Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/6XdLFJfzSr7_C6IV3Omcud1z5B8.roa
File: 6XdLFJfzSr7_C6IV3Omcud1z5B8.roa (raw, json)
Hash identifier: c5lMb0BlG5PeUWvaG04NN7JtSguIH5Q9uXocO+9fI4E=
Subject key identifier: E9:77:4B:14:97:F3:4A:BE:FF:0B:A2:15:DC:E9:9C:B9:DD:73:E4:1F
Certificate issuer: /CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Certificate serial: 01856F6FE4E58C864DD136A4B7D2A0AA2C72
Authority key identifier: E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/6XdLFJfzSr7_C6IV3Omcud1z5B8.roa
Signing time: Sun 01 Jan 2023 22:24:42 +0000
ROA not before: Sun 01 Jan 2023 22:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33993
IP address blocks: 46.160.192.0/21 maxlen: 21
46.160.200.0/21 maxlen: 21
46.160.208.0/21 maxlen: 21
217.194.240.0/20 maxlen: 20
46.160.216.0/21 maxlen: 21
217.194.240.0/21 maxlen: 21
217.194.248.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:e4:e5:8c:86:4d:d1:36:a4:b7:d2:a0:aa:2c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Validity
Not Before: Jan 1 22:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9774b1497f34abeff0ba215dce99cb9dd73e41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:55:1d:d0:44:ee:ed:f0:63:4a:39:85:de:8c:
56:ab:46:25:4d:f0:8f:a9:7e:66:ac:4c:1f:6f:e8:
1e:73:50:32:75:06:3e:de:2c:96:bd:84:9a:79:da:
ab:a4:80:b1:4c:99:bc:5e:6f:1e:5c:a2:8a:ff:67:
0f:7e:eb:75:a0:d1:a7:fb:c5:a8:1e:0f:e0:8c:f7:
cb:7a:c5:0f:53:65:d1:c8:8d:f3:5d:9c:23:c0:16:
96:9c:81:46:3b:ff:5f:80:a4:80:ed:7e:12:ec:8f:
a5:4f:e4:6e:cf:54:30:a3:ec:99:02:03:d4:00:a9:
ca:ad:24:08:c5:87:86:a5:8e:f4:8d:f4:ca:26:cd:
d1:c3:99:bd:cd:35:88:d8:7f:dc:ac:de:30:4a:74:
58:08:24:7b:73:b3:a7:b4:ab:7a:c6:a3:a5:3f:b2:
50:7e:de:ee:0f:17:8d:3f:ac:52:d9:2c:18:c5:09:
48:ff:d2:d8:b5:8a:e3:f3:62:95:e7:96:2c:bd:01:
ad:13:a3:30:86:20:45:77:ee:9d:dd:f7:35:9e:b6:
9a:3a:c9:6d:37:fd:e5:50:e8:3a:c5:1f:49:e5:5b:
6a:64:16:fc:19:ef:32:7e:c7:40:4c:2e:61:e6:4d:
02:d6:68:a4:5a:c7:59:2b:78:0e:3b:f4:e9:0c:e9:
b4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:77:4B:14:97:F3:4A:BE:FF:0B:A2:15:DC:E9:9C:B9:DD:73:E4:1F
X509v3 Authority Key Identifier:
keyid:E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/6XdLFJfzSr7_C6IV3Omcud1z5B8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.160.192.0/19
217.194.240.0/20
Signature Algorithm: sha256WithRSAEncryption
a2:ce:2b:3d:dd:0c:f4:cb:2d:46:c3:1e:a0:bf:58:7e:61:1d:
b8:c3:dd:79:ff:bb:05:8b:ef:2b:f4:73:70:b2:f3:52:1d:97:
65:7f:0e:7d:01:25:31:a4:08:e8:95:dd:20:55:24:b8:f4:47:
14:f5:ac:5a:3c:86:1b:52:b7:a5:20:2e:ce:5a:38:73:7c:fb:
c4:49:ba:e9:b0:63:42:68:7f:83:3e:84:97:0b:be:54:4d:2c:
66:25:31:f7:b4:58:f8:74:eb:7c:65:92:89:ad:b8:35:cd:72:
bb:36:01:db:2a:4c:cf:56:da:b0:89:f5:3d:34:1c:9e:94:cd:
26:54:af:f9:b2:37:35:4b:07:3a:d4:c9:0d:5c:c2:d8:c0:45:
d3:d0:bc:21:56:7a:67:ab:80:01:d8:78:df:3d:9a:24:b1:e2:
5c:ff:fc:da:45:c2:da:9d:28:08:3a:40:40:4a:f9:c3:cf:b4:
b3:81:3d:29:70:f6:44:09:90:22:cc:d4:21:93:48:ed:fd:06:
11:90:92:2a:73:51:59:dc:2f:37:5f:c3:94:eb:cc:fc:f5:62:
a0:67:e3:97:e3:53:49:6f:2f:83:34:0d:8b:2b:12:a5:b3:19:
11:6c:75:0f:29:6c:20:99:23:3d:65:ef:95:d4:78:8b:c3:3d:
cc:a4:98:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:25 2024 by rpki-client on console-ams.rpki-client.org