Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/bVUJ7i6Wgn8Ty0qFHOaJ5kUlT6w.roa
File: bVUJ7i6Wgn8Ty0qFHOaJ5kUlT6w.roa (raw, json)
Hash identifier: gFV5M87+K9urMqCDmPiOvUcUjHc8QqxHpWaF0eRWEQE=
Subject key identifier: 6D:55:09:EE:2E:96:82:7F:13:CB:4A:85:1C:E6:89:E6:45:25:4F:AC
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018E38B0F674074BF6EE061A34E770452413
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/bVUJ7i6Wgn8Ty0qFHOaJ5kUlT6w.roa
Signing time: Wed 13 Mar 2024 16:41:45 +0000
ROA not before: Wed 13 Mar 2024 16:41:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62163
IP address blocks: 46.161.217.0/24 maxlen: 24
46.161.218.0/24 maxlen: 24
193.56.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 24 Mar 2024 10:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:38:b0:f6:74:07:4b:f6:ee:06:1a:34:e7:70:45:24:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Mar 13 16:41:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d5509ee2e96827f13cb4a851ce689e645254fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7b:d3:e0:65:ec:85:07:d4:b0:d8:92:bb:ed:
2d:fd:0a:42:e3:50:a2:3c:60:33:53:c8:c2:f7:13:
13:3a:15:78:f7:c5:d8:05:51:3e:fa:3b:ba:2e:34:
ab:06:3a:8f:e0:ee:0f:20:d4:f8:be:eb:e6:b6:5c:
a1:8d:e8:99:36:9f:a1:5d:1a:2a:b8:36:f1:7b:0a:
ba:1f:46:35:9d:a2:44:ec:f5:98:96:a9:ac:5b:b2:
2d:25:ad:a1:44:a2:4c:b6:d2:c3:99:c6:33:1f:3d:
3e:26:96:39:c4:62:d8:c8:a4:3d:0e:fc:ba:55:4f:
01:95:66:8b:d4:e5:a8:db:59:d5:2e:87:35:88:4f:
df:ce:c5:b4:2b:64:cb:69:31:e5:45:8f:3f:fc:04:
f7:50:bf:70:81:ec:ac:8a:c3:12:a0:4e:9a:0b:82:
be:c6:2e:43:87:47:be:be:cf:00:7a:45:81:b3:32:
c8:ef:ca:ea:63:20:52:d6:80:e3:ed:31:1d:08:5d:
47:ef:c9:22:98:18:42:40:11:95:5e:db:d7:de:0c:
d8:91:31:c1:8d:a5:e7:99:2e:4b:e5:63:ba:8f:af:
92:13:fa:fc:5d:bc:f2:5d:dd:c7:99:55:55:d5:dd:
3c:b6:d8:ae:a7:bd:1c:17:66:de:60:ad:4f:5b:4e:
a1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:55:09:EE:2E:96:82:7F:13:CB:4A:85:1C:E6:89:E6:45:25:4F:AC
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/bVUJ7i6Wgn8Ty0qFHOaJ5kUlT6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.217.0-46.161.218.255
193.56.239.0/24
Signature Algorithm: sha256WithRSAEncryption
31:99:39:3e:2b:75:30:3f:9d:ee:cd:89:2e:95:3a:98:21:1f:
61:38:85:9c:d6:79:70:07:1d:aa:5e:ca:06:67:5f:cf:ec:7d:
a5:e9:69:c9:2f:05:0a:91:2c:34:3f:73:d2:f4:dd:16:c4:5f:
1e:75:fb:c5:d2:af:41:ea:93:48:07:8f:22:09:38:f1:39:d4:
9a:4a:f2:7c:59:49:a9:96:c6:04:99:17:0f:92:e2:cc:68:cc:
89:93:6b:ae:c6:8b:c9:43:fe:2b:1f:83:8b:db:27:8f:48:1a:
de:ac:bd:b8:56:ec:9d:6f:72:e7:0c:c1:a1:9b:a4:fb:ea:7d:
21:0d:5d:a0:be:2e:cc:ac:8f:5f:85:90:0b:62:f8:68:88:0e:
f2:e9:c9:03:d2:13:0b:6c:48:8d:b6:3a:6a:ab:01:2d:36:64:
4e:97:10:96:86:fb:87:c3:8a:0d:f6:1f:e3:28:fc:b7:cd:ae:
c5:42:d0:00:21:b9:69:34:70:ba:71:3a:73:50:85:fb:8b:35:
fb:ea:35:89:82:3c:15:16:ce:8a:1d:0c:c1:e0:b6:f9:72:be:
0a:ff:48:2b:82:57:90:e1:a8:97:98:58:7e:30:47:db:2c:28:
b7:f0:1a:8d:b2:02:65:e2:2d:97:8a:cb:a2:ea:48:ac:f5:f6:
61:c9:b8:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org