Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/73q-4JyaStoRl4khsvrwgFNSB5o.roa
File: 73q-4JyaStoRl4khsvrwgFNSB5o.roa (raw, json)
Hash identifier: 6s1FunLlHDVC0Mrys+1jFkD610Ik3Gjv5+s1WRV8J6Q=
Subject key identifier: EF:7A:BE:E0:9C:9A:4A:DA:11:97:89:21:B2:FA:F0:80:53:52:07:9A
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018D46B4A30E965283062DA1CB81F0CD98D3
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/73q-4JyaStoRl4khsvrwgFNSB5o.roa
Signing time: Fri 26 Jan 2024 16:57:39 +0000
ROA not before: Fri 26 Jan 2024 16:57:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42849
IP address blocks: 46.19.201.0/24 maxlen: 24
83.223.138.0/24 maxlen: 24
85.254.41.0/24 maxlen: 24
91.190.41.0/24 maxlen: 24
185.176.116.0/24 maxlen: 24
193.200.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Mar 2024 14:44:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:46:b4:a3:0e:96:52:83:06:2d:a1:cb:81:f0:cd:98:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 26 16:57:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef7abee09c9a4ada11978921b2faf0805352079a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a0:61:7f:19:ad:bc:90:e4:61:0f:b7:97:08:
bb:d5:f8:45:30:6b:ce:f0:89:c8:c0:fc:09:4c:c4:
28:84:88:3e:6f:2e:18:30:95:db:bd:2b:4e:aa:f7:
3e:74:9d:4e:f3:76:15:2e:c7:48:47:9e:7c:05:4c:
aa:ab:a2:71:80:10:19:98:b9:a5:b5:7a:be:97:21:
c5:2a:be:1e:24:04:ff:e0:f6:16:bc:9c:f5:26:56:
78:01:89:74:b7:24:ff:41:2a:cd:bf:ae:d1:b2:3b:
44:5e:b0:ee:b6:1e:b6:0d:d6:50:ac:5e:a7:73:12:
2c:24:7a:39:a7:46:e3:6e:cc:3c:1c:ae:75:5b:6b:
58:73:86:7c:f5:c1:b7:a7:b4:53:5a:b9:ad:e3:5e:
ae:f0:62:d9:fb:1a:33:3b:93:63:54:a9:7a:e4:6c:
a0:88:36:27:75:0c:8d:31:2e:b4:86:1d:c3:7b:1a:
a8:eb:ab:5e:4b:65:8c:32:73:b6:f1:82:c8:90:7a:
74:69:ff:75:43:81:01:c5:05:a2:c5:ec:e9:e2:f1:
05:79:39:d1:0f:84:3a:9b:21:bc:e8:1a:c9:be:50:
01:19:1c:eb:44:2a:94:62:6a:98:5a:8c:3a:a8:d7:
8c:91:6c:dc:60:cd:51:2b:8f:44:82:ae:77:5d:a6:
d7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7A:BE:E0:9C:9A:4A:DA:11:97:89:21:B2:FA:F0:80:53:52:07:9A
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/73q-4JyaStoRl4khsvrwgFNSB5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.201.0/24
83.223.138.0/24
85.254.41.0/24
91.190.41.0/24
185.176.116.0/24
193.200.131.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:2a:08:76:56:cb:9e:67:40:66:6c:f2:87:8c:53:2c:cb:26:
10:65:9e:00:0c:f0:74:d8:eb:07:aa:c5:16:1f:3f:32:e1:45:
a9:39:c6:d9:6a:31:38:6f:1b:c2:f2:69:48:d6:af:c0:df:5c:
6d:05:4e:31:7f:39:9d:94:7b:e6:d7:9d:ac:4c:d6:c9:f7:07:
d7:1d:78:f2:60:d8:4a:ff:33:87:fa:1f:63:b7:32:33:2e:45:
2b:6a:b9:c5:b5:7b:3f:0e:7a:14:bc:a6:b8:96:07:f1:d6:76:
3d:6b:26:80:be:6c:83:4a:5a:2e:e0:dd:65:3d:65:b8:33:19:
e9:01:61:63:d0:92:49:75:47:a1:9e:ff:7f:88:ab:60:f2:43:
e3:a6:dc:02:1d:ce:f4:69:30:2e:9c:ae:2f:f1:ba:d0:10:62:
89:d8:08:bf:4a:17:6f:5e:46:37:d5:b7:78:1d:81:fe:c4:f2:
bd:3b:fd:1a:7e:64:07:e8:15:c6:d2:fd:6d:6d:f0:7c:4d:eb:
39:88:76:dc:5a:1a:57:b3:39:03:f3:f1:28:ba:70:e3:2c:16:
47:68:1a:15:45:02:9b:32:b1:fe:ab:7b:8d:a8:44:52:d9:7d:
68:2c:f4:c8:c0:3a:f2:81:e8:7d:b9:06:52:46:27:2c:38:3e:
8d:09:7a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 17:54:45 2024 by rpki-client on console-ams.rpki-client.org