Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/xNBr6aKmRu5VcRAvhqQVw6-nY8U.roa
File: xNBr6aKmRu5VcRAvhqQVw6-nY8U.roa (raw, json)
Hash identifier: VPplb2p9IxylUD6IVvwX3eHkUYihyq1iZHgJ6pjiy5I=
Subject key identifier: C4:D0:6B:E9:A2:A6:46:EE:55:71:10:2F:86:A4:15:C3:AF:A7:63:C5
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01856F023C30362F40697ADD15AC229E148B
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/xNBr6aKmRu5VcRAvhqQVw6-nY8U.roa
Signing time: Sun 01 Jan 2023 20:24:55 +0000
ROA not before: Sun 01 Jan 2023 20:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30823
IP address blocks: 46.19.201.0/24 maxlen: 24
46.19.207.0/24 maxlen: 24
185.176.116.0/24 maxlen: 24
185.176.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:3c:30:36:2f:40:69:7a:dd:15:ac:22:9e:14:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 20:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4d06be9a2a646ee5571102f86a415c3afa763c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:eb:59:5b:24:c9:30:54:95:78:63:7d:b2:2e:
a2:de:d9:ea:ff:29:0c:dc:83:6d:89:31:d9:e1:57:
7d:21:57:f4:bb:07:0c:4d:43:bc:26:ae:46:79:77:
36:9e:18:cd:3e:63:d5:2f:ec:65:a4:07:16:d8:2f:
63:97:0a:07:20:c6:56:f9:2d:2e:dc:c2:17:c9:da:
b3:94:e3:6f:1b:2a:da:53:05:7e:a2:c5:b3:68:1c:
76:78:6e:c6:30:6d:ee:f6:9d:0e:23:15:15:74:b3:
06:78:26:0a:6d:ac:92:16:f9:a5:cb:4e:5b:0a:42:
c2:9f:02:3c:3e:e6:2e:6e:7c:7b:19:86:93:e2:ef:
4a:40:41:82:ff:e0:10:7f:66:d5:6a:a2:8e:ee:b3:
76:1a:11:94:be:31:cf:d2:b0:f2:4d:a1:a1:60:6d:
45:7e:4e:11:c9:3e:89:2f:2b:b8:a9:fe:79:d2:57:
9b:55:30:46:93:c6:13:59:a9:72:2f:7b:26:8a:c6:
29:8c:11:18:4b:84:b5:e1:9f:86:dd:07:a6:43:9e:
f3:36:53:d6:b8:36:02:2d:8f:dc:cc:f5:f3:66:ad:
aa:89:20:23:32:a4:27:cc:ec:18:5b:a0:ca:ea:03:
6a:fd:cc:5b:42:a9:fa:63:a3:e5:3b:fd:81:38:a3:
ec:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D0:6B:E9:A2:A6:46:EE:55:71:10:2F:86:A4:15:C3:AF:A7:63:C5
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/xNBr6aKmRu5VcRAvhqQVw6-nY8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.201.0/24
46.19.207.0/24
185.176.116.0/24
185.176.119.0/24
Signature Algorithm: sha256WithRSAEncryption
63:89:b6:2a:36:11:21:f4:95:dd:34:09:c3:3a:22:19:5d:d3:
35:ef:34:a5:6d:6f:df:19:6f:cc:8e:37:b0:06:76:da:76:87:
57:46:ea:23:c3:4d:6e:b7:a6:77:35:74:d8:ee:04:40:17:07:
97:57:28:ef:1b:e9:66:49:a3:c2:63:b6:e1:fc:8b:0e:93:2f:
6e:ea:ab:63:95:eb:ab:a3:d9:ce:17:8c:1d:a4:cf:a7:43:3a:
68:67:89:cc:9f:cf:88:c1:73:7a:52:8b:1f:6f:b9:76:cd:f3:
7e:19:f1:d3:a8:de:43:5b:a1:72:cc:b5:e1:d8:6c:d8:1b:4c:
32:89:63:d5:bc:25:14:ed:68:88:e7:eb:d3:b4:95:45:aa:f3:
e2:ed:f7:7d:c8:eb:98:7d:f8:ce:2b:08:fa:3f:2d:4f:e5:e2:
a1:92:fe:cb:b5:34:ee:8a:8c:b4:45:cd:3c:e1:8f:cd:6d:1e:
4a:ef:7a:a6:fb:22:4e:5c:20:03:66:d5:1e:8c:c4:5d:2b:c0:
2c:f3:e5:f0:f0:a5:99:2e:a9:65:55:dc:ec:9c:b0:fd:29:4c:
9e:ad:a6:b1:8a:a6:5d:e5:e8:55:f7:64:e2:bf:75:39:ef:24:
71:2b:c5:c3:57:02:88:17:2b:06:18:54:95:66:7c:4d:8d:9e:
4d:35:4d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:38 2024 by rpki-client on console-fra.rpki-client.org