Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/zs6yufd683KsVSixjuhAM7O8YhU.roa
File: zs6yufd683KsVSixjuhAM7O8YhU.roa (raw, json)
Hash identifier: 4tzn+8VZRnzWTFZGHhvwiDZJzc6zTG9rk17OVpny0HQ=
Subject key identifier: CE:CE:B2:B9:F7:7A:F3:72:AC:55:28:B1:8E:E8:40:33:B3:BC:62:15
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018D55BAC40A62FC99A80A962858F4414BEC
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/zs6yufd683KsVSixjuhAM7O8YhU.roa
Signing time: Mon 29 Jan 2024 14:58:39 +0000
ROA not before: Mon 29 Jan 2024 14:58:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34702
IP address blocks: 46.19.207.0/24 maxlen: 24
185.176.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 19:23:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:55:ba:c4:0a:62:fc:99:a8:0a:96:28:58:f4:41:4b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 29 14:58:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ceceb2b9f77af372ac5528b18ee84033b3bc6215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:87:7d:10:6f:61:73:24:90:e1:75:57:58:a5:
ad:40:b6:42:ac:06:86:c9:61:60:88:e0:4a:14:01:
d3:ea:61:de:08:e8:8d:c0:a5:ac:57:c7:b0:c4:7a:
b5:4d:eb:23:37:fe:cd:a3:5e:bc:31:b1:e3:b6:26:
69:ce:49:fe:3e:c6:13:1e:9b:e7:0d:86:8e:f9:4a:
46:9a:1f:ac:ab:75:3c:dc:59:87:39:df:25:85:1d:
b3:93:81:bd:8d:fe:f8:10:84:3e:07:ca:ac:ef:6c:
43:6d:2a:5f:39:8d:fd:5e:27:e3:04:ee:76:0f:08:
43:44:2a:7c:13:5b:19:3f:73:68:47:8e:43:7e:8f:
41:c5:08:39:45:60:23:7a:78:15:14:53:14:64:ef:
38:87:e6:64:5b:18:07:57:4d:b0:6e:48:9e:7c:7b:
b3:28:4b:23:e0:3c:ff:35:93:7b:e6:d7:4a:d8:11:
0a:75:23:75:8a:dc:57:c4:3f:44:96:84:55:5f:02:
ff:2b:5b:ad:cf:99:ff:b3:8c:7c:13:91:6d:c0:69:
1a:ad:09:35:87:24:4e:1a:bd:a8:f6:e4:02:9e:c8:
69:81:16:f0:08:4a:fb:13:63:6f:bb:e7:01:fe:64:
de:6e:d9:54:4b:6d:3f:1c:87:cf:95:37:9f:1a:3a:
ed:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CE:B2:B9:F7:7A:F3:72:AC:55:28:B1:8E:E8:40:33:B3:BC:62:15
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/zs6yufd683KsVSixjuhAM7O8YhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.207.0/24
185.176.119.0/24
Signature Algorithm: sha256WithRSAEncryption
08:de:5d:64:92:6d:38:5e:06:8d:d3:16:f7:44:d3:68:53:57:
c2:81:ea:9c:f9:5a:8a:22:e2:f0:3a:e2:ef:19:3e:3d:0d:00:
b2:ac:68:c6:30:ad:4b:47:8d:14:23:82:18:54:09:20:96:0b:
eb:1b:d2:2b:f2:4d:43:59:75:9c:1a:f6:ea:63:73:02:a5:85:
65:2f:0a:09:4b:95:2a:1a:57:79:fd:8b:c8:d2:7f:86:07:99:
5d:e7:96:d9:7a:a1:25:aa:f6:77:95:17:ea:b5:d0:d0:39:b1:
31:45:4a:78:f4:63:f1:89:d2:56:28:d8:95:c1:00:4e:52:da:
3a:73:5f:57:96:a6:89:74:76:31:3b:d9:5e:0f:1a:5b:5a:4b:
c0:59:07:96:b3:e6:4f:65:35:b9:2e:c9:2f:79:b3:c2:db:02:
ca:98:6d:1d:78:d2:cd:47:12:c7:89:5f:a0:14:90:15:94:c6:
ef:c3:ce:53:15:59:00:34:03:37:7c:bc:a7:0e:62:01:33:4c:
8e:f2:7a:8d:57:02:12:4e:8a:20:06:9a:ee:08:dc:12:3c:02:
cd:72:d5:5f:a2:dd:cb:c0:0c:23:82:8f:6a:09:93:90:1b:ed:
1f:e6:ed:2e:5a:6b:0f:0d:5d:90:0a:bb:08:38:1e:f8:11:5b:
41:bc:2e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 21:05:25 2024 by rpki-client on console-fra.rpki-client.org