Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/Rnq4NzzXREmp8e-hUnF4B6xLjfE.roa
File: Rnq4NzzXREmp8e-hUnF4B6xLjfE.roa (raw, json)
Hash identifier: FqI6XXCapP2HZro3NVB/ZNStxioYgCkBU8T66UqRlFw=
Subject key identifier: 46:7A:B8:37:3C:D7:44:49:A9:F1:EF:A1:52:71:78:07:AC:4B:8D:F1
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018572BA72F6C05DA157802B3A5F20F74E15
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/Rnq4NzzXREmp8e-hUnF4B6xLjfE.roa
Signing time: Mon 02 Jan 2023 13:44:59 +0000
ROA not before: Mon 02 Jan 2023 13:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24723
IP address blocks: 206.252.228.0/23 maxlen: 23
206.252.230.0/24 maxlen: 24
206.252.236.0/22 maxlen: 22
206.252.252.0/22 maxlen: 22
206.252.253.0/24 maxlen: 24
195.238.184.0/22 maxlen: 22
77.79.255.0/24 maxlen: 24
85.232.240.0/24 maxlen: 24
85.232.243.0/24 maxlen: 24
46.229.158.0/24 maxlen: 24
46.229.158.0/23 maxlen: 23
46.229.159.0/24 maxlen: 24
77.79.198.0/24 maxlen: 24
2001:1a68:3::/48 maxlen: 48
2001:1a68:34::/48 maxlen: 48
2001:1a68:2c::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 23 May 2023 08:20:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:72:f6:c0:5d:a1:57:80:2b:3a:5f:20:f7:4e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 13:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=467ab8373cd74449a9f1efa152717807ac4b8df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f0:ce:7a:3e:2f:35:08:04:62:d1:15:54:a8:
10:45:39:19:91:c2:8d:83:2d:f0:74:f6:b6:e0:e0:
d6:53:4d:0d:f6:6f:32:8a:a5:67:78:a2:54:8c:cd:
2a:10:f3:13:59:11:c7:18:ec:0b:43:7b:b0:cc:ee:
5f:86:39:b6:a1:b3:eb:1b:8b:f6:06:b6:3e:b2:59:
62:86:b4:41:b2:dd:62:57:56:76:fc:df:db:c3:19:
e9:9f:27:88:a4:f0:81:f6:eb:d2:2b:6a:bc:47:3f:
29:8f:43:b4:43:56:a1:41:54:2e:8e:3d:a8:6b:e1:
f3:36:cc:ba:21:fa:8a:1e:1e:6f:9d:5c:c9:ca:85:
c3:e8:68:a9:29:7f:79:31:6d:09:40:04:0b:ac:33:
91:47:b6:61:f0:d9:f5:04:e0:40:80:05:3e:ed:dc:
73:3d:21:2b:06:c0:c7:23:d6:a2:3e:54:56:6f:2e:
9f:f0:34:71:df:f5:f4:91:97:6d:78:02:47:55:ea:
41:f3:52:bc:91:d1:cd:d6:82:69:56:9e:1b:f2:57:
3b:de:40:4d:9b:30:7d:24:20:bb:01:bf:5a:0c:38:
de:5c:f9:5e:59:e0:af:d9:60:ec:8c:93:80:88:e3:
12:be:d0:72:1a:93:2b:4a:5a:65:72:e7:27:24:1c:
3a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7A:B8:37:3C:D7:44:49:A9:F1:EF:A1:52:71:78:07:AC:4B:8D:F1
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/Rnq4NzzXREmp8e-hUnF4B6xLjfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.158.0/23
77.79.198.0/24
77.79.255.0/24
85.232.240.0/24
85.232.243.0/24
195.238.184.0/22
206.252.228.0-206.252.230.255
206.252.236.0/22
206.252.252.0/22
IPv6:
2001:1a68:3::/48
2001:1a68:2c::/48
2001:1a68:34::/48
Signature Algorithm: sha256WithRSAEncryption
95:f8:3c:7f:a7:c1:e4:dc:e5:9e:c3:57:00:25:e5:2c:63:d3:
d2:2d:9c:dd:7f:2d:85:66:af:0e:93:1e:cf:da:b2:ba:f1:28:
17:dd:8d:40:3b:38:02:13:21:f5:d1:9d:d3:06:fd:4a:0e:4d:
9a:26:61:b0:64:48:d0:c1:50:46:81:89:55:94:98:7e:a5:05:
a0:c5:bc:54:e4:1d:3e:2f:fc:b6:8e:53:65:48:f6:cd:65:ec:
b0:14:cf:f4:48:d5:2d:2d:34:98:2f:bc:30:33:31:ec:b1:54:
44:74:7e:d2:f4:de:47:51:45:a8:8b:67:ca:61:9a:5e:44:1d:
86:cd:fc:b2:83:00:e3:65:b1:1a:ec:40:10:41:ed:69:13:fd:
1e:6e:a6:69:cd:cb:e0:1b:53:91:d6:53:05:09:28:90:37:f1:
13:c8:a6:43:43:de:c3:c7:21:44:ac:d6:d3:ba:73:47:0e:58:
32:ba:61:72:97:d7:38:6b:6d:c9:05:47:2f:3b:89:99:80:13:
f2:fc:e2:b6:3c:f6:63:54:8b:e3:80:96:ab:a2:ee:3e:30:9a:
25:a2:27:fd:46:dd:cb:fd:fa:51:2a:b1:70:29:60:0b:a5:35:
9b:81:cb:69:10:da:6e:b6:2e:75:25:39:c3:9f:08:0f:d2:52:
49:37:c9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:52 2024 by rpki-client on console-ams.rpki-client.org