Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/ffMAbetjpIw9XKa_8WnFzHU-DDo.roa
File: ffMAbetjpIw9XKa_8WnFzHU-DDo.roa (raw, json)
Hash identifier: AfBoqiPagd/W8jNHorSy3pbhELQvifztE5o/kiSsEP0=
Subject key identifier: 7D:F3:00:6D:EB:63:A4:8C:3D:5C:A6:BF:F1:69:C5:CC:75:3E:0C:3A
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 018BB9CA2EE9A263C36F81CCFACA8D86A15A
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/ffMAbetjpIw9XKa_8WnFzHU-DDo.roa
Signing time: Fri 10 Nov 2023 15:11:57 +0000
ROA not before: Fri 10 Nov 2023 15:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 94.141.100.0/22 maxlen: 32
46.226.160.0/21 maxlen: 32
92.246.132.0/22 maxlen: 32
Validation: Failed, certificate revoked on Mon 13 Nov 2023 15:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b9:ca:2e:e9:a2:63:c3:6f:81:cc:fa:ca:8d:86:a1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Nov 10 15:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7df3006deb63a48c3d5ca6bff169c5cc753e0c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3b:00:5f:35:1e:50:4a:df:b0:5a:d0:a9:16:
59:1c:94:d6:27:50:b8:fd:d3:ab:fd:9b:5b:b9:4e:
15:18:b4:fe:26:fd:ac:ca:bb:44:94:99:41:a2:33:
9b:f5:63:e4:dd:46:42:3e:3e:3a:b7:80:f2:63:53:
6f:af:db:12:1c:5e:68:eb:f7:c7:eb:a6:5d:30:dc:
c8:61:75:08:68:79:fc:c8:55:a5:de:1b:58:22:e4:
63:c8:8a:b3:90:09:02:8a:e5:e1:49:f2:a0:05:3d:
97:8a:ff:36:b0:f0:70:d1:e7:f7:91:48:aa:9f:b4:
09:5c:fd:9c:cd:e5:42:31:0f:93:68:47:c5:59:44:
a5:54:d9:64:5e:84:ec:51:5d:2b:d9:c3:6e:6a:da:
ba:60:e2:9d:6b:06:36:3f:3a:b3:81:91:9e:a6:2f:
42:3a:b2:f4:67:d3:bf:33:78:dc:3e:3f:cf:ad:ba:
1f:33:1b:1a:6a:a1:9b:72:52:17:0b:47:df:62:f3:
98:8f:c9:d3:bb:e4:61:55:b1:f6:23:46:16:ff:a5:
02:d2:2e:81:43:d8:95:34:ab:54:8b:df:7c:a5:f2:
be:d7:d8:ba:9f:b7:d9:37:db:f9:9c:8d:81:c9:a3:
cf:11:e3:da:6f:5a:48:84:b8:4f:9c:9e:af:13:3e:
6f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F3:00:6D:EB:63:A4:8C:3D:5C:A6:BF:F1:69:C5:CC:75:3E:0C:3A
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/ffMAbetjpIw9XKa_8WnFzHU-DDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.160.0/21
92.246.132.0/22
94.141.100.0/22
Signature Algorithm: sha256WithRSAEncryption
16:eb:06:94:dd:7b:98:3e:af:85:36:5d:44:bb:f3:3f:72:33:
91:87:5b:ce:d2:28:0e:b0:6e:e1:6b:c1:1f:e2:ef:78:8b:60:
58:7e:cd:02:28:b1:3c:33:b3:5f:da:33:28:21:aa:1b:de:34:
ad:5f:7b:9e:91:a1:19:e5:29:ad:32:a6:6c:b5:72:bf:da:76:
3f:b2:5f:c8:d1:ba:95:54:0d:17:d7:7f:f2:38:38:33:10:57:
2e:7d:42:4f:df:75:a4:8d:63:44:0b:1d:d9:51:f2:84:b4:91:
3f:0a:db:4b:23:9d:53:49:53:d8:4e:2e:b0:4c:8e:c4:72:68:
a9:e4:76:cb:ac:3b:b7:99:06:c9:f3:1a:b4:b1:87:67:63:87:
05:99:19:76:09:cf:2b:5b:18:67:7d:54:0a:7a:38:5b:b6:ac:
5f:d6:e4:d9:b3:e3:71:f5:9c:45:2f:3f:96:bd:d3:83:1b:bf:
36:56:d0:83:3a:fe:90:1a:8d:9c:2e:76:20:d6:38:36:72:04:
29:87:87:0f:5e:09:32:13:d3:15:d9:a2:2f:27:f5:df:ce:0d:
52:c1:b2:48:fe:55:87:86:1d:85:c4:ea:a6:e6:9d:bb:02:d2:
11:08:d2:5c:17:13:a5:53:aa:59:e4:c8:0f:74:f3:5d:dc:ea:
f2:44:12:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:08 2024 by rpki-client on console-ams.rpki-client.org