Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/Ts0v5SgKAj7bbm7dJZ1LxO-pHAQ.roa
File: Ts0v5SgKAj7bbm7dJZ1LxO-pHAQ.roa (raw, json)
Hash identifier: Up5YV9oRaWJ/B063dJb9bczNKcMMmwmn7p2PLWzSDXc=
Subject key identifier: 4E:CD:2F:E5:28:0A:02:3E:DB:6E:6E:DD:25:9D:4B:C4:EF:A9:1C:04
Certificate issuer: /CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Certificate serial: 018DAC54E751CF6F26921A52466C1EDA3F85
Authority key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/Ts0v5SgKAj7bbm7dJZ1LxO-pHAQ.roa
Signing time: Thu 15 Feb 2024 10:34:21 +0000
ROA not before: Thu 15 Feb 2024 10:34:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51759
IP address blocks: 46.36.96.0/23 maxlen: 23
46.36.96.0/24 maxlen: 24
46.36.97.0/24 maxlen: 24
46.36.103.0/24 maxlen: 24
46.36.104.0/24 maxlen: 24
46.36.105.0/24 maxlen: 24
46.36.107.0/24 maxlen: 24
46.36.108.0/23 maxlen: 23
46.36.108.0/24 maxlen: 24
46.36.109.0/24 maxlen: 24
46.36.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 12:09:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ac:54:e7:51:cf:6f:26:92:1a:52:46:6c:1e:da:3f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Validity
Not Before: Feb 15 10:34:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ecd2fe5280a023edb6e6edd259d4bc4efa91c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:70:b5:a9:c0:24:39:54:86:96:e0:c3:88:bf:
42:bd:11:71:20:3e:a8:9e:6a:33:3f:de:71:0a:af:
b7:60:9b:b1:7a:4f:ff:c0:1d:b3:9b:f6:e2:a2:60:
9d:a0:03:b9:ba:8a:8e:16:1f:b5:d7:dc:80:78:1e:
c7:e7:32:8f:ff:cd:5b:da:e4:b6:4e:54:08:a9:9f:
af:11:8c:99:1e:91:88:bb:ae:ae:7a:8d:ca:32:a2:
04:ee:93:23:86:dc:a9:66:97:59:98:7b:40:46:5f:
1b:06:52:be:ff:84:27:7c:a2:71:d6:0d:12:eb:53:
47:f3:aa:a0:53:3d:e0:52:9f:54:8a:03:15:fc:9d:
28:74:82:7a:94:e7:fb:ee:ea:e1:f6:3b:c7:db:21:
72:12:38:8b:c6:b2:9f:26:4e:75:92:a7:3b:51:e4:
30:3f:cc:82:b0:e0:c7:48:d3:dc:7f:11:96:31:b6:
96:81:1e:d7:c2:3a:e1:ac:75:f4:84:71:b2:90:86:
81:c5:b6:27:1e:cf:10:25:b0:fa:17:10:2b:2c:57:
70:ab:15:3d:f7:88:04:9b:9e:75:d1:06:06:b5:dd:
c4:0e:67:c3:0b:6a:fb:1d:e1:51:c8:4f:b8:12:4a:
eb:6a:70:39:88:9b:cc:65:82:e4:e4:99:02:f5:cf:
80:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CD:2F:E5:28:0A:02:3E:DB:6E:6E:DD:25:9D:4B:C4:EF:A9:1C:04
X509v3 Authority Key Identifier:
keyid:D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/Ts0v5SgKAj7bbm7dJZ1LxO-pHAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.96.0/23
46.36.103.0-46.36.105.255
46.36.107.0-46.36.110.255
Signature Algorithm: sha256WithRSAEncryption
37:a7:12:6d:a5:85:91:c8:94:bb:0b:f9:cd:47:e6:15:fe:3b:
bb:de:3b:0b:20:db:19:37:cd:2f:ca:93:e8:57:c5:8d:e3:b5:
dd:d6:ff:92:b6:4d:fd:ba:73:83:23:49:48:5a:ce:20:b5:59:
bd:40:e7:ab:1a:88:dd:e7:5e:90:76:ea:04:3a:e5:7c:31:b5:
08:35:1b:b5:08:3a:6f:2b:18:fa:bf:aa:67:b9:62:da:69:ca:
ea:9a:b7:69:0e:e4:2a:b5:cd:5f:cc:64:2e:bc:b2:e6:7b:c2:
83:2c:b6:7f:74:f2:60:51:00:e0:85:e5:44:4e:42:e5:32:41:
1f:8b:22:7d:b4:5d:12:e2:6a:ca:cb:53:a1:89:df:69:2e:35:
e9:13:46:1a:1a:74:a2:70:5a:39:73:ef:0c:56:39:fa:9a:0e:
6b:88:32:e5:66:54:ba:73:1a:aa:48:63:7e:73:51:1e:9e:6e:
75:23:ba:51:4b:59:c2:76:3f:ea:43:26:07:a0:12:17:02:b7:
a9:03:cd:54:03:c6:f9:da:92:27:4d:cb:a8:77:08:59:33:57:
48:96:25:3c:af:41:d6:89:a1:11:8b:24:c1:1a:02:f5:49:17:
79:81:31:24:9c:4e:0c:01:76:ae:7a:14:37:48:e0:c2:4f:8e:
b2:fd:ea:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 17:00:28 2024 by rpki-client on console-ams.rpki-client.org