Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/p4-FKrSvfsXtkHwxGvbSyqjgc2Q.roa
File: p4-FKrSvfsXtkHwxGvbSyqjgc2Q.roa (raw, json)
Hash identifier: Jx1AN8mtD+ZzxaRzNdlKcwEmq91N98EmyM8J4F1+m5s=
Subject key identifier: A7:8F:85:2A:B4:AF:7E:C5:ED:90:7C:31:1A:F6:D2:CA:A8:E0:73:64
Certificate issuer: /CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Certificate serial: 018FAF1ECF128CA2F9C65AF68637AA6FF0EF
Authority key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/p4-FKrSvfsXtkHwxGvbSyqjgc2Q.roa
Signing time: Sat 25 May 2024 09:39:42 +0000
ROA not before: Sat 25 May 2024 09:39:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51759
IP address blocks: 46.36.96.0/24 maxlen: 24
46.36.104.0/24 maxlen: 24
46.36.105.0/24 maxlen: 24
46.36.107.0/24 maxlen: 24
46.36.108.0/24 maxlen: 24
46.36.109.0/24 maxlen: 24
46.36.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Sep 2024 10:05:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:af:1e:cf:12:8c:a2:f9:c6:5a:f6:86:37:aa:6f:f0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Validity
Not Before: May 25 09:39:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a78f852ab4af7ec5ed907c311af6d2caa8e07364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:73:ad:2a:7b:af:24:f7:2d:b4:c2:c5:b1:f7:
37:6c:9f:82:7d:16:73:36:d3:d9:8d:14:c2:eb:e7:
aa:6b:23:16:04:01:fc:6d:a1:96:d8:b8:56:99:38:
b0:04:10:f0:58:4f:12:0a:dd:26:51:8c:1c:61:8a:
27:3f:f3:47:63:36:9c:52:20:f7:dd:74:2d:8a:d1:
d6:ab:ad:23:95:81:9f:86:d2:d1:8e:d6:ef:5c:74:
20:9c:df:6c:39:c3:c5:5a:39:63:e4:8d:cf:b9:5b:
e8:d9:3a:5f:6d:d8:a7:d6:92:7c:e8:97:a5:49:37:
64:25:c3:5a:bd:54:03:15:ac:67:06:2b:b4:de:9d:
22:64:b6:14:0f:6c:51:88:22:df:88:93:55:72:f9:
49:32:a4:5d:fd:cb:67:d2:9c:1f:63:a4:b3:59:9b:
6a:d3:b8:8a:da:07:26:45:59:f3:64:77:4e:99:dd:
50:c2:b8:e3:98:b9:7d:8b:f6:bf:f4:b0:af:9d:2d:
2a:c0:b0:f1:a5:e8:79:67:45:c7:e1:27:0f:15:84:
35:69:65:dd:bf:15:c9:45:f5:89:eb:52:a1:7d:b2:
5a:b9:82:6d:a5:eb:2e:12:40:fa:5d:ce:cd:9e:37:
bc:46:2e:ba:30:a9:ab:23:81:50:f2:b8:4b:fc:a0:
72:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8F:85:2A:B4:AF:7E:C5:ED:90:7C:31:1A:F6:D2:CA:A8:E0:73:64
X509v3 Authority Key Identifier:
keyid:D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/p4-FKrSvfsXtkHwxGvbSyqjgc2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.96.0/24
46.36.104.0/23
46.36.107.0-46.36.110.255
Signature Algorithm: sha256WithRSAEncryption
58:05:be:50:cc:88:d0:0f:e7:ac:d6:3d:77:fa:18:68:d8:ea:
82:52:05:56:29:92:8c:06:52:27:4c:c1:6b:be:25:95:ff:52:
65:19:fa:62:ea:db:db:db:27:2a:b3:99:ec:16:0b:95:f1:5a:
2d:33:7f:97:f6:9c:65:d0:19:39:cf:1a:f8:09:c7:21:34:2d:
4d:00:a0:b6:f7:df:f7:4e:de:39:de:93:d4:ef:08:ad:5a:b9:
ab:41:87:c0:b3:6a:a5:92:1b:d2:4b:6d:0e:32:6a:6f:b4:83:
6d:53:ea:a5:bc:ca:04:e7:f6:1f:c4:13:f5:9e:af:a2:02:29:
c9:77:4f:b7:35:e2:fd:12:17:b4:b7:d8:0b:a9:85:1e:a9:c0:
66:f1:66:e7:6c:fc:5e:9f:c6:e5:72:5e:80:e2:ab:f0:5b:b8:
66:c9:47:5d:bc:16:27:89:53:cb:39:1f:8b:ee:d5:51:74:7a:
18:4a:95:bf:0c:aa:63:e3:40:a5:c2:1a:52:7b:77:17:32:4c:
46:e9:1f:c0:e5:aa:20:cf:95:f3:2c:1a:f7:52:26:18:11:0f:
17:e9:d6:c6:d7:dc:0a:1b:90:50:07:5e:76:6b:d5:ae:31:5b:
13:fb:f6:f2:35:9f:40:61:18:37:ad:58:ed:e4:71:dc:66:34:
e2:88:7e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 12:46:10 2024 by rpki-client on console-fra.rpki-client.org