Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/b-XlGwEL6etBn-JeLTBIFtnFYXA.roa
File: b-XlGwEL6etBn-JeLTBIFtnFYXA.roa (raw, json)
Hash identifier: iWmwd/OU32VFjpdoWNxku3qB4A0pbFuMj4stvVRxgz0=
Subject key identifier: 6F:E5:E5:1B:01:0B:E9:EB:41:9F:E2:5E:2D:30:48:16:D9:C5:61:70
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01906FFA153A55224A0E84E80F1F6E91FD79
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/b-XlGwEL6etBn-JeLTBIFtnFYXA.roa
Signing time: Mon 01 Jul 2024 20:26:18 +0000
ROA not before: Mon 01 Jul 2024 20:26:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 212.46.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jul 2024 16:21:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6f:fa:15:3a:55:22:4a:0e:84:e8:0f:1f:6e:91:fd:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jul 1 20:26:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fe5e51b010be9eb419fe25e2d304816d9c56170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a2:3e:05:af:8d:29:15:0b:e2:6d:e0:e2:58:
f5:44:92:c9:83:60:2b:2a:1b:77:3a:3f:06:df:9a:
24:cf:ae:cd:09:f1:ea:43:05:df:b0:6b:cc:c6:83:
2f:81:54:40:6e:55:c7:fa:b3:2d:1d:17:f6:92:c8:
f2:e2:e7:b0:b8:c6:eb:e4:40:89:f4:1f:13:13:16:
8a:fb:84:52:cb:9e:b6:3b:12:9c:fb:df:00:2e:60:
57:df:11:3a:dd:a0:b2:cf:56:e4:f1:52:7d:a2:78:
42:e8:8d:43:86:b1:52:b9:18:6c:45:f0:b7:9a:ee:
e5:9f:4c:4e:ea:88:30:27:c9:e8:f6:f2:2f:3d:fc:
e7:98:f8:c0:de:0d:c1:e4:6f:32:75:5d:8e:82:b4:
ff:d0:bd:e9:54:5e:5a:ee:e0:2d:b8:c5:dd:57:85:
df:1e:52:16:59:d0:0a:66:0c:53:a7:14:dd:43:db:
84:5e:e7:fb:9b:e5:de:4a:0e:2a:e9:48:e7:f4:fa:
36:ac:24:9b:4d:06:96:fc:b7:7f:8b:e4:c7:c5:9d:
c8:b2:87:04:94:5d:ed:fe:c5:eb:9f:84:b3:49:29:
2d:eb:80:9f:4d:2f:07:3b:c6:7e:5c:27:8f:b4:16:
f7:54:33:50:e0:44:88:28:cb:27:14:00:d7:e8:75:
11:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E5:E5:1B:01:0B:E9:EB:41:9F:E2:5E:2D:30:48:16:D9:C5:61:70
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/b-XlGwEL6etBn-JeLTBIFtnFYXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:e4:70:bc:8c:93:c9:b8:b2:b9:07:43:92:b0:47:dd:79:db:
41:a2:a8:75:ea:b4:16:48:80:5c:69:cc:2c:79:7b:45:a0:c9:
38:c7:3e:77:05:b8:b0:f0:d2:61:b7:77:29:f2:e7:61:17:b8:
f2:9d:92:78:99:b9:03:2d:60:13:ff:6d:c7:22:cf:7d:d8:7c:
a0:27:58:2e:78:2c:61:a8:d1:49:2f:c6:c2:3f:53:0d:61:a3:
90:52:a6:43:b2:da:1f:a3:b0:af:33:5f:c5:31:01:a2:6d:e3:
2a:ed:fb:37:84:fb:9b:e3:ed:f8:dc:8f:95:dc:c5:51:9e:40:
f5:d5:4a:7a:e2:43:50:d9:f6:97:fd:f5:a7:8b:75:96:0c:a2:
a9:f5:f7:15:7f:ff:ca:00:03:db:94:e2:a5:68:a3:f8:96:03:
0e:c3:c8:b5:d8:8d:62:47:27:1f:93:26:b7:2f:6c:2f:62:03:
32:b7:2d:1c:30:82:71:f7:9d:6e:4d:b8:0e:81:6d:d1:a7:6d:
13:7f:50:48:45:bc:68:a6:89:a0:47:90:29:62:d5:a0:9f:39:
52:94:87:3c:78:7f:2c:36:d2:aa:40:44:9f:38:8c:3a:19:cf:
a7:f2:64:b2:c0:78:83:35:8e:68:42:f0:72:76:07:e3:cb:24:
bf:03:51:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 17:49:27 2024 by rpki-client on console-fra.rpki-client.org