Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/TCceXEIJERZ9cqAankafU9m_1Dw.roa
File: TCceXEIJERZ9cqAankafU9m_1Dw.roa (raw, json)
Hash identifier: vSHIhmkGIBNlumlu/4dDhYCwS36YH1NUiUCcW05MfGc=
Subject key identifier: 4C:27:1E:5C:42:09:11:16:7D:72:A0:1A:9E:46:9F:53:D9:BF:D4:3C
Certificate issuer: /CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Certificate serial: 0191D62DED2D8F6173270CF84F1EA14026AD
Authority key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/TCceXEIJERZ9cqAankafU9m_1Dw.roa
Signing time: Mon 09 Sep 2024 09:46:59 +0000
ROA not before: Mon 09 Sep 2024 09:46:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214526
IP address blocks: 46.36.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 07:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d6:2d:ed:2d:8f:61:73:27:0c:f8:4f:1e:a1:40:26:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Validity
Not Before: Sep 9 09:46:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c271e5c420911167d72a01a9e469f53d9bfd43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3c:63:01:d1:fa:bd:4f:84:24:b1:83:f8:fa:
e8:17:23:eb:2e:16:bd:49:38:7e:69:83:8d:99:09:
27:ef:d5:14:5e:5e:a6:16:1c:88:b1:24:b2:d3:27:
9c:ab:09:02:ab:d8:32:43:ff:9a:4f:65:1d:cf:96:
c1:f0:24:4b:05:c8:db:d9:28:ee:6f:0f:03:76:e2:
b9:ce:aa:62:ed:fe:d7:f4:1f:cd:2d:d9:ba:62:59:
e8:46:b4:d4:0e:aa:0a:dc:75:b6:8a:3b:be:77:b1:
77:b6:54:76:08:22:39:4e:d4:fa:c2:e7:56:bc:b4:
aa:63:68:64:fc:fa:23:ae:d8:3f:1f:56:3e:13:e1:
c3:a4:a2:35:50:ac:b9:b4:19:eb:ac:e4:2e:60:a4:
e0:23:08:f2:41:36:12:21:68:c8:94:8e:4f:55:f5:
d3:24:36:6b:f6:de:f4:b6:09:bb:2c:3d:98:92:7b:
dc:55:95:db:d4:b8:1b:df:d4:34:d8:90:20:19:3b:
5e:20:b0:0f:74:70:2e:8a:b3:1a:11:3e:6e:59:21:
9d:19:3d:38:d5:c0:0a:0e:f6:05:62:82:e1:da:d6:
89:1b:68:4f:19:56:ba:2e:94:ed:2b:39:e0:3a:df:
fc:9b:75:78:25:79:28:ea:58:76:d9:84:92:00:65:
80:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:27:1E:5C:42:09:11:16:7D:72:A0:1A:9E:46:9F:53:D9:BF:D4:3C
X509v3 Authority Key Identifier:
keyid:D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/TCceXEIJERZ9cqAankafU9m_1Dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.101.0/24
Signature Algorithm: sha256WithRSAEncryption
47:f1:be:8a:52:0b:cd:f6:73:f3:5f:3b:a1:44:59:9a:50:79:
99:8d:95:dc:ee:79:90:d1:bb:1c:54:e4:13:47:46:86:88:60:
7e:fe:c0:65:2d:07:5e:29:b2:90:81:18:bb:aa:89:f6:bf:6f:
0c:e7:c2:6a:d5:2b:aa:71:40:1d:96:ec:48:6b:46:73:5e:38:
3f:c9:0b:1b:28:d1:0a:c8:ee:f3:d9:53:37:c1:c4:07:48:52:
74:bd:7a:d1:26:04:78:6c:d5:0b:db:bd:af:01:86:53:f2:bb:
6f:f4:9d:ac:95:e6:ad:4b:72:f2:75:68:71:1b:a6:f6:9c:01:
d0:21:40:dc:7f:7b:7d:7e:57:08:58:6e:1a:94:2a:e4:7a:f0:
d8:d8:eb:16:1b:60:0a:06:d8:7a:a9:cb:74:69:0b:17:11:ba:
c1:aa:68:85:65:cb:57:f2:77:54:7e:bb:ea:1c:1f:4f:75:cc:
a2:84:41:a3:fc:5b:65:07:24:67:60:8f:fd:5f:3d:29:46:ae:
bf:f9:6b:59:46:09:4d:56:15:a5:6a:ab:c8:ac:6a:e2:2e:30:
b6:54:43:53:3f:d9:fd:c6:83:d7:6d:fd:88:2d:39:02:40:ce:
75:5e:36:2e:72:08:33:54:59:7c:73:44:35:d9:bd:49:7d:1a:
65:93:ed:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 09:16:10 2024 by rpki-client on console-fra.rpki-client.org