Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/CymB2ZC7fAgVjA3uAwYDFXiAaEw.roa
File: CymB2ZC7fAgVjA3uAwYDFXiAaEw.roa (raw, json)
Hash identifier: x2pPvQ/6b/e+XCKx4a6jky/KTSBZJnFd7GG7KOw+vjI=
Subject key identifier: 0B:29:81:D9:90:BB:7C:08:15:8C:0D:EE:03:06:03:15:78:80:68:4C
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CC9E7C3618FA220E53EA6F873ED5FFCF2
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/CymB2ZC7fAgVjA3uAwYDFXiAaEw.roa
Signing time: Tue 02 Jan 2024 11:20:58 +0000
ROA not before: Tue 02 Jan 2024 11:20:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25198
IP address blocks: 46.249.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:e7:c3:61:8f:a2:20:e5:3e:a6:f8:73:ed:5f:fc:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 11:20:58 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b2981d990bb7c08158c0dee030603157880684c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:44:26:5f:3c:16:33:52:ad:7e:d0:76:fa:d4:
d3:4e:7c:d1:ec:85:3d:56:81:07:78:c1:8b:23:e1:
65:31:74:53:15:60:7a:08:c1:30:49:f4:43:26:f5:
72:d2:12:74:34:b3:db:cf:6a:f1:14:cf:3e:58:a1:
e5:48:62:38:db:05:dd:e0:ad:71:8a:f1:2c:4d:5e:
98:0d:af:08:64:f0:e8:f4:45:fc:82:99:0e:a0:f7:
c1:ba:9e:24:0b:3e:bc:6e:6d:f7:b9:10:f9:5a:f8:
8d:18:7d:1a:b7:d7:a9:fb:0a:03:e2:5a:d7:7e:42:
42:4b:08:67:9e:a5:86:85:d9:f8:a7:2d:39:14:9c:
36:d1:b1:ad:02:8c:c3:a3:46:fa:b2:9c:87:df:b0:
83:af:2e:8e:55:b6:72:4c:8d:b4:5e:5e:7c:90:b8:
46:e2:f3:5b:a7:31:ba:fb:24:86:64:4b:ee:93:6b:
3a:e4:ac:e4:61:77:0c:31:30:e1:82:3e:d6:0a:38:
a3:62:a7:f6:d1:dd:10:95:64:9a:91:d2:9d:d5:4f:
48:bc:95:04:96:40:34:f7:72:0d:cc:c1:e3:a0:6b:
e5:39:b8:c9:a6:53:e2:4a:b5:80:43:ab:82:42:98:
59:de:d4:05:b2:2b:69:68:50:a2:e2:2b:06:ef:bc:
17:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:29:81:D9:90:BB:7C:08:15:8C:0D:EE:03:06:03:15:78:80:68:4C
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/CymB2ZC7fAgVjA3uAwYDFXiAaEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.110.0/24
Signature Algorithm: sha256WithRSAEncryption
78:06:b2:6c:5e:cf:77:41:82:e3:8c:19:14:ca:6f:b8:f2:77:
f7:31:9d:de:85:cc:a4:15:90:8e:56:95:84:f6:87:c0:15:8d:
0c:22:bc:0d:dd:5a:63:dc:7a:f9:8f:ce:c4:82:93:eb:02:29:
26:53:4f:c3:3d:de:47:63:7b:66:76:52:01:8f:95:4a:ee:b4:
4a:01:57:b4:64:78:87:d9:e1:ed:93:01:ff:22:0f:46:22:69:
5c:70:46:bc:d6:dc:44:d7:5b:21:86:73:72:84:ee:d9:8a:bf:
4f:b1:35:67:ae:79:2f:8e:dd:67:7f:a2:17:51:71:dc:e2:b2:
bc:a7:ea:17:18:0c:37:f1:7f:38:73:bb:f9:1c:63:81:5d:8e:
f1:8e:4d:60:1e:d0:64:92:a6:1d:a0:75:7f:86:8d:a1:f7:14:
a5:ca:44:52:9d:ef:3f:5f:e9:39:d2:03:29:84:d6:c0:3b:4c:
58:a8:6e:11:e8:22:80:62:9a:02:4a:61:ed:a8:ef:e4:9d:4a:
c4:c8:48:00:dd:0d:cc:6b:ab:1e:cc:28:7e:a6:38:10:b3:12:
c1:c6:38:1d:51:96:61:ab:5b:c1:74:88:92:ca:2c:96:82:1a:
31:a5:a7:82:52:13:32:a6:18:34:01:7d:92:54:c0:45:31:81:
c1:bb:ee:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:34 2024 by rpki-client on console-fra.rpki-client.org