (raw, json)
Hash identifier: 5pkAxPBb9eORiCtAH7q0x2Q2BhT3ZZig9tnf9qoB9i4=
Subject key identifier: BD:DA:65:5B:47:33:D2:E6:50:4F:EF:E6:1D:58:F1:35:E8:92:0B:C7
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 018ACC8660EBB05A36863EE3940935D29E30
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/vdplW0cz0uZQT-_mHVjxNeiSC8c.roa
Signing time: Mon 25 Sep 2023 13:27:53 +0000
ROA not before: Mon 25 Sep 2023 13:27:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51788
IP address blocks: 46.148.32.0/24 maxlen: 24
46.148.37.0/24 maxlen: 24
46.148.33.0/24 maxlen: 24
46.148.34.0/24 maxlen: 24
46.148.42.0/24 maxlen: 24
46.148.40.0/24 maxlen: 24
46.148.41.0/24 maxlen: 24
46.148.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:86:60:eb:b0:5a:36:86:3e:e3:94:09:35:d2:9e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Sep 25 13:27:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdda655b4733d2e6504fefe61d58f135e8920bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:19:66:e1:e4:b1:fa:f8:ed:05:e7:5e:f1:d1:
b7:6f:7a:e4:ba:4f:d1:d0:1e:fb:97:0f:e0:8c:33:
32:15:a4:91:eb:11:82:e4:f3:e3:2f:7a:5d:a7:2e:
b9:9a:0c:c3:2a:c2:9c:31:1f:16:53:3f:06:a4:08:
93:af:86:8f:61:1d:61:19:0e:ec:09:de:63:bc:24:
0a:7c:d4:66:99:15:b1:60:c5:c8:9f:b1:6d:e7:69:
10:f9:c9:b5:38:1d:26:3c:d5:7a:c1:a9:45:06:a2:
ef:04:cf:b5:01:82:f5:8b:27:f7:9e:05:1a:ae:7e:
36:e0:d4:f9:02:df:77:ed:94:de:fd:c9:7d:b0:79:
b4:3a:8f:1f:5b:5b:c8:19:b0:97:bd:38:ed:9e:f9:
80:39:6b:7e:11:14:f0:05:2a:cd:43:59:f2:ca:f4:
ae:9f:52:a9:b9:87:86:25:cd:20:85:d8:23:28:48:
ee:34:b6:70:3d:c5:5f:0e:de:84:a7:d3:fc:b9:7a:
9a:58:ac:70:17:6e:9a:ed:78:ad:f8:a4:6e:f7:8b:
16:d8:76:4b:24:90:10:4a:91:09:f0:5f:05:28:a5:
a3:6c:d7:3e:d7:22:3d:9b:a3:28:0c:01:48:34:3f:
42:d7:bb:a2:86:7c:6c:7a:49:5c:d2:12:61:6b:ad:
ad:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DA:65:5B:47:33:D2:E6:50:4F:EF:E6:1D:58:F1:35:E8:92:0B:C7
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/vdplW0cz0uZQT-_mHVjxNeiSC8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.32.0-46.148.34.255
46.148.37.0/24
46.148.40.0-46.148.42.255
46.148.47.0/24
Signature Algorithm: sha256WithRSAEncryption
41:2e:2e:d1:f7:b2:62:cc:6d:c2:b7:79:b9:27:77:c5:dc:fa:
71:30:31:0a:df:98:52:66:35:d6:10:5a:19:9a:91:ef:24:74:
66:5c:d7:d7:38:73:6d:e5:56:73:2c:f5:20:4a:f4:05:ba:49:
9e:b4:d0:fd:c1:c4:03:65:a0:92:8e:0d:38:90:c5:3d:5a:65:
8b:41:bb:53:82:d8:51:d5:81:97:4c:62:63:04:3e:52:11:07:
f4:cf:3e:ac:d0:53:20:02:ba:93:c7:d6:9c:c6:07:93:53:2d:
1f:4e:ef:45:77:08:79:c1:6e:39:a7:28:8d:bc:1d:8f:54:e1:
40:43:0e:23:30:3d:47:1b:1c:5c:40:80:d7:f9:7b:21:7c:49:
e8:9c:f4:02:95:ac:6d:35:42:df:ba:fc:0f:12:1a:d1:a4:f4:
f3:ec:bd:29:a1:c3:7f:46:f4:d1:fa:78:0e:13:49:3c:02:4f:
3f:2c:9d:61:d8:10:bd:e4:12:06:8b:5b:8a:fd:19:4c:cb:5a:
bf:98:dc:ee:a5:17:d6:94:26:50:87:96:6e:6e:aa:ac:41:9b:
55:44:cd:1b:68:89:be:c1:f5:4c:88:0c:eb:45:d9:8f:69:a0:
07:5a:6d:fe:cf:92:cc:54:fe:5d:48:9d:cd:36:e7:20:1a:4d:
f3:a5:c4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:21 2024 by rpki-client on console-fra.rpki-client.org