Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/zoIcR7GMrmDC4wCOr6zyWyKrIl0.roa
File: zoIcR7GMrmDC4wCOr6zyWyKrIl0.roa (raw, json)
Hash identifier: rJCJ6aXdCPBc/C0CU6OehwucLEq45s+AI39FXP8+rBo=
Subject key identifier: CE:82:1C:47:B1:8C:AE:60:C2:E3:00:8E:AF:AC:F2:5B:22:AB:22:5D
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018CC56E11A57FF5927C55FD8DEAE1805D9C
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/zoIcR7GMrmDC4wCOr6zyWyKrIl0.roa
Signing time: Mon 01 Jan 2024 14:29:34 +0000
ROA not before: Mon 01 Jan 2024 14:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209272
IP address blocks: 46.161.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 11:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:11:a5:7f:f5:92:7c:55:fd:8d:ea:e1:80:5d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 14:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce821c47b18cae60c2e3008eafacf25b22ab225d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:76:06:6e:ea:86:a4:11:91:47:9b:09:c6:f1:
2c:dd:4a:e9:ba:95:f6:63:92:ba:4b:80:93:5d:ab:
40:3e:6d:ca:cf:9a:d5:38:2e:ef:e9:96:e1:aa:de:
ad:0e:6e:15:8c:02:66:bd:ba:f1:d8:d3:2b:f2:94:
78:14:54:48:d6:dc:b5:75:6b:e9:f9:8e:9f:57:56:
3f:23:c4:8d:81:38:3a:a8:bb:e5:ec:f1:1a:30:75:
2e:11:cb:2b:68:f4:07:1e:fc:86:d3:07:d2:bd:f6:
b2:6a:b9:9b:b0:83:0e:1e:49:78:ee:20:fb:ff:c3:
80:7a:0c:45:3d:ad:3c:1e:61:18:a7:d1:b4:c5:8c:
64:d6:dd:83:1f:08:3d:85:56:de:ae:75:7b:28:2b:
58:1c:59:b7:4b:28:22:4e:8f:eb:90:fc:a3:c7:cd:
05:9c:9b:b6:3c:d7:45:d5:02:65:57:7f:c4:97:15:
c3:11:d0:cd:81:b1:5b:bf:ff:d9:d4:a4:9b:7f:23:
cf:e7:27:b9:ec:25:bb:0d:1b:6d:54:61:01:39:51:
10:d8:8f:bd:83:3b:33:63:0f:26:b5:d8:31:27:ce:
28:31:40:b9:27:c1:c3:a6:ef:d2:17:13:98:a4:c7:
f0:50:94:f3:2b:2b:7c:16:ca:f8:26:00:1f:a0:4c:
24:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:82:1C:47:B1:8C:AE:60:C2:E3:00:8E:AF:AC:F2:5B:22:AB:22:5D
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/zoIcR7GMrmDC4wCOr6zyWyKrIl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.40.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:5d:8e:6b:27:c2:34:f7:16:b0:1b:db:e9:f0:5a:31:8f:bb:
0b:57:fb:ce:d1:86:06:d3:c3:01:5a:aa:f4:99:3d:0a:e4:88:
5b:76:a8:dc:a5:ac:c4:ef:1c:04:99:e1:ce:92:45:a4:66:9d:
b3:56:5b:74:cd:ee:2a:f8:6a:e8:4b:d2:63:a3:7a:e2:6e:1b:
a3:a3:ac:3a:dc:62:80:c2:d7:53:74:c2:fc:46:a0:db:e2:bc:
14:8b:92:5b:a9:be:3a:2f:3d:bf:7f:fb:1a:24:a9:ae:ee:51:
c8:8d:f5:57:3c:20:aa:ce:34:7f:24:f1:61:3b:f8:41:a6:0f:
d5:86:31:73:7c:56:6c:4f:c3:be:02:6e:87:58:49:97:73:a1:
17:3e:18:6a:9e:8b:68:8b:a9:98:06:dd:a6:3f:8e:1d:50:c6:
02:05:71:89:79:e9:85:34:36:5b:78:da:b9:7b:4c:9f:7a:84:
58:d8:33:11:89:b7:41:2b:f7:0b:63:96:56:6a:24:df:24:ef:
4a:21:a7:8c:9c:ad:d8:41:95:71:ff:4d:b9:0a:db:6e:1e:b7:
d8:77:ce:28:f2:8a:1e:ac:22:e6:f8:4c:51:1b:52:69:b8:20:
fc:fe:81:66:91:3c:95:c1:8c:77:5c:e9:2f:6e:0d:3d:f2:9f:
84:10:a3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 17 15:50:41 2024 by rpki-client on console-ams.rpki-client.org