Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/kQfVZbp2SaBPMMzGBub1dsYD_sM.roa
File: kQfVZbp2SaBPMMzGBub1dsYD_sM.roa (raw, json)
Hash identifier: /Ytz8wXbBilxiQVI5Q+yxIqi/79cLq66uWcPebjAias=
Subject key identifier: 91:07:D5:65:BA:76:49:A0:4F:30:CC:C6:06:E6:F5:76:C6:03:FE:C3
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018EE6BB70013EDA71E91BD2DAB5D78ED927
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/kQfVZbp2SaBPMMzGBub1dsYD_sM.roa
Signing time: Tue 16 Apr 2024 11:47:07 +0000
ROA not before: Tue 16 Apr 2024 11:47:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12958
IP address blocks: 46.237.40.0/22 maxlen: 22
217.15.137.0/24 maxlen: 24
217.15.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Apr 2024 10:44:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:bb:70:01:3e:da:71:e9:1b:d2:da:b5:d7:8e:d9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 16 11:47:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9107d565ba7649a04f30ccc606e6f576c603fec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:eb:80:95:21:86:49:96:ee:6a:0c:78:2f:88:
de:3b:89:95:79:ab:5b:83:73:59:a5:02:1a:64:04:
a0:54:64:84:13:75:87:6b:61:80:79:89:56:c7:53:
9b:5e:47:a7:27:59:b0:c2:eb:6b:50:0c:f7:30:73:
86:cb:2d:22:91:25:3f:8e:c3:fd:7f:19:a1:e4:54:
22:a8:cd:9b:3a:3f:9e:b1:ad:1d:96:67:25:0a:c8:
c7:f4:38:e8:b7:35:8e:08:02:78:f5:7c:12:c3:c9:
d7:78:98:3e:8c:cb:74:39:2f:fe:64:59:14:a7:34:
fb:a1:79:f2:66:c4:c4:c9:49:e2:2f:e3:d3:24:aa:
e7:86:cf:9b:7f:2f:c3:1f:52:6d:b3:d2:5c:5b:b8:
a5:fe:33:e4:ba:52:32:e5:51:2a:d9:8c:9b:e2:d0:
cf:3b:99:ec:86:73:95:03:09:f3:13:47:63:aa:2e:
67:33:b6:46:84:d4:3d:bf:d3:2f:55:08:e8:90:e0:
7b:c3:c7:b9:11:b3:80:29:02:5b:08:51:95:67:cb:
98:83:e0:30:17:d8:71:c9:5e:ff:7e:94:3a:b5:07:
5c:5c:5d:3c:51:03:6e:00:07:60:02:73:99:23:bd:
e8:ab:27:c9:ed:43:7e:e8:13:de:4e:21:4d:91:14:
65:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:07:D5:65:BA:76:49:A0:4F:30:CC:C6:06:E6:F5:76:C6:03:FE:C3
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/kQfVZbp2SaBPMMzGBub1dsYD_sM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.237.40.0/22
217.15.137.0/24
217.15.156.0/24
Signature Algorithm: sha256WithRSAEncryption
63:17:2e:b7:b1:85:c2:93:e8:c6:3f:ce:fc:16:ad:a6:d1:fb:
e5:23:1d:ab:00:b1:13:15:16:dc:c7:c3:95:9b:b2:a6:ec:87:
15:62:b0:3e:05:52:a2:3c:f6:fa:3d:98:51:68:75:e7:66:67:
03:da:9f:8c:39:68:21:e2:3d:92:a9:f9:70:85:f1:b3:09:46:
be:c1:37:c4:96:f5:1e:e5:bc:f5:a0:e1:ff:2c:5b:c6:b5:48:
10:af:51:31:8c:d5:1b:f3:09:c7:fc:04:90:fa:1e:67:0a:57:
45:42:fc:c4:38:d3:6b:50:45:c9:c5:bf:cc:be:c3:94:29:27:
59:32:56:05:fb:79:03:0e:f7:f5:dd:6c:50:49:5c:04:d6:00:
4b:55:4c:18:a8:4e:cf:4a:bb:f5:2a:90:fd:f4:18:98:75:76:
02:2c:5a:ec:f5:49:f5:8b:c1:21:67:20:84:ba:bc:6e:14:51:
03:b9:2e:6c:8a:bf:e6:10:87:00:90:9e:3d:d6:60:8c:ab:21:
1b:c0:cf:c6:7e:2e:c0:74:f3:48:0e:82:8b:e7:6b:60:da:08:
7e:eb:93:b2:b4:08:68:19:33:e6:6d:02:51:80:f4:26:a2:15:
82:1c:04:c8:44:02:cd:91:01:8e:f2:f5:12:ef:57:d7:62:d7:
23:99:59:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:56 2024 by rpki-client on console-fra.rpki-client.org