Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/UncLnVRmQzQy4UlmPksS-0U7lwk.roa
File: UncLnVRmQzQy4UlmPksS-0U7lwk.roa (raw, json)
Hash identifier: WnR0eM9V3rkNFv2WIa/wXFn0dOvKAeYCph8QJn0ivtc=
Subject key identifier: 52:77:0B:9D:54:66:43:34:32:E1:49:66:3E:4B:12:FB:45:3B:97:09
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01856CE660021D26541882FC5FFEF35F9FB9
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/UncLnVRmQzQy4UlmPksS-0U7lwk.roa
Signing time: Sun 01 Jan 2023 10:35:15 +0000
ROA not before: Sun 01 Jan 2023 10:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60560
IP address blocks: 46.10.194.0/24 maxlen: 24
90.154.232.0/24 maxlen: 24
90.154.237.0/24 maxlen: 24
90.154.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:60:02:1d:26:54:18:82:fc:5f:fe:f3:5f:9f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 10:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52770b9d5466433432e149663e4b12fb453b9709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7f:a7:91:80:b7:38:ec:d6:29:c4:f2:e3:7d:
3d:c6:a7:97:09:41:7c:db:11:7e:ab:d0:bc:6d:75:
c9:e0:f8:e1:13:6d:ce:94:e5:e0:76:ab:7e:a7:db:
fa:94:d3:3d:ee:de:75:d4:9f:24:f5:c3:b6:a7:e1:
c6:01:dc:48:99:f4:07:e6:c2:e3:7d:0c:bc:74:dc:
cd:04:ae:4d:4f:42:b0:6b:b4:54:14:06:ba:77:d2:
e5:5d:9d:a8:06:f0:c5:4c:48:69:f5:e5:75:d9:d8:
d1:d4:7a:88:30:38:1b:05:2d:8d:88:24:1c:11:6e:
51:ab:fc:3c:9c:d8:eb:88:9f:2c:6e:f4:3c:20:d1:
f5:9f:68:71:7e:fa:05:12:5c:70:84:6f:ca:dd:22:
32:67:c6:e2:fa:90:d0:6c:ed:1d:7e:67:15:80:5f:
0d:18:69:62:bc:72:d3:09:35:d2:57:61:6c:e5:8e:
66:d2:47:bd:ab:ba:03:3c:66:e7:37:96:b4:20:23:
35:91:77:c3:dc:7e:a1:df:e3:5b:f1:72:12:58:38:
b9:ad:fa:b5:90:f5:45:4b:82:2a:18:6b:55:58:6a:
9f:5b:c8:43:21:34:5a:3c:99:22:43:03:7b:b3:6a:
50:b7:05:ea:14:c9:50:80:a5:be:c8:9b:c5:dd:94:
d6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:77:0B:9D:54:66:43:34:32:E1:49:66:3E:4B:12:FB:45:3B:97:09
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/UncLnVRmQzQy4UlmPksS-0U7lwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.10.194.0/24
90.154.232.0/24
90.154.236.0/23
Signature Algorithm: sha256WithRSAEncryption
16:cd:1a:5f:36:47:eb:af:42:c1:a6:3a:85:a3:48:e4:e3:00:
b0:5c:be:09:82:85:8f:4f:b1:8f:da:a1:aa:3b:d2:6d:27:c0:
87:61:56:c5:cc:b3:f1:d8:81:36:c4:15:9d:c5:d8:b8:e9:3b:
31:25:ea:28:19:be:3f:9c:19:e1:d9:8f:89:f5:0f:9e:60:92:
6a:8d:c4:ce:8b:35:c1:12:68:38:96:5c:71:30:1e:05:54:1f:
f1:e7:b4:a4:a8:2f:ce:dd:89:51:82:9c:2a:e7:61:cd:0c:10:
57:05:99:9c:c0:e6:49:41:3e:42:19:6f:70:92:c2:ee:8d:ad:
a4:a2:b9:aa:9f:e5:01:75:70:c5:86:1d:74:44:71:e4:e8:25:
50:23:92:41:18:2e:7e:ca:73:99:ac:20:15:26:d0:75:ca:21:
81:e3:ab:61:b9:4c:f7:9d:3e:e9:5d:68:58:78:99:62:21:c6:
f3:1c:d4:f6:96:ef:d4:c0:12:48:6b:00:93:13:32:16:14:ed:
09:23:88:85:b3:0a:63:ff:7a:51:63:42:c5:53:0a:cb:b9:96:
38:3a:4f:6e:97:48:11:e6:d1:49:83:7f:b3:37:66:3b:ae:ea:
7b:e7:77:68:a6:27:9f:c1:3c:10:af:49:12:5e:a0:d4:e7:85:
a5:0b:e1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:53 2024 by rpki-client on console-ams.rpki-client.org