Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/1-aeHha_Vkr1dKG2T8U7DghxLqgs.roa
File: 1-aeHha_Vkr1dKG2T8U7DghxLqgs.roa (raw, json)
Hash identifier: BIsYFFxO48YE3gUut32TjME24eTNjyY41cBVFdsRIzs=
Subject key identifier: F9:A7:87:85:AF:D5:92:BD:5D:28:6D:93:F1:4E:C3:82:1C:4B:AA:0B
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0191B769FF0E522719FAA20B9D2A30798F20
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/1-aeHha_Vkr1dKG2T8U7DghxLqgs.roa
Signing time: Tue 03 Sep 2024 10:24:22 +0000
ROA not before: Tue 03 Sep 2024 10:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63023
IP address blocks: 5.8.18.0/24 maxlen: 24
46.161.0.0/24 maxlen: 24
146.185.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Oct 2024 08:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b7:69:ff:0e:52:27:19:fa:a2:0b:9d:2a:30:79:8f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Sep 3 10:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9a78785afd592bd5d286d93f14ec3821c4baa0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d8:67:70:ae:95:26:3f:bf:af:06:3d:32:bd:
89:74:2b:7f:f6:93:18:2e:e8:94:fc:3e:02:0a:56:
8b:2b:07:c0:e3:2d:11:18:03:df:19:52:cd:e0:93:
9b:e0:61:6c:30:27:3f:a3:84:3f:81:d5:f8:97:8e:
b8:7d:18:1b:33:af:f4:b0:6d:31:d2:c0:48:07:7b:
2a:82:f3:5c:e8:51:ac:ea:cf:cd:c9:0f:de:aa:fe:
34:88:fb:8d:44:6c:81:e5:37:ae:c5:78:42:d5:d7:
50:3c:53:36:4b:4f:22:ac:ac:f1:ee:81:9a:e3:30:
7d:15:2e:b9:84:59:fe:b8:05:f9:40:71:c4:43:7c:
fe:a0:43:dc:01:19:8f:e7:46:74:2a:b2:1c:97:e9:
a4:50:23:34:b7:61:8d:d4:9e:2d:60:ee:42:7f:90:
2b:a2:e9:54:84:19:4b:5f:f6:fc:49:1b:49:23:9d:
f7:93:a6:e2:8a:43:db:53:1b:96:42:03:f8:33:53:
27:8e:9a:9b:f8:cf:de:be:07:0c:9e:11:85:65:2f:
e3:ed:08:70:5d:ea:70:84:ae:06:68:73:c1:62:87:
6c:b3:0f:67:ee:5e:27:e5:dc:e7:0c:0c:bf:e9:74:
e4:cf:0e:24:14:b2:ee:f2:66:78:31:10:c9:2b:9f:
3b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A7:87:85:AF:D5:92:BD:5D:28:6D:93:F1:4E:C3:82:1C:4B:AA:0B
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/1-aeHha_Vkr1dKG2T8U7DghxLqgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.18.0/24
46.161.0.0/24
146.185.233.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:6c:47:52:08:ae:68:76:94:3e:f5:a6:36:41:f8:4f:41:3d:
c4:73:5a:93:1a:15:ac:98:3c:51:ec:0a:64:93:6b:d3:ec:cb:
d3:41:07:ee:01:7b:75:dd:53:4f:2a:3e:f4:2c:a7:aa:5a:09:
33:ab:49:8c:61:3e:10:1e:a6:f1:55:cc:28:03:51:43:73:79:
57:2f:90:f7:50:e1:ae:92:70:f8:b0:95:45:75:0c:ce:7d:72:
7c:94:a4:8a:df:83:e2:e0:93:f4:e2:56:c4:c5:de:0f:f6:60:
8f:c1:ba:31:d0:95:1c:8a:d9:b7:39:be:38:e3:f4:8f:9a:b9:
b3:e7:54:00:98:7c:17:b3:6e:7b:9b:f1:6b:54:3d:09:76:e4:
f4:e2:00:1b:7e:99:c0:28:06:ff:0c:2c:e2:38:1d:47:59:5c:
2c:ad:6d:14:cc:29:dd:16:4b:22:4f:bf:99:83:09:26:78:0f:
c6:d3:92:11:c7:fa:59:30:a0:37:5a:91:d4:6b:a7:a0:1d:62:
94:a6:41:8c:05:63:f3:8a:e6:f7:80:df:5b:e7:81:3a:37:3a:
95:92:f8:b2:5c:73:2e:f5:eb:22:a4:81:ab:38:7d:b0:d4:e7:
65:7d:12:bd:85:40:39:dd:89:9a:ea:f1:77:b0:4b:6e:a4:61:
f5:1e:db:6c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Oct 11 13:27:56 2024 by rpki-client on console-ams.rpki-client.org