Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/SI6YiEhoT2HkslY4KUs4XOzqums.roa
File: SI6YiEhoT2HkslY4KUs4XOzqums.roa (raw, json)
Hash identifier: VxBXqRdtGfXMCJ2C7ND14VE9FGHOA3H7GKtKbwLeh98=
Subject key identifier: 48:8E:98:88:48:68:4F:61:E4:B2:56:38:29:4B:38:5C:EC:EA:BA:6B
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018CC86FBA892E5C25B9EDBB50ADB352D871
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/SI6YiEhoT2HkslY4KUs4XOzqums.roa
Signing time: Tue 02 Jan 2024 04:30:14 +0000
ROA not before: Tue 02 Jan 2024 04:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 46.173.240.0/21 maxlen: 21
91.233.0.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 08 Jan 2024 13:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:ba:89:2e:5c:25:b9:ed:bb:50:ad:b3:52:d8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 2 04:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=488e988848684f61e4b25638294b385ceceaba6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:8e:c7:97:1a:f1:6f:f9:93:12:ce:3d:26:
f4:d6:6c:36:54:69:bc:97:f1:6b:e8:c3:aa:36:08:
c5:51:64:76:10:a6:ef:34:72:ab:d1:3a:27:48:04:
57:00:7a:a7:9f:fb:7f:b9:fd:93:90:6b:2b:91:91:
8e:e2:4f:c1:93:f6:8e:41:bb:ae:90:8b:6e:bc:e5:
ce:dc:75:f4:1f:00:6f:0e:d7:e2:ef:e1:98:73:b2:
28:24:29:43:57:bd:df:0e:e8:72:52:43:01:05:46:
8f:5b:4c:73:3d:a6:99:70:90:1e:bb:58:25:ea:08:
70:01:ff:be:77:c3:fe:56:dd:35:6e:d2:de:ed:de:
70:ad:1c:4d:98:4a:b9:fc:cc:28:e5:75:fd:67:42:
43:45:4f:0a:10:8c:18:41:66:9f:5a:51:13:75:8f:
b0:b0:71:11:e6:f0:44:f1:f4:7f:8e:de:5e:40:5b:
bc:4f:91:a8:3f:7e:ca:59:10:45:8c:1e:d0:5a:c2:
25:23:97:47:ff:4c:4a:fc:6a:24:21:6e:d6:68:e7:
ff:bd:9c:a4:fb:db:4d:20:14:af:e5:0d:84:7c:b3:
d5:4c:5b:84:4a:8b:7b:c6:7d:42:1c:fc:f1:b9:6a:
ff:f9:17:41:8e:1b:1b:55:49:87:cd:6a:ec:2e:88:
8f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8E:98:88:48:68:4F:61:E4:B2:56:38:29:4B:38:5C:EC:EA:BA:6B
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/SI6YiEhoT2HkslY4KUs4XOzqums.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.173.240.0/21
91.233.0.0/23
Signature Algorithm: sha256WithRSAEncryption
27:82:de:9e:67:ce:3c:5f:fa:81:7f:fe:0f:36:99:94:85:f3:
71:04:9b:8d:b6:b4:c4:fb:2e:31:3c:d3:fe:fe:df:72:8d:02:
16:de:7e:4a:75:5b:c2:03:7b:fd:88:d5:58:c3:56:ce:1c:50:
c1:92:d5:03:23:13:d2:3e:84:4f:df:93:bf:a4:c1:0e:d2:c3:
37:db:4b:dd:88:aa:dc:f8:78:c7:65:58:8b:26:f4:ea:59:19:
5c:b5:e4:22:68:80:2a:e9:fc:e1:d3:bb:e9:10:e1:77:02:d2:
67:c1:ec:a7:b7:9f:cf:03:a0:c4:96:a6:46:21:97:dd:7a:58:
c7:b4:e3:5b:54:b4:72:09:e0:9d:86:b6:e6:59:f2:9a:1d:a3:
19:69:5a:e4:7f:3b:ab:4d:62:16:53:ad:8a:57:48:7d:5d:7b:
20:68:9c:1e:09:90:8a:a4:b5:0c:ff:5e:59:45:eb:24:57:52:
22:15:be:fc:d1:08:8d:2d:02:fb:8e:69:a0:db:0d:14:21:fe:
12:c2:58:5a:15:6a:9f:d5:06:8b:67:75:71:8d:89:b0:2e:ab:
52:21:d5:8a:ce:47:15:97:82:ae:85:9a:ed:be:ce:98:30:c2:
a8:ba:9b:8d:90:81:8b:54:2d:b0:f8:21:6a:bc:7a:d3:ea:a5:
0f:5a:e9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org