Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/9yJDNxDMNMBWd0Ro9KSXanB_aMs.roa
File: 9yJDNxDMNMBWd0Ro9KSXanB_aMs.roa (raw, json)
Hash identifier: arlMW1k7boLe42MnGk6+KQd/Ngl+72nVhMl8mcLLtnw=
Subject key identifier: F7:22:43:37:10:CC:34:C0:56:77:44:68:F4:A4:97:6A:70:7F:68:CB
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018AF47AA0FBEB185CB2B8D297375D5A01B7
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/9yJDNxDMNMBWd0Ro9KSXanB_aMs.roa
Signing time: Tue 03 Oct 2023 07:39:51 +0000
ROA not before: Tue 03 Oct 2023 07:39:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44881
IP address blocks: 46.161.12.0/23 maxlen: 23
5.8.56.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
37.139.48.0/23 maxlen: 23
5.188.222.0/24 maxlen: 24
146.185.244.0/23 maxlen: 23
91.243.62.0/23 maxlen: 23
46.161.42.0/24 maxlen: 24
31.184.238.0/23 maxlen: 23
5.8.19.0/24 maxlen: 24
5.188.208.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f4:7a:a0:fb:eb:18:5c:b2:b8:d2:97:37:5d:5a:01:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Oct 3 07:39:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f722433710cc34c056774468f4a4976a707f68cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9f:25:41:74:90:a9:8a:09:23:0e:de:3f:5a:
f0:2e:c3:d7:3c:8a:9d:4c:51:69:0d:8e:e1:ba:22:
43:38:d2:2e:b5:eb:ae:73:37:1d:50:9f:cf:71:75:
ba:43:68:aa:10:dd:a9:7f:8a:4b:5d:b9:07:7d:e5:
9d:b4:82:b1:0c:d5:c9:c6:47:50:2c:a7:b0:0d:43:
de:d9:10:5b:a6:79:91:20:a0:0a:5b:02:70:55:4c:
4d:55:1b:37:01:08:da:4d:fc:50:f4:d1:f7:3f:d7:
9e:30:32:31:c6:7a:f9:4a:4e:ce:a3:73:3a:2e:96:
57:9c:34:7b:59:1b:ab:1b:c0:18:56:6e:3d:44:18:
81:9e:f6:cc:ae:99:ae:41:6a:94:1e:3f:13:24:01:
71:cc:6d:d8:8a:1d:9c:f6:88:8e:ac:c7:cb:f6:c5:
46:d2:55:d7:65:c3:b1:0e:88:5f:be:66:32:ec:b5:
60:5f:cb:e2:d0:ba:f8:a8:b7:72:f6:de:59:3f:ac:
69:d0:77:28:38:7a:e0:41:9c:9c:5a:d8:3a:0b:ba:
f7:5b:e0:44:c4:fd:1a:97:12:a7:7c:f4:3e:44:fe:
2c:44:74:43:8a:93:9c:07:63:8e:0a:fc:31:44:75:
c1:96:14:1f:f5:94:6b:be:42:d0:94:f5:7d:2e:0a:
f4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:22:43:37:10:CC:34:C0:56:77:44:68:F4:A4:97:6A:70:7F:68:CB
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/9yJDNxDMNMBWd0Ro9KSXanB_aMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.19.0/24
5.8.56.0/23
5.188.208.0/23
5.188.222.0/24
31.184.238.0/23
37.139.48.0/23
46.161.12.0/23
46.161.20.0/22
46.161.42.0/24
91.243.62.0/23
146.185.244.0/23
Signature Algorithm: sha256WithRSAEncryption
91:5f:f0:16:f8:69:e6:ad:b7:79:e3:86:fb:bf:fb:38:ee:fc:
4c:52:44:7c:e5:a7:94:68:5a:ef:75:9b:e6:0a:ad:98:94:c7:
0e:7c:ba:fd:56:00:85:8f:0d:02:7a:c9:5e:f2:58:35:3f:b6:
c4:85:e8:af:17:06:21:63:39:b1:15:73:78:d8:73:1f:51:35:
10:d3:3c:21:16:53:f3:ca:9b:ae:68:ae:e6:c6:1d:86:00:7c:
50:8b:5c:2a:ec:00:35:f6:e8:ca:16:37:77:f7:8a:a3:3a:02:
07:8e:f9:51:16:ed:a8:94:13:4d:58:f6:95:f4:87:59:27:65:
0f:5c:b4:ff:20:ac:7c:20:4d:e8:33:e7:c5:d6:1e:5c:2f:85:
24:e6:12:e4:81:8c:65:0b:06:bc:be:f9:2a:71:0b:b8:26:96:
b6:39:51:cd:1a:f9:d2:b8:19:0d:93:10:48:a0:cc:f6:90:f7:
2b:90:15:d0:b8:14:48:eb:8c:1b:3e:53:ef:95:cc:57:5b:b3:
ed:88:31:4c:bb:b1:5d:0a:7e:4a:cd:44:72:e9:81:23:dd:f7:
7f:93:2c:2b:5c:5d:9c:88:17:0c:0a:50:26:c8:1b:e3:2c:89:
50:cf:87:9f:7b:37:fb:24:8b:a2:bd:a3:7b:47:fa:e6:f1:f0:
b2:5e:72:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 5 09:40:43 2023 by rpki-client on console-fra.rpki-client.org