Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/14ylmENVxUfhvA0fHjK-QQY9PfU.roa
File: 14ylmENVxUfhvA0fHjK-QQY9PfU.roa (raw, json)
Hash identifier: mlv+E5/S8Oxg9qF3mZ2AeIasRQWG749aDNADZIJidIc=
Subject key identifier: D7:8C:A5:98:43:55:C5:47:E1:BC:0D:1F:1E:32:BE:41:06:3D:3D:F5
Certificate issuer: /CN=31a3da6d0fafd27d01b74703bb39d8c115e86412
Certificate serial: 0185711533C24D5692F31AD39B05131CB37D
Authority key identifier: 31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/14ylmENVxUfhvA0fHjK-QQY9PfU.roa
Signing time: Mon 02 Jan 2023 06:04:52 +0000
ROA not before: Mon 02 Jan 2023 06:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207758
IP address blocks: 46.16.200.0/22 maxlen: 22
46.16.204.0/24 maxlen: 24
185.148.76.0/22 maxlen: 24
2a07:5c80::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:33:c2:4d:56:92:f3:1a:d3:9b:05:13:1c:b3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a3da6d0fafd27d01b74703bb39d8c115e86412
Validity
Not Before: Jan 2 06:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d78ca5984355c547e1bc0d1f1e32be41063d3df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5a:84:d4:12:68:ad:b2:e0:f7:be:ec:0b:b1:
a2:49:7b:bd:10:c7:e7:43:96:80:0e:50:9e:ed:06:
1d:6f:0b:46:20:fe:72:30:c2:2e:c8:df:48:29:20:
3b:8f:34:b4:54:03:30:fc:f6:81:d5:e7:9b:78:be:
5c:96:d3:ea:e0:66:6b:2b:07:69:21:c0:4a:95:69:
e8:11:6d:a1:58:cd:90:bc:a2:6e:a8:68:c4:21:8c:
69:5d:f0:9f:89:e8:e3:69:da:60:72:4c:4c:c4:75:
a9:73:6f:30:89:45:ad:1e:7c:1d:52:b3:ff:52:44:
4e:ea:2f:ee:27:e0:df:4f:f4:04:be:7c:6d:1f:43:
00:32:42:08:0a:28:e4:f7:4b:70:44:54:e9:48:e1:
37:b7:4c:80:9b:cb:17:26:6d:c9:4f:8b:21:3b:7f:
46:f1:21:76:8d:89:54:cc:57:79:14:d6:2f:b7:6d:
07:ca:ba:c3:55:ab:de:cf:8e:80:78:1e:c3:ff:b4:
75:17:0f:ee:13:af:0d:cb:dc:30:90:2a:64:ee:e1:
59:89:19:76:d9:a1:7d:49:6f:80:c8:5b:a4:21:dc:
79:8c:aa:23:4d:ed:8b:01:9a:c1:05:85:91:53:f8:
47:f8:29:66:78:33:9c:e3:3e:3f:c8:7c:b2:4a:bb:
e1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8C:A5:98:43:55:C5:47:E1:BC:0D:1F:1E:32:BE:41:06:3D:3D:F5
X509v3 Authority Key Identifier:
keyid:31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/14ylmENVxUfhvA0fHjK-QQY9PfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.200.0-46.16.204.255
185.148.76.0/22
IPv6:
2a07:5c80::/29
Signature Algorithm: sha256WithRSAEncryption
7d:38:7b:5f:1f:b8:62:e2:35:89:f8:94:38:68:65:c1:6c:43:
c4:ac:95:19:97:e1:6f:37:14:30:d9:6e:36:00:dd:7c:63:e9:
de:87:c6:7b:6e:82:6b:1f:8d:d3:5c:03:59:e8:dd:df:c3:9a:
d7:bb:68:d8:a6:a2:20:41:d5:57:6c:86:3f:76:d2:e0:55:7d:
f2:a7:3e:64:0c:6e:e2:1b:93:31:45:59:83:d7:b6:33:0e:97:
06:07:f8:7c:29:05:c5:6a:5f:d8:d1:20:2f:17:f8:b6:d3:a7:
7c:39:04:5c:ca:49:51:1a:d5:2b:df:3e:0d:a7:aa:cd:90:d3:
ba:cb:af:94:f8:cc:fa:0d:ee:1a:9b:73:a7:9b:0f:6a:6f:ab:
21:a3:e0:1a:7a:31:f8:cb:fa:95:fb:9a:fe:e6:d2:ad:4c:66:
a9:3d:51:7a:e3:75:5b:96:49:7c:09:5e:3d:e3:b5:95:b5:7e:
76:b7:78:9d:f3:cd:54:d7:67:2a:03:8e:21:73:18:a4:00:3b:
f5:95:f7:15:f5:47:66:30:43:a0:5c:d9:89:cc:fb:52:6c:d9:
1e:0b:4a:38:97:4f:28:4d:e8:99:d2:84:15:4d:5d:35:39:53:
01:6d:45:06:ec:ec:46:1f:0d:11:7f:92:ee:1f:ca:cb:53:6a:
70:ec:2a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:59 2024 by rpki-client on console-ams.rpki-client.org