Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/mJxX3fMArucfY64emKEgSFg05VQ.roa
File: mJxX3fMArucfY64emKEgSFg05VQ.roa (raw, json)
Hash identifier: i1Xgxg5upGEI2HoucJYnK9kA0Fgqpi8zYPnqFQbjh9s=
Subject key identifier: 98:9C:57:DD:F3:00:AE:E7:1F:63:AE:1E:98:A1:20:48:58:34:E5:54
Certificate issuer: /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Certificate serial: 01932AA27449C462CD8615996C68D3400AF4
Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/mJxX3fMArucfY64emKEgSFg05VQ.roa
Signing time: Thu 14 Nov 2024 12:25:09 +0000
ROA not before: Thu 14 Nov 2024 12:25:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215089
IP address blocks: 46.235.8.0/24 maxlen: 24
185.87.254.0/24 maxlen: 24
185.87.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 16:16:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2a:a2:74:49:c4:62:cd:86:15:99:6c:68:d3:40:0a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Validity
Not Before: Nov 14 12:25:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=989c57ddf300aee71f63ae1e98a120485834e554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c9:f1:69:2b:93:fd:85:76:66:23:37:84:79:
ff:a2:26:f1:30:45:b4:d0:f5:dc:c9:c8:9c:d3:a3:
72:3b:96:5d:d1:58:c4:f5:bb:2d:20:02:3a:3b:f5:
15:d4:e4:d0:b3:fe:26:0c:11:79:e3:56:fd:15:22:
c4:d4:b9:81:97:c3:e8:a2:f6:ed:79:c0:11:81:4c:
16:18:9e:ca:7f:89:83:c3:80:4b:ca:83:38:56:5d:
92:cc:33:e7:bd:1a:1f:7f:48:62:7b:2a:42:8a:7c:
a4:e2:fc:cf:db:4d:71:9c:0a:be:5b:bd:13:b9:a4:
f3:eb:ee:59:17:46:c1:7f:3b:7f:6e:97:bb:92:ed:
9c:bd:27:b1:34:c7:9a:e7:a2:fd:16:df:87:17:90:
21:92:32:4f:c3:38:7f:45:b2:5c:e7:94:9d:e4:68:
ef:89:98:08:70:ba:10:b6:1e:52:24:37:2a:95:cd:
36:d3:a7:ed:da:c6:db:7a:e1:e3:7f:9e:1b:11:ff:
2d:7d:44:e7:52:5f:a1:53:08:4d:c5:bb:af:a9:3c:
25:ea:e4:91:63:95:8a:43:f2:81:8e:72:5e:13:1d:
52:27:f8:4e:5b:db:f9:52:d5:9c:d5:ec:a1:83:59:
06:4d:87:ed:64:b8:93:c2:a3:55:d7:46:ed:77:71:
c8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9C:57:DD:F3:00:AE:E7:1F:63:AE:1E:98:A1:20:48:58:34:E5:54
X509v3 Authority Key Identifier:
keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/mJxX3fMArucfY64emKEgSFg05VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.8.0/24
185.87.254.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:a8:fd:96:ec:f7:b8:c4:ad:74:ac:93:13:34:14:75:85:7d:
64:fd:32:fc:6a:cc:ca:b8:94:f5:6a:b1:ef:cd:63:5a:cc:d9:
20:8f:89:03:4d:11:e9:c4:20:19:df:2a:18:4c:19:9a:3f:15:
cd:c0:b2:98:30:fd:82:e3:c1:b7:ec:ed:47:14:38:84:9a:2e:
15:d5:ac:a8:fc:a8:e2:6e:35:0b:1a:1a:c6:90:06:2b:d8:b9:
8a:e1:51:b2:ff:e7:18:32:5a:97:0c:54:57:93:82:b8:18:ce:
c8:82:4e:c5:28:c4:35:cb:6e:90:c0:dd:61:2a:df:2f:41:bc:
17:62:1e:68:24:7e:69:eb:f9:ff:1c:2d:8a:e2:cb:59:b6:c0:
14:57:44:69:5e:b5:ee:d7:dd:bc:f8:75:85:21:7a:25:ae:4a:
8e:11:7e:e4:06:be:db:bc:e6:ca:eb:76:e2:10:11:56:2c:ca:
9e:f0:15:d9:8a:06:85:a8:d7:c6:93:d7:f7:4d:9b:5d:4c:df:
ed:21:50:b1:02:d5:c7:f0:eb:90:81:bb:bf:c9:e7:67:68:72:
c8:06:be:1b:7b:e0:1d:85:36:92:46:e0:48:2c:ea:65:e3:c4:
ef:19:1b:4a:b5:47:5c:53:3f:5b:39:7e:99:e8:d7:b3:db:b3:
d8:93:ae:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 18:41:01 2024 by rpki-client on console-fra.rpki-client.org