Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/46nv2QxO-fSWiM31WcWDxyk9P7A.roa
File: 46nv2QxO-fSWiM31WcWDxyk9P7A.roa (raw, json)
Hash identifier: IKMwfLah5NCCZA34fepPP7X58Chisvg1JMtJeEF/OKo=
Subject key identifier: E3:A9:EF:D9:0C:4E:F9:F4:96:88:CD:F5:59:C5:83:C7:29:3D:3F:B0
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 01856F2FCF7A9D01444BF787208105C9024C
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/46nv2QxO-fSWiM31WcWDxyk9P7A.roa
Signing time: Sun 01 Jan 2023 21:14:42 +0000
ROA not before: Sun 01 Jan 2023 21:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 138.12.128.0/17 maxlen: 24
37.98.232.0/21 maxlen: 24
163.120.128.0/17 maxlen: 24
148.139.0.0/16 maxlen: 24
2a04:37c0::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:cf:7a:9d:01:44:4b:f7:87:20:81:05:c9:02:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Jan 1 21:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3a9efd90c4ef9f49688cdf559c583c7293d3fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f3:c6:30:77:c3:60:2c:9e:cc:92:84:eb:66:
5c:5d:0b:ae:2b:9c:0a:6f:3d:40:9e:1c:b0:aa:cc:
e3:61:60:c6:9a:10:31:05:3a:d8:51:fa:90:38:78:
b8:35:4c:59:2f:55:0e:7f:73:0d:10:41:88:95:59:
ae:08:32:d8:c0:ae:5d:28:39:87:c8:0c:6e:3a:ec:
74:06:1d:93:bd:e7:cc:09:e6:45:9d:8f:a1:57:86:
d6:58:f7:43:fc:31:6d:5b:12:28:a1:e3:c4:1f:4b:
73:4b:1f:e5:04:8c:20:71:c9:ea:ab:c2:b8:45:30:
70:2e:9c:12:93:80:92:a7:8b:59:4b:44:27:7c:ab:
a3:23:c1:eb:b6:88:ed:42:2f:40:99:69:18:e6:29:
13:a0:62:39:96:48:79:a0:cf:44:d2:f6:2f:cb:99:
c7:64:8d:02:2c:69:dc:17:b1:42:f5:b3:0d:7d:8a:
62:4e:09:df:33:dd:a9:09:9b:20:36:01:15:41:0e:
97:e4:66:34:00:7a:14:b2:d0:c6:6a:2d:61:d5:7b:
47:2a:90:12:0a:02:44:de:f7:39:34:06:bd:40:fc:
ce:6b:58:e6:ff:90:b5:a0:f6:15:66:38:20:95:27:
6e:48:2b:63:47:3d:cd:24:2a:47:7c:06:12:b3:9a:
c9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A9:EF:D9:0C:4E:F9:F4:96:88:CD:F5:59:C5:83:C7:29:3D:3F:B0
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/46nv2QxO-fSWiM31WcWDxyk9P7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.232.0/21
138.12.128.0/17
148.139.0.0/16
163.120.128.0/17
IPv6:
2a04:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
97:5b:10:e8:8b:0f:d1:97:c2:ca:6b:69:fb:c2:76:67:3b:b1:
ce:f9:c9:4c:0b:04:0c:3d:cd:48:92:86:65:b3:30:cc:c6:91:
6c:fc:60:fe:e4:af:89:ff:cb:67:63:11:5d:0d:30:b4:67:43:
07:c1:0d:d0:60:d4:b0:6a:04:d4:05:57:50:4a:b7:03:b1:47:
bd:97:42:f4:9e:18:ed:fe:b5:fb:e2:be:31:d4:af:5c:fa:b4:
8b:e8:5f:87:ca:de:14:04:a0:5d:62:6f:cf:18:04:c0:4a:22:
48:b8:09:51:d3:e9:2c:7b:ea:8d:29:b0:fd:d8:46:f4:44:5e:
c3:51:4c:b7:35:54:74:ba:d8:35:a7:62:02:c3:d5:ab:39:90:
7b:fc:cf:49:7c:d0:cf:ff:e5:be:fc:1b:e7:93:aa:09:5e:19:
32:93:ba:c9:2d:30:ce:c5:f8:c2:be:69:cf:3d:9a:0d:3a:78:
92:e3:18:1b:13:0a:db:72:d7:35:a8:03:b5:df:e3:04:2a:8c:
11:f4:76:69:c5:3b:f4:af:f8:58:87:29:ee:dd:c1:56:51:9e:
aa:16:45:25:0a:dd:cb:5c:60:ba:25:a9:89:9a:1b:20:cf:56:
da:d1:1f:6f:11:ff:94:70:d8:59:8f:bc:cd:72:10:38:16:ca:
ed:ac:6b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 4 12:24:48 2023 by rpki-client on console-fra.rpki-client.org