Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/uLiiG3ryxYjRlIs74dFThuSbum8.roa
File: uLiiG3ryxYjRlIs74dFThuSbum8.roa (raw, json)
Hash identifier: zAbKX1N/DzHnwCBkvrYbPJqfWOI4S9/ZKZGUTJ+fmcc=
Subject key identifier: B8:B8:A2:1B:7A:F2:C5:88:D1:94:8B:3B:E1:D1:53:86:E4:9B:BA:6F
Certificate issuer: /CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Certificate serial: 018D793AD7FFD2F7B5FC6AC75D7F42209285
Authority key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/uLiiG3ryxYjRlIs74dFThuSbum8.roa
Signing time: Mon 05 Feb 2024 12:25:15 +0000
ROA not before: Mon 05 Feb 2024 12:25:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198154
IP address blocks: 46.36.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 10:34:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:79:3a:d7:ff:d2:f7:b5:fc:6a:c7:5d:7f:42:20:92:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Validity
Not Before: Feb 5 12:25:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8b8a21b7af2c588d1948b3be1d15386e49bba6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:a4:fa:b9:d8:d8:22:ce:9c:2c:f0:b9:3f:
cc:38:53:bc:d4:58:c2:1b:87:c8:a1:79:43:af:11:
8f:71:fc:ec:84:eb:d5:45:74:b0:fa:a2:5f:fe:43:
d1:9c:fd:d7:a3:2e:1e:c8:02:b5:a8:bb:52:84:5a:
12:cf:94:58:37:2a:b5:e3:68:d8:a0:07:f9:8e:b9:
73:ee:e7:d7:4d:9b:c2:eb:ee:1d:28:24:2f:eb:07:
33:a0:35:1e:a2:9b:4f:7b:0d:a8:19:65:a6:54:bd:
8b:16:ea:fe:c6:1a:4c:20:8b:15:c1:07:e7:00:d2:
c6:70:c4:0b:58:75:e5:7c:dc:55:64:a7:ed:17:e6:
c2:db:96:ee:9f:06:c2:be:c4:8f:72:4c:33:d3:0f:
1f:83:dd:d7:a8:1c:02:2f:85:4d:ca:dd:0e:8b:f2:
db:97:6e:a8:3e:af:0c:81:72:7c:89:e6:17:20:c0:
0b:6e:82:45:41:b3:9b:24:3d:94:35:34:b9:0c:8c:
56:59:77:c6:2b:a1:7a:f0:5c:c4:b5:9b:5a:12:d0:
d7:86:65:40:99:0f:5a:29:ef:68:80:6c:08:a1:04:
3a:9d:d5:d9:15:8e:0f:d9:38:25:73:21:13:45:62:
f1:b4:c1:de:fb:fb:3b:70:9b:dd:2a:e1:14:f7:60:
1d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B8:A2:1B:7A:F2:C5:88:D1:94:8B:3B:E1:D1:53:86:E4:9B:BA:6F
X509v3 Authority Key Identifier:
keyid:D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/uLiiG3ryxYjRlIs74dFThuSbum8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.102.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:08:43:a2:d4:81:ab:f3:3f:f0:a5:77:89:59:2a:b5:fe:75:
ef:1a:61:08:9c:af:89:b5:46:3e:2b:35:ea:87:42:9a:ed:c0:
57:cb:98:14:ee:30:bb:97:56:52:8b:86:c2:20:fe:1d:1a:2c:
fd:ad:ba:02:4d:40:d5:2a:b6:aa:f9:5c:18:1a:c7:24:81:92:
7f:49:f9:19:70:3d:fb:6b:8f:52:3f:4d:82:86:57:34:c6:05:
89:f4:25:e7:5a:ed:40:d9:e7:e6:c5:99:38:27:87:da:0f:9f:
1a:fb:c1:94:eb:fc:98:73:3b:58:df:f4:85:06:04:73:cb:0e:
22:52:c7:db:cd:7b:f4:b7:a6:ac:4e:ef:a0:2d:e5:33:65:c7:
77:94:ce:41:b1:bc:59:36:97:5f:ae:25:58:03:60:e7:cd:96:
d7:05:e5:71:9a:cf:14:66:c8:2b:b8:0d:28:5b:56:18:7b:85:
82:cb:6a:90:75:94:38:a3:97:a1:af:2d:9f:3e:4e:1e:d6:50:
da:02:80:a3:22:d1:ce:0a:9f:53:fe:68:56:ac:39:11:05:ae:
11:12:6f:c2:b1:8b:a4:5b:8d:e6:c2:1b:2f:81:21:05:14:75:
45:a6:23:77:bf:a2:10:aa:1e:74:82:ae:fe:f1:65:d0:f1:59:
d5:65:9c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 15:51:01 2024 by rpki-client on console-fra.rpki-client.org