Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/18Kps7VGYhHPsZ39H-LTJmwAUMc.roa
File: 18Kps7VGYhHPsZ39H-LTJmwAUMc.roa (raw, json)
Hash identifier: EbYMPoYdJ7MMAljaocT25GcvOdezGNq1sKOrzAFm3VA=
Subject key identifier: D7:C2:A9:B3:B5:46:62:11:CF:B1:9D:FD:1F:E2:D3:26:6C:00:50:C7
Certificate issuer: /CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Certificate serial: 018E73D24AEF9BEAB083A936C72C3BEB3531
Authority key identifier: 4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/18Kps7VGYhHPsZ39H-LTJmwAUMc.roa
Signing time: Mon 25 Mar 2024 04:15:45 +0000
ROA not before: Mon 25 Mar 2024 04:15:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38972
IP address blocks: 46.254.24.0/22 maxlen: 22
46.254.24.0/24 maxlen: 24
46.254.25.0/24 maxlen: 24
46.254.26.0/24 maxlen: 24
46.254.27.0/24 maxlen: 24
80.251.144.0/21 maxlen: 21
80.251.147.0/24 maxlen: 24
80.251.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 04:05:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:73:d2:4a:ef:9b:ea:b0:83:a9:36:c7:2c:3b:eb:35:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Validity
Not Before: Mar 25 04:15:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7c2a9b3b5466211cfb19dfd1fe2d3266c0050c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c0:42:71:07:75:2e:39:6d:31:de:fb:fb:4a:
90:12:a9:2c:78:af:40:f8:25:6c:01:67:56:75:a0:
65:f0:bf:cd:19:10:2c:cd:f7:ed:a3:69:09:1e:42:
de:0a:22:94:5e:57:6f:70:20:c0:0c:24:aa:55:89:
4f:59:ff:37:33:95:cf:e2:b3:3c:b8:05:cc:85:00:
a1:b5:04:74:03:4b:34:cb:89:1b:19:a2:a0:c2:44:
7a:2e:54:61:62:de:9f:2d:cb:b7:73:a4:bd:09:3f:
60:bb:47:cd:51:c1:31:c1:a2:fb:b2:9d:e6:2a:23:
8f:d0:0e:e1:82:ae:ee:0d:6f:22:f4:13:cc:5c:ad:
de:0b:93:a7:ca:44:5f:8d:a6:89:c4:ba:41:55:3e:
14:cb:2e:43:dd:de:da:f6:ef:54:23:4d:01:26:c8:
d1:af:4b:ca:1d:b0:00:19:a3:69:d0:87:64:89:67:
e4:fe:ca:ef:4f:2a:31:dc:65:96:02:2e:f6:98:2d:
d2:a1:c1:6f:fd:99:f0:2f:d2:f5:5c:3b:22:18:12:
e3:8a:bb:05:92:39:d6:86:78:50:10:cb:d8:13:b0:
0b:57:d8:70:3c:5e:8f:a1:fc:29:06:44:17:e0:07:
c8:6c:6f:b0:8b:56:82:06:b0:40:74:7d:06:a5:0d:
72:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C2:A9:B3:B5:46:62:11:CF:B1:9D:FD:1F:E2:D3:26:6C:00:50:C7
X509v3 Authority Key Identifier:
keyid:4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/18Kps7VGYhHPsZ39H-LTJmwAUMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.24.0/22
80.251.144.0/21
80.251.154.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:44:6c:7b:b2:4c:7b:be:85:40:76:14:a2:a5:b4:ed:c5:88:
b1:83:21:ec:e3:3a:17:70:07:f4:d0:e3:8f:63:b2:a2:23:ae:
19:7f:84:6a:83:f0:df:04:5c:b6:76:cc:03:7c:4b:6d:a0:73:
96:27:23:56:4d:dd:bb:61:02:9c:e8:c1:1b:20:9d:2e:b1:4b:
df:74:9f:4d:f2:12:f4:b7:56:76:14:58:22:ee:44:05:33:ee:
40:d3:88:1f:55:3a:12:5f:d0:9f:ea:23:5c:f2:19:dc:47:c1:
23:ff:14:02:d1:86:fe:19:72:d6:e2:a6:2a:4f:e9:4e:84:a9:
78:fc:3f:72:b4:61:98:f4:e4:34:09:86:0d:f7:9c:a0:86:2f:
a1:93:2d:13:88:bd:0a:10:59:08:2c:92:c2:01:fc:bd:a9:a1:
e3:5b:ea:87:b0:a4:93:8e:ae:4b:75:ac:00:55:89:53:9e:17:
82:be:04:05:0f:dd:d6:7e:70:e0:0c:fd:c0:c2:0d:17:3d:41:
54:15:40:5a:30:47:f2:09:d9:f5:f6:9b:25:f2:79:78:c8:7d:
40:58:a8:34:10:4b:ea:f5:b9:3b:c7:b9:76:f1:bc:9e:2e:9f:
33:56:14:44:83:40:0d:be:19:8c:86:7b:56:f1:96:56:ab:f2:
9d:c6:c2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:05 2024 by rpki-client on console-fra.rpki-client.org