Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/sR8deZWjk5KZGsLaVlFj9e0LbAc.roa
File: sR8deZWjk5KZGsLaVlFj9e0LbAc.roa (raw, json)
Hash identifier: krUi0bGiKRuCTy4AS1SFZYDsFfwDfzKBAxv7fNC8/sk=
Subject key identifier: B1:1F:1D:79:95:A3:93:92:99:1A:C2:DA:56:51:63:F5:ED:0B:6C:07
Certificate issuer: /CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Certificate serial: 018CC3B6F4A3C5FFAB0AA7D601CE7902CEEF
Authority key identifier: 2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/sR8deZWjk5KZGsLaVlFj9e0LbAc.roa
Signing time: Mon 01 Jan 2024 06:29:56 +0000
ROA not before: Mon 01 Jan 2024 06:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209671
IP address blocks: 46.174.140.0/22 maxlen: 24
2a09:de80::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 13 Mar 2024 14:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:f4:a3:c5:ff:ab:0a:a7:d6:01:ce:79:02:ce:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d2f9339fbb8cb33c522751c530f3a20a753547c
Validity
Not Before: Jan 1 06:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b11f1d7995a39392991ac2da565163f5ed0b6c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:92:df:33:f2:f4:9e:af:1a:61:24:aa:f4:e5:
01:7f:96:23:2a:f9:14:f4:74:dd:11:b6:7d:00:a8:
cd:58:77:6e:85:23:67:0c:9a:87:bc:9d:ec:26:0b:
6d:69:3a:22:0c:3c:cb:15:a1:89:df:45:bd:41:b9:
96:ec:26:1b:f4:50:54:7e:42:89:3e:1d:4d:c6:da:
21:a3:9c:c9:d1:1c:39:9e:14:81:65:76:bf:d7:fc:
30:57:51:e4:cb:06:31:a9:c8:93:1b:a8:35:7d:30:
c8:d7:e2:4c:a5:bb:14:83:61:31:54:43:3e:8d:15:
36:11:e6:29:9c:e1:ec:77:b8:ef:66:0c:ea:1b:81:
08:07:2f:d2:c1:ca:b6:4a:3c:f5:07:a7:5b:5b:74:
59:74:76:d4:22:0d:2f:32:cd:73:cd:a2:02:e7:97:
09:e4:85:85:01:3e:04:1e:21:d9:c9:5a:54:b3:56:
33:9d:9d:75:5d:d9:c0:d3:75:4c:a0:60:00:c3:10:
d7:92:88:5f:9f:ce:5e:ba:f3:40:e4:b7:b1:1c:70:
13:4f:d4:80:e1:f2:f2:08:e2:e1:56:62:6b:25:a9:
70:07:10:2c:60:93:cb:12:1c:f4:6c:c6:54:4f:17:
44:75:fa:80:bf:b0:3c:62:a6:e4:b6:22:be:a4:8a:
37:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1F:1D:79:95:A3:93:92:99:1A:C2:DA:56:51:63:F5:ED:0B:6C:07
X509v3 Authority Key Identifier:
keyid:2D:2F:93:39:FB:B8:CB:33:C5:22:75:1C:53:0F:3A:20:A7:53:54:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LS-TOfu4yzPFInUcUw86IKdTVHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/sR8deZWjk5KZGsLaVlFj9e0LbAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/95fa61-17fb-4890-9598-1d3a1e9b7545/1/LS-TOfu4yzPFInUcUw86IKdTVHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.140.0/22
IPv6:
2a09:de80::/32
Signature Algorithm: sha256WithRSAEncryption
87:38:ba:60:1d:eb:13:09:f2:bd:32:fe:30:e7:c8:2c:95:f9:
ea:30:72:15:18:48:31:84:5b:59:74:13:ec:5b:16:dc:33:0f:
28:fc:43:48:87:bc:77:79:d7:50:63:d2:40:df:e9:05:e8:df:
5a:09:4c:8f:5b:ee:55:49:9c:8a:21:a1:af:f7:6e:af:1c:c1:
9c:c2:3f:73:56:21:d8:f4:55:56:fe:b8:3a:ff:4c:af:e4:ee:
58:89:5b:c3:b2:ac:2a:dc:71:77:9f:d2:5f:21:3c:30:57:a4:
32:a3:01:1b:ae:59:1d:86:25:8b:1e:5c:6b:a8:3f:c3:43:cc:
d4:4f:2e:fb:c3:12:5a:e2:7b:ed:bc:53:7a:3f:10:a3:a7:66:
b2:a6:dc:3e:03:78:c4:28:bf:74:76:f9:34:ca:c0:92:02:e9:
48:ab:e8:70:e7:d8:f3:53:2b:44:fa:bf:f5:d5:9d:fa:fb:67:
8a:36:85:a0:0a:8b:91:98:1f:3a:96:d4:fb:dd:53:86:60:a9:
b0:3a:be:a3:75:35:4b:0d:a3:b0:d9:71:63:a3:73:4e:2d:20:
00:7d:9c:93:85:03:ba:bb:34:4d:f2:1b:9b:9f:71:00:2d:11:
53:7c:e9:9f:2a:da:95:5c:8b:b3:c8:06:82:2c:3a:a8:ec:29:
af:64:fe:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:18 2024 by rpki-client on console-ams.rpki-client.org