Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/CkVMicAdX5a69aoMeb_WkhKf-S0.roa
File: CkVMicAdX5a69aoMeb_WkhKf-S0.roa (raw, json)
Hash identifier: IcWevGtG1lqqhgqd6JxwzsJ41pGHMsl8H0Ziz0Lx/j8=
Subject key identifier: 0A:45:4C:89:C0:1D:5F:96:BA:F5:AA:0C:79:BF:D6:92:12:9F:F9:2D
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01856F42CD961E774BF415CFD4341F172E8C
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/CkVMicAdX5a69aoMeb_WkhKf-S0.roa
Signing time: Sun 01 Jan 2023 21:35:27 +0000
ROA not before: Sun 01 Jan 2023 21:35:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12660
IP address blocks: 77.237.77.0/24 maxlen: 24
46.209.40.0/22 maxlen: 22
46.209.40.0/23 maxlen: 23
46.209.42.0/23 maxlen: 23
46.209.80.0/22 maxlen: 22
46.209.80.0/21 maxlen: 21
46.209.84.0/22 maxlen: 22
46.209.0.0/24 maxlen: 24
46.209.1.0/24 maxlen: 24
46.209.0.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:cd:96:1e:77:4b:f4:15:cf:d4:34:1f:17:2e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a454c89c01d5f96baf5aa0c79bfd692129ff92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fd:42:ab:50:b1:9d:26:6f:20:93:8f:c0:40:
27:f2:f4:4e:2d:f8:af:18:6f:22:97:8f:5c:6e:4a:
7d:9e:c7:88:db:2b:09:7d:f6:b5:31:da:a8:70:4a:
4b:60:95:7c:32:5a:93:2f:48:94:cd:ae:ec:c9:7c:
ee:f0:ba:ab:bc:39:38:c8:c7:74:3e:c3:cb:1b:cb:
80:06:46:9a:8e:d8:f9:83:b9:fb:e3:f1:fa:a5:69:
17:90:17:7b:0a:99:f9:9e:e3:b2:19:a1:a0:18:cc:
ba:43:35:60:1d:f4:83:c9:59:6e:f8:5b:31:76:d2:
6e:81:83:9c:9e:e1:d9:f2:ad:2b:9e:7d:c0:cf:8b:
b7:79:35:9f:c2:04:8c:d4:52:11:67:e6:62:26:28:
1f:8d:28:fc:6b:aa:78:ef:cf:39:61:28:d7:9d:cc:
8c:e9:0c:76:c3:4d:99:01:00:c7:28:27:6c:bd:b5:
34:fc:d4:05:e7:78:8f:2a:a1:38:9b:6c:f1:15:4e:
da:21:75:c3:ef:17:ac:46:e6:4f:cb:6c:5f:d4:d4:
05:c9:1e:16:5c:53:8a:22:3a:87:99:95:17:4f:da:
eb:d2:aa:ca:12:7c:52:11:b9:79:bc:c0:5a:7e:d0:
7e:22:84:df:6d:af:39:a8:79:1e:ff:50:d2:bc:d7:
35:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:45:4C:89:C0:1D:5F:96:BA:F5:AA:0C:79:BF:D6:92:12:9F:F9:2D
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/CkVMicAdX5a69aoMeb_WkhKf-S0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.209.0.0/23
46.209.40.0/22
46.209.80.0/21
77.237.77.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:a2:12:b1:1d:32:88:f6:90:d1:3d:81:44:71:3d:48:00:39:
e8:f1:03:d1:ee:ef:4b:a6:4d:ec:c0:ee:7a:d7:65:8b:de:2d:
f3:94:43:31:f9:df:63:79:d9:39:f5:cd:96:ba:b1:dc:80:e8:
e4:cd:47:d7:37:ef:79:82:c5:c5:d9:8d:10:a1:9e:32:b7:b1:
0a:ce:a1:5d:a7:e3:d3:c6:18:8b:fb:ad:d6:a4:3b:b1:4a:ef:
5a:62:dd:7f:82:83:44:38:03:dc:c9:65:18:e7:1a:d5:74:31:
cd:63:48:20:65:10:24:4b:ae:4b:60:7d:c4:3d:8a:69:f6:bb:
db:32:e3:47:2a:d2:ab:44:78:22:a5:35:3d:e8:0a:52:f8:d0:
2d:31:d5:44:cf:c4:eb:11:e2:29:f5:06:e7:24:1f:bf:4e:c2:
0a:61:ec:97:50:85:87:29:bf:4b:e6:3d:fa:fd:17:b9:00:d2:
61:05:3a:72:3c:4c:e5:f5:be:d5:ef:fc:8e:23:49:d7:e2:af:
86:47:3e:78:87:51:b8:70:4a:0b:64:50:e4:ee:37:65:ec:b7:
ef:40:8b:5f:02:98:3d:4d:43:7d:0a:10:06:ff:05:12:6a:de:
1a:b4:b3:47:54:df:89:fb:bc:04:77:10:5c:35:e0:d6:74:52:
73:b0:bb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:20 2024 by rpki-client on console-ams.rpki-client.org