Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/5XM5UIHIGKxXJd_IEhs5XEBXlYQ.roa
File: 5XM5UIHIGKxXJd_IEhs5XEBXlYQ.roa (raw, json)
Hash identifier: zFZ0V6lem4zvh1GOoZ2rVu70NWH6htHSps13RSdfio0=
Subject key identifier: E5:73:39:50:81:C8:18:AC:57:25:DF:C8:12:1B:39:5C:40:57:95:84
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 01857067633194353F44B9E3076C48D74A3A
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/5XM5UIHIGKxXJd_IEhs5XEBXlYQ.roa
Signing time: Mon 02 Jan 2023 02:55:01 +0000
ROA not before: Mon 02 Jan 2023 02:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4826
IP address blocks: 109.206.250.0/23 maxlen: 23
46.161.212.0/24 maxlen: 24
46.161.217.0/24 maxlen: 24
2a0e:eb44::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 18 Jan 2023 15:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:63:31:94:35:3f:44:b9:e3:07:6c:48:d7:4a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 2 02:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e573395081c818ac5725dfc8121b395c40579584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4f:3d:6d:d9:1d:9c:67:69:2b:7a:07:94:88:
ab:82:f4:27:bb:6e:f8:d8:96:15:b7:46:b2:f6:15:
7f:0d:c3:51:f1:51:d0:33:e2:d9:0d:ba:70:f5:8c:
da:e1:dc:92:40:9c:e7:ee:3a:92:be:3a:26:b2:32:
25:38:3a:bf:22:ee:74:8f:28:8a:09:63:8e:45:b1:
78:2c:09:48:b7:76:0a:8c:89:44:81:e2:d7:a3:a3:
98:eb:d6:e1:01:5b:be:bf:74:7f:ed:78:89:ef:58:
f1:2e:f9:e8:e6:86:a5:c7:ec:fd:ca:0c:11:5e:53:
20:e4:cf:ad:fe:f1:6a:d6:9d:6c:26:5e:c5:67:3a:
92:25:cb:20:12:ff:35:03:96:ad:18:40:96:92:e2:
86:af:7c:12:f2:1d:af:eb:9b:63:d0:14:bd:28:08:
dc:2a:68:c6:cc:92:06:a7:b5:91:f5:94:11:00:f9:
35:59:b1:5d:91:d7:9c:a6:f6:98:d9:de:39:c4:52:
2e:07:b5:8c:c4:f3:a3:a1:39:1f:52:f7:cb:7a:43:
e5:f4:15:5f:93:cf:4d:8d:3e:2a:d8:73:12:e4:7e:
e5:76:6c:bd:0d:d7:17:26:aa:6c:44:63:c4:f0:7f:
87:ec:74:c9:fc:50:32:30:b2:3b:b2:54:e6:c6:ae:
32:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:73:39:50:81:C8:18:AC:57:25:DF:C8:12:1B:39:5C:40:57:95:84
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/5XM5UIHIGKxXJd_IEhs5XEBXlYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.212.0/24
46.161.217.0/24
109.206.250.0/23
IPv6:
2a0e:eb44::/32
Signature Algorithm: sha256WithRSAEncryption
a4:7d:7e:23:1f:dd:9d:8f:2e:da:50:91:fe:f4:c0:83:cf:d8:
f5:d4:b0:88:d7:a0:27:4c:0d:65:af:f6:c4:fc:d3:79:a5:6f:
55:36:7b:8e:4f:29:a2:74:46:0f:18:75:85:c4:fe:0c:59:46:
41:6c:8c:ee:e2:24:5f:02:50:fb:5f:1d:b6:86:36:63:df:85:
a5:78:2a:4f:72:b0:27:ec:16:c5:dc:de:a8:32:fc:c9:ee:20:
4b:99:34:d8:ec:6a:8c:6e:20:fe:ed:70:88:78:f2:10:aa:30:
f1:b9:cf:14:d5:9f:53:2f:d9:ee:ee:fa:f9:b0:a9:ef:44:54:
b6:9d:4c:b4:cd:cf:c2:a7:a1:79:da:85:ea:3c:c8:03:79:c7:
6c:76:3b:33:58:09:39:61:49:a3:45:00:3f:26:14:a4:6c:29:
f6:70:7c:49:6f:94:cf:c5:49:28:31:77:4f:4e:2d:52:5c:a5:
de:0f:7f:85:70:39:11:ee:71:7c:5b:17:01:b7:79:66:bd:15:
a5:fc:f3:e3:47:c7:92:f1:a2:5e:7f:8a:f1:51:70:85:da:76:
66:04:d8:fd:a6:8c:85:d1:50:83:eb:72:a7:f6:5d:53:4b:25:
33:40:b5:2e:19:de:05:87:eb:f2:c4:a3:63:ba:fa:4a:eb:1b:
10:22:cc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org