Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/W1Yu8l4k9LDQtL3DK_s86ylKJCY.roa
File: W1Yu8l4k9LDQtL3DK_s86ylKJCY.roa (raw, json)
Hash identifier: O7rw9eN0uMUjwRBWkgJib5WCwd8Lw78juxQTq1dNCyI=
Subject key identifier: 5B:56:2E:F2:5E:24:F4:B0:D0:B4:BD:C3:2B:FB:3C:EB:29:4A:24:26
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01856CE653253CD1BEABDEB83B1A5563BB36
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/W1Yu8l4k9LDQtL3DK_s86ylKJCY.roa
Signing time: Sun 01 Jan 2023 10:35:11 +0000
ROA not before: Sun 01 Jan 2023 10:35:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34295
IP address blocks: 46.10.217.0/24 maxlen: 24
62.176.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Oct 2023 08:53:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:53:25:3c:d1:be:ab:de:b8:3b:1a:55:63:bb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 10:35:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b562ef25e24f4b0d0b4bdc32bfb3ceb294a2426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:93:13:f4:98:4b:1c:17:48:e7:ef:dc:aa:
32:36:ea:32:08:79:37:67:04:21:c4:c7:67:76:69:
88:c3:35:79:2b:4c:b2:94:9a:c8:47:52:0d:b9:23:
da:ae:3c:78:ff:0f:f2:1d:ab:f6:1b:8a:0e:09:67:
c3:07:54:14:6f:1c:5f:b2:6b:92:b3:de:6f:93:2d:
82:b2:4c:24:b6:c4:92:fa:c6:9a:77:76:21:a1:83:
0e:52:fd:5e:8c:88:21:5d:8c:d4:13:59:62:6e:6f:
6b:93:49:3e:d7:f7:a8:8a:6d:e2:3e:7c:c4:81:be:
bb:d9:e6:6f:93:ea:af:bc:23:d3:cc:ba:29:74:e4:
e9:a4:55:fb:fd:be:38:cc:9e:bb:ca:d2:bd:6c:6d:
16:26:87:fb:f2:53:dc:13:76:0c:8c:a2:d3:c1:85:
3e:d7:f6:b2:b4:a7:91:98:05:1b:e0:f3:4f:98:52:
81:a5:f7:ad:80:5c:81:3f:ce:4b:f6:b7:8e:49:5d:
b8:c5:50:53:f8:21:3b:53:7b:5a:d5:86:ec:3d:f6:
4d:fa:79:11:22:70:9c:18:37:23:a8:6a:47:9d:66:
e9:ce:2c:91:55:39:1d:d3:87:03:bb:19:c5:3b:cc:
52:23:be:c4:dd:6b:b3:f0:f9:8f:78:a5:9b:07:f6:
cc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:56:2E:F2:5E:24:F4:B0:D0:B4:BD:C3:2B:FB:3C:EB:29:4A:24:26
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/W1Yu8l4k9LDQtL3DK_s86ylKJCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.10.217.0/24
62.176.118.0/24
Signature Algorithm: sha256WithRSAEncryption
50:5b:74:9b:87:c6:17:37:23:81:7e:cf:48:b5:80:f2:38:2d:
5e:ae:80:9d:ec:47:07:e5:75:ba:c0:79:47:71:31:69:ca:79:
75:52:6d:44:88:a1:d8:18:37:16:f3:dc:f2:8e:a9:59:6d:c3:
8d:e1:1b:fd:b8:ba:6f:49:5d:ab:2b:ea:9b:2d:ce:f4:6c:ef:
c2:a3:63:0c:21:42:55:77:ed:fe:cb:6d:e5:3f:63:af:2c:2c:
11:1b:1f:e3:62:37:dc:82:fe:37:0a:4a:85:04:a7:96:70:ed:
97:5d:f1:0f:0a:9e:2d:e1:05:e2:05:4f:a4:c2:64:53:7e:b6:
b3:34:3e:c7:39:1c:19:c6:c5:be:40:62:7a:3d:cf:d7:3a:2e:
e5:a5:ff:02:db:15:0b:d6:a9:e6:c8:82:13:1c:f2:28:36:fb:
42:8f:13:35:c3:e6:aa:f9:0b:09:4f:b5:08:a8:db:5a:f0:aa:
2d:74:a8:93:60:b9:cc:07:57:aa:f6:c8:12:69:6d:4d:dc:f8:
05:43:5f:bb:10:19:58:8a:d3:07:cb:24:1d:de:5e:ea:c5:33:
ba:97:9b:5b:20:ac:b2:4b:5e:2b:ac:56:82:84:2d:de:99:83:
0b:6f:da:7e:ad:a0:d1:a2:e6:ef:d1:6e:8e:18:d1:d2:f7:a0:
b8:ff:89:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:04 2024 by rpki-client on console-fra.rpki-client.org