Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/xFDkauLh2MhymOqcDX2i9JqoMvA.roa
File: xFDkauLh2MhymOqcDX2i9JqoMvA.roa (raw, json)
Hash identifier: FP/iIxXEoLVf9Bz4sWPDOrBQZ9i0ANBscEcP6uDShrA=
Subject key identifier: C4:50:E4:6A:E2:E1:D8:C8:72:98:EA:9C:0D:7D:A2:F4:9A:A8:32:F0
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 018CCA2A38FABA02F05CDE39B5856D1C250C
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/xFDkauLh2MhymOqcDX2i9JqoMvA.roa
Signing time: Tue 02 Jan 2024 12:33:33 +0000
ROA not before: Tue 02 Jan 2024 12:33:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204105
IP address blocks: 46.148.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 05:24:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:38:fa:ba:02:f0:5c:de:39:b5:85:6d:1c:25:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Jan 2 12:33:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c450e46ae2e1d8c87298ea9c0d7da2f49aa832f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:86:05:67:dd:af:9c:9b:ce:3f:27:be:8d:0a:
4e:0e:df:1a:4f:a7:92:98:85:ef:c8:74:58:6e:f5:
c5:8a:ff:13:40:41:13:b9:35:20:3a:40:c4:8d:f7:
36:82:6e:b1:67:12:6e:08:8e:2e:2d:b3:24:dc:25:
11:f3:4f:e8:21:d7:7d:42:2b:bf:ac:96:a3:c3:10:
f1:25:93:b1:fe:96:71:db:7f:26:73:f5:08:e0:8e:
dc:26:32:7e:62:f1:0e:fc:53:25:2d:f7:03:58:50:
fe:81:ec:96:73:f8:65:11:16:5e:33:14:98:8b:60:
10:5d:88:fd:32:73:6d:d5:f2:df:37:21:eb:87:69:
6a:d8:0a:e9:15:e2:1c:10:ff:f1:5d:8b:55:e6:94:
03:dc:66:a2:df:4f:3d:b8:41:80:7e:0d:85:fa:28:
d2:1a:50:dc:8a:05:14:31:d5:aa:8c:96:55:e4:ba:
ce:9c:44:f6:fe:60:cf:4d:c3:59:3b:5f:0a:e5:dc:
04:c5:0b:a0:c6:ae:7f:32:7f:b6:f3:2c:b4:18:0a:
6e:91:68:5b:48:95:bd:3f:ab:02:cc:32:1c:2e:57:
af:f4:9f:f5:00:85:b7:e8:36:68:5b:f0:db:c8:8f:
b0:e6:65:c3:29:79:ff:97:ec:c8:f7:9a:72:2b:10:
6f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:50:E4:6A:E2:E1:D8:C8:72:98:EA:9C:0D:7D:A2:F4:9A:A8:32:F0
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/xFDkauLh2MhymOqcDX2i9JqoMvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.38.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:34:15:1a:cd:4c:09:67:01:2f:2a:ed:b0:dd:d9:e8:84:92:
c3:98:c7:d8:62:99:d6:44:74:fb:1a:59:df:2f:90:c2:37:42:
ba:fb:0a:22:ea:e5:6d:ab:e7:51:22:a7:03:0b:cd:3b:c3:2e:
c8:d2:93:5a:20:57:d4:7c:63:eb:c4:73:b3:6a:93:db:e7:6c:
06:0f:17:51:62:cd:89:8e:79:70:19:83:31:26:17:61:d6:22:
0a:fb:cd:04:2b:ea:92:ed:a0:9f:d7:8b:92:77:33:92:d2:3c:
88:46:50:f2:c9:6d:4e:39:ca:3d:69:8b:bd:29:a4:29:cc:ae:
b1:ff:38:ff:2a:99:7f:fe:ac:99:9f:ca:ff:63:e1:28:23:e2:
4f:80:10:4f:c6:f6:d3:8c:5d:d8:a7:22:54:c3:2b:7a:0e:47:
ba:da:cf:a3:b8:43:0f:58:e3:ea:90:7f:15:0b:b1:04:5c:60:
29:ed:dd:bc:38:30:aa:82:33:eb:05:de:38:10:39:a7:d5:93:
07:7e:78:e6:c7:97:77:e0:26:1d:aa:7a:ad:3a:64:f4:65:c4:
0c:df:c1:92:41:a3:90:78:b0:e6:b8:c0:01:25:e1:05:3e:7e:
0e:2c:55:bb:28:46:1b:e6:c6:06:40:63:a8:12:5f:67:78:bb:
0a:c1:b0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:47 2024 by rpki-client on console-ams.rpki-client.org