Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/K93BreZZhTX-NvZU7PjOOFCzBOI.roa
File: K93BreZZhTX-NvZU7PjOOFCzBOI.roa (raw, json)
Hash identifier: dcBTIUR4KQRNHk1i+0VSZeudLgaqZ8LX9KFqRyDVZqs=
Subject key identifier: 2B:DD:C1:AD:E6:59:85:35:FE:36:F6:54:EC:F8:CE:38:50:B3:04:E2
Certificate issuer: /CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Certificate serial: 018D9C56915E28713D764D92A5B4972C4DCF
Authority key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/K93BreZZhTX-NvZU7PjOOFCzBOI.roa
Signing time: Mon 12 Feb 2024 08:02:15 +0000
ROA not before: Mon 12 Feb 2024 08:02:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51759
IP address blocks: 46.36.96.0/23 maxlen: 23
46.36.96.0/24 maxlen: 24
46.36.97.0/24 maxlen: 24
46.36.100.0/24 maxlen: 24
46.36.103.0/24 maxlen: 24
46.36.104.0/22 maxlen: 22
46.36.104.0/24 maxlen: 24
46.36.105.0/24 maxlen: 24
46.36.107.0/24 maxlen: 24
46.36.108.0/23 maxlen: 23
46.36.108.0/24 maxlen: 24
46.36.109.0/24 maxlen: 24
46.36.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 13:08:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9c:56:91:5e:28:71:3d:76:4d:92:a5:b4:97:2c:4d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Validity
Not Before: Feb 12 08:02:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bddc1ade6598535fe36f654ecf8ce3850b304e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:af:73:06:65:4e:eb:49:7d:85:82:34:ab:30:
36:a7:20:a6:d4:52:37:c4:88:a7:09:be:34:c2:f2:
33:41:8b:ea:a6:b6:7d:95:24:58:1e:80:81:2d:f7:
d1:14:ff:fb:ee:1f:38:32:6c:9f:9e:18:ab:46:06:
62:c8:06:dd:b5:76:00:59:11:b8:08:ea:49:47:e8:
13:63:5b:3d:7b:d0:4b:e9:75:32:b6:d5:41:09:ae:
6f:85:1e:9a:d0:57:e7:4f:2d:01:77:67:23:ca:da:
32:81:fe:de:5b:fb:47:6f:64:b6:bb:fe:63:a4:2d:
16:4c:49:16:b5:78:e3:e3:e4:83:08:00:e4:e4:0d:
23:0a:74:26:5e:67:6c:d2:91:5e:c9:9e:eb:18:3e:
12:b0:53:2b:9d:64:89:9e:d7:04:79:8c:fa:27:33:
35:15:10:84:3a:eb:1f:ce:fc:6d:b0:85:0b:91:c3:
97:94:47:f5:1e:db:74:2d:f3:56:d1:9e:92:64:c2:
af:bd:bb:77:2e:00:10:72:c4:c5:ec:7e:a8:54:7d:
90:85:32:b2:9e:c4:8e:a1:e8:27:a1:b9:b2:31:4f:
ff:c4:26:ee:29:a5:bc:e5:6e:ba:6a:8a:c5:8c:3a:
bf:9c:01:e1:bd:f0:27:85:45:ef:9c:a2:e5:35:94:
9d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DD:C1:AD:E6:59:85:35:FE:36:F6:54:EC:F8:CE:38:50:B3:04:E2
X509v3 Authority Key Identifier:
keyid:D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/K93BreZZhTX-NvZU7PjOOFCzBOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.96.0/23
46.36.100.0/24
46.36.103.0-46.36.110.255
Signature Algorithm: sha256WithRSAEncryption
4c:17:fd:73:fb:72:49:b4:ba:4b:52:0c:02:03:fb:2a:23:48:
1c:bb:f7:62:b7:3a:f4:09:82:01:a6:0b:b9:1d:47:5a:4f:9a:
bf:82:8b:8d:0b:46:58:be:57:c9:2f:a1:a1:02:bc:99:fc:7d:
52:92:81:f4:69:de:c3:3b:6e:4d:db:7d:30:5a:dc:31:47:93:
57:67:ae:4d:07:cd:90:ce:e9:30:0a:6c:39:e2:62:09:82:61:
6f:f2:d9:8c:0d:f9:e7:88:9b:15:76:1e:c5:95:45:f8:4d:51:
95:d3:37:82:1e:1e:b1:31:65:c4:7a:d2:11:c9:03:9f:8c:ca:
73:23:f8:a2:de:bf:66:f0:27:07:d1:35:4e:10:f2:d3:6a:7f:
e9:c9:b9:c3:ec:47:f8:03:c9:d2:0c:f4:7e:15:dd:6d:d3:0d:
90:ff:05:24:b5:d5:71:1f:93:0f:54:37:cb:fa:06:2c:a2:91:
3c:82:56:33:9e:2c:f8:5a:ac:b8:f5:4f:9c:99:0f:0a:81:ee:
75:b5:b6:bd:bf:65:2d:e2:33:88:fe:ad:03:1d:d9:4d:89:ed:
39:18:07:29:5f:dd:2e:26:82:cd:44:34:35:81:3b:58:77:b8:
e7:75:e7:ee:d8:2f:0c:70:7d:c9:42:fb:3a:9d:f1:0d:25:58:
32:af:6e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 18:24:45 2024 by rpki-client on console-ams.rpki-client.org