Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/nmsMfIhGqUK9IyUUpRrW5ZS2fiM.roa
File: nmsMfIhGqUK9IyUUpRrW5ZS2fiM.roa (raw, json)
Hash identifier: 7xaEV7emLrhmbQY6zEcXRvuZlwAz8qbZfMo4Ko6RAxM=
Subject key identifier: 9E:6B:0C:7C:88:46:A9:42:BD:23:25:14:A5:1A:D6:E5:94:B6:7E:23
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018CC94E6632C01B0282CA2E0988D780E0CB
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/nmsMfIhGqUK9IyUUpRrW5ZS2fiM.roa
Signing time: Tue 02 Jan 2024 08:33:27 +0000
ROA not before: Tue 02 Jan 2024 08:33:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1040
IP address blocks: 46.232.56.0/21 maxlen: 24
46.3.96.0/20 maxlen: 24
46.232.48.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 May 2024 22:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:66:32:c0:1b:02:82:ca:2e:09:88:d7:80:e0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:33:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e6b0c7c8846a942bd232514a51ad6e594b67e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:d5:61:30:e5:4d:2b:54:0d:c9:2b:92:67:
05:da:1d:ec:68:42:51:34:5d:95:b6:21:e7:83:8c:
d9:90:53:c8:c4:3d:5e:95:40:2f:4f:e7:bb:ab:41:
21:38:89:a4:ba:eb:ec:32:8f:24:42:4b:2c:2f:6f:
7f:62:00:b4:b6:c5:22:40:6d:85:8e:9a:c5:d7:cd:
64:e4:c2:7e:63:03:6c:87:81:46:c8:c5:e4:5c:e4:
ad:69:62:41:92:f3:05:92:ad:ca:1a:80:4f:86:44:
12:8e:f8:bf:f6:e4:04:14:78:c8:18:57:73:4c:82:
d6:38:4b:4a:a2:7c:03:ac:c4:d0:16:ae:83:e8:8c:
be:17:a0:a6:0e:cd:17:71:26:f2:1e:ec:db:9b:ec:
ef:79:21:10:40:53:af:be:89:2e:a8:54:f6:de:6a:
73:16:2f:55:a3:ef:91:7b:e6:68:7b:c9:3d:ab:bb:
d7:5b:ca:c5:3f:0d:91:bf:9d:2c:98:ae:7a:11:a3:
3c:ef:c5:24:fd:aa:94:63:36:1c:e9:66:e9:fe:7f:
cb:7d:4a:2c:20:c6:72:c5:09:bc:d4:0e:4a:3e:37:
34:a9:b2:30:4c:6d:76:ce:63:5a:92:50:b0:aa:6d:
85:aa:ca:8d:00:b3:78:80:e1:68:51:4a:f5:9f:51:
89:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6B:0C:7C:88:46:A9:42:BD:23:25:14:A5:1A:D6:E5:94:B6:7E:23
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/nmsMfIhGqUK9IyUUpRrW5ZS2fiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.96.0/20
46.232.48.0/20
Signature Algorithm: sha256WithRSAEncryption
00:da:8a:12:f1:e2:1b:77:08:77:32:d3:8a:06:5b:ca:25:33:
53:01:30:21:e0:03:71:10:ae:5f:f8:5f:63:99:bf:58:6c:6e:
93:90:1a:ae:7b:5d:72:d0:80:d0:95:99:f0:3f:b1:fc:ca:0d:
b5:55:58:55:da:57:1a:d6:7e:7d:e3:fa:84:9f:cb:b3:7f:83:
a2:21:a2:5b:0f:c5:62:34:05:77:56:ac:e9:b5:65:2c:5b:27:
e1:41:de:0a:34:3d:3d:cc:c9:81:14:07:19:d8:15:45:e2:5f:
68:90:81:a4:ae:8e:2a:ce:8a:b3:55:43:19:ea:43:32:4c:8e:
40:18:f9:be:67:8d:f3:da:65:c6:01:c4:b1:60:a9:d9:2d:44:
60:9c:73:65:34:75:17:26:7f:d0:bb:08:a6:44:bb:7e:e3:d1:
3c:3a:8e:3c:ed:a7:fa:eb:9f:46:b1:37:94:05:eb:7d:00:af:
32:98:b5:a5:42:8c:e8:77:6d:7b:a1:1a:77:cc:24:57:8f:c8:
72:0b:a1:96:e2:5e:ab:08:b1:89:7d:b2:d5:f1:26:70:2d:bb:
46:d9:43:91:c4:38:8e:d1:0c:2e:44:34:66:26:37:64:c1:3d:
3e:d5:13:41:d6:1a:e0:fe:1b:ea:1f:0a:7f:21:14:7c:c9:e6:
43:5a:de:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:23 2025 by rpki-client