Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/rnTKBoox9va8Vl2bCBLaW0QVTbQ.roa
File: rnTKBoox9va8Vl2bCBLaW0QVTbQ.roa (raw, json)
Hash identifier: RnhtlTBSg5YcAOVRicPFsxSNJWFzGokFrdyxGmIqQCk=
Subject key identifier: AE:74:CA:06:8A:31:F6:F6:BC:56:5D:9B:08:12:DA:5B:44:15:4D:B4
Certificate issuer: /CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Certificate serial: 0185BEBC2EB03F06039B2E7EAD22D983E7FE
Authority key identifier: DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/rnTKBoox9va8Vl2bCBLaW0QVTbQ.roa
Signing time: Tue 17 Jan 2023 07:58:01 +0000
ROA not before: Tue 17 Jan 2023 07:58:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 185.246.172.0/22 maxlen: 32
46.232.208.0/23 maxlen: 32
Validation: Failed, certificate revoked on Thu 03 Aug 2023 10:19:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:be:bc:2e:b0:3f:06:03:9b:2e:7e:ad:22:d9:83:e7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Validity
Not Before: Jan 17 07:58:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae74ca068a31f6f6bc565d9b0812da5b44154db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4a:fb:c3:2c:7f:07:54:ce:46:1d:03:1b:bc:
96:93:a9:7c:5b:7e:95:ad:7f:ed:48:44:2a:dd:f7:
88:5d:10:98:ec:db:4c:fd:7a:a6:d0:78:c5:5b:26:
7d:00:0f:c3:89:34:0a:2e:5e:b5:0b:57:d2:00:38:
09:9b:ac:07:8e:41:7a:67:63:6c:0d:76:8a:dc:d6:
0e:49:4d:e9:dd:8c:0a:2e:3a:b9:4f:32:86:9f:72:
a3:7c:c0:47:8d:33:6f:5a:68:b9:a4:95:c5:ed:0d:
0d:63:21:8a:7b:ea:69:13:d9:f3:42:ff:5e:f1:5d:
ae:93:62:19:d3:7f:ca:0a:75:89:d6:b7:c1:c1:df:
04:7a:6a:5b:cd:3c:c5:b4:8f:11:97:ae:14:0d:86:
3e:6f:00:6f:12:7f:0a:2c:d5:31:bd:fd:fc:cc:f4:
0c:56:17:c5:73:2c:e7:de:6c:ed:92:a6:b0:46:12:
19:96:0a:2b:5d:00:7f:bd:69:a9:63:38:04:a6:ab:
73:c9:78:34:f4:41:80:9b:6d:8c:5e:40:91:b5:8f:
22:d6:7b:1c:73:13:ad:a8:19:07:50:70:1c:03:db:
63:d7:5d:c2:21:4a:de:6b:b9:cd:d3:03:6e:99:20:
f3:d6:03:18:73:86:b8:cf:05:63:ff:a5:18:79:52:
15:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:74:CA:06:8A:31:F6:F6:BC:56:5D:9B:08:12:DA:5B:44:15:4D:B4
X509v3 Authority Key Identifier:
keyid:DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/rnTKBoox9va8Vl2bCBLaW0QVTbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.208.0/23
185.246.172.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:38:ed:78:0f:27:d5:95:64:9b:f5:c0:a0:c2:bf:4d:89:88:
28:f0:8f:df:ba:3c:da:80:44:e4:3b:1b:3d:c2:ee:81:4f:20:
95:f7:22:d3:38:40:58:12:75:ff:cc:2b:66:50:a7:07:67:00:
96:3e:af:1a:80:9b:ce:40:fc:61:5e:9b:38:7a:6d:bf:f7:28:
44:4a:58:2c:0e:eb:13:f3:22:ef:2c:d7:0c:86:ca:1e:bc:54:
dc:e5:17:84:8f:58:95:7a:f6:3f:4b:23:eb:3a:d5:2b:2d:90:
ce:b4:b5:a6:31:c1:d8:52:82:d9:1a:4c:5c:85:5c:eb:0e:5e:
11:86:6a:e5:15:9d:2a:13:fc:12:ac:fa:15:22:d3:4b:1f:53:
c8:c8:fb:64:ca:dd:bd:6d:e2:b8:72:d6:fe:ae:f6:70:de:54:
d4:f8:9d:bd:73:8b:96:c4:36:12:f2:2b:05:fc:11:49:8a:8d:
6d:c3:72:e9:2c:1a:8a:60:e9:4f:d6:d4:85:9d:88:65:59:3b:
c5:f4:bb:8e:ec:05:fe:86:9b:c9:c7:37:6b:7a:e3:4e:d0:82:
08:5a:76:63:62:41:f4:30:a3:73:43:07:ef:0c:ae:08:3d:3a:
64:22:0d:fc:02:07:1b:f6:ba:9e:30:28:fc:06:fd:9e:09:bb:
a2:1e:3c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:58 2024 by rpki-client on console-fra.rpki-client.org