Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/Ud6shAaM6LXF8G2wafh7Pz1Llow.roa
File: Ud6shAaM6LXF8G2wafh7Pz1Llow.roa (raw, json)
Hash identifier: sEPk+ePNlNpUX2DwFlkk+cL3GrTVw+N+frjj6QgZqJA=
Subject key identifier: 51:DE:AC:84:06:8C:E8:B5:C5:F0:6D:B0:69:F8:7B:3F:3D:4B:96:8C
Certificate issuer: /CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Certificate serial: 018C4B610CCB5EC82929B3F68BDB70C4AC83
Authority key identifier: D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/Ud6shAaM6LXF8G2wafh7Pz1Llow.roa
Signing time: Fri 08 Dec 2023 21:41:40 +0000
ROA not before: Fri 08 Dec 2023 21:41:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50590
IP address blocks: 46.175.168.0/21 maxlen: 23
46.175.172.0/23 maxlen: 23
46.175.174.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4b:61:0c:cb:5e:c8:29:29:b3:f6:8b:db:70:c4:ac:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c475403fdd90381891e5a0c3266b478dd8ca35
Validity
Not Before: Dec 8 21:41:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51deac84068ce8b5c5f06db069f87b3f3d4b968c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:40:18:53:84:05:40:c6:19:05:2f:bc:d2:10:
88:7c:30:33:05:ce:ec:8a:8c:1f:d1:a0:30:6a:8b:
39:7d:4d:09:65:d1:79:c5:52:5c:68:c2:2f:71:d5:
a7:57:30:64:ef:85:a5:e0:f5:04:4c:2e:9b:ad:fb:
9e:bb:10:dc:c9:55:b0:9e:ae:95:7e:4a:99:ab:57:
b4:2a:fb:a2:46:fe:e9:64:8b:fe:3a:0b:17:1c:c6:
5c:ba:78:04:e7:ba:97:a3:cf:89:26:2c:a1:a4:7d:
fb:20:22:90:77:f2:87:91:1f:9e:37:f1:41:cc:a0:
88:d9:1a:1c:e1:e6:31:60:98:f3:d1:04:b6:53:3e:
34:56:19:1d:1e:00:b1:fc:60:e2:44:e3:03:32:3c:
c3:4f:94:a4:98:6c:7f:7e:18:8d:82:2c:b0:a5:8c:
19:d1:3c:06:53:6d:05:c3:bb:e5:25:77:5e:82:21:
0a:26:dc:ca:41:d2:91:ea:57:fc:42:ae:c5:17:19:
0b:71:e4:0d:ae:fd:f8:77:73:32:53:a7:9a:ce:f3:
93:6f:0a:81:40:ad:03:ad:e2:f6:45:ef:41:83:6a:
f0:63:2a:59:0f:df:8d:c0:80:3f:b9:05:e6:1a:0f:
de:02:2d:10:ca:1a:1a:07:7d:be:8a:2c:e7:e9:3d:
8c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DE:AC:84:06:8C:E8:B5:C5:F0:6D:B0:69:F8:7B:3F:3D:4B:96:8C
X509v3 Authority Key Identifier:
keyid:D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/Ud6shAaM6LXF8G2wafh7Pz1Llow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.168.0/21
Signature Algorithm: sha256WithRSAEncryption
30:bc:70:5b:b1:22:ca:33:f3:b8:6b:7a:2c:bf:77:7e:13:2c:
48:96:3c:23:db:41:f6:ce:ce:d1:c6:b2:ab:f5:e0:65:1d:c3:
39:3e:33:07:bd:6b:2c:41:dc:66:52:ed:16:c9:c2:9c:33:af:
14:50:4d:f1:0c:5f:1b:6a:0e:b1:af:17:ec:43:90:63:f7:ac:
c4:26:6f:37:37:03:2e:ef:3e:71:fa:9f:f7:67:06:b2:36:2a:
d3:f9:5e:c9:fe:4f:f3:9d:02:22:81:66:52:15:ea:34:3e:03:
31:23:1f:ad:40:84:67:3b:ad:57:52:35:6c:9f:ce:79:20:74:
be:2d:10:90:a4:fa:d1:64:95:52:4a:d4:db:92:2d:fe:63:f2:
04:8e:57:c5:2e:b0:96:ea:92:ef:53:97:e9:31:ae:13:95:d6:
e1:d2:fb:a5:7f:49:47:a0:fd:aa:f2:37:e1:58:bd:4e:1f:e8:
f5:65:c6:38:93:31:e9:ed:de:84:50:d3:6a:9d:2d:0d:34:19:
fe:97:c5:93:da:c6:5a:56:7c:cf:9f:e6:3f:a7:e0:cc:43:2b:
ae:fb:a3:0a:b6:bf:a7:62:f4:35:64:f1:06:f6:b3:5f:54:fb:
a0:fa:f2:cf:72:ee:cd:f8:23:41:58:f4:0f:d0:8d:9d:ad:ec:
9f:c5:2d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:44 2024 by rpki-client on console-fra.rpki-client.org