Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/m5hhWRxOxuKk6rK87jAUVPYgurc.roa
File: m5hhWRxOxuKk6rK87jAUVPYgurc.roa (raw, json)
Hash identifier: hONctj9qW0CJ6FjqQyvyRlARJJb/Q7PA/KDMroPYUyo=
Subject key identifier: 9B:98:61:59:1C:4E:C6:E2:A4:EA:B2:BC:EE:30:14:54:F6:20:BA:B7
Certificate issuer: /CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Certificate serial: 0190793A8D56106F54B7EFC47EBF0E9C45A2
Authority key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/m5hhWRxOxuKk6rK87jAUVPYgurc.roa
Signing time: Wed 03 Jul 2024 15:33:18 +0000
ROA not before: Wed 03 Jul 2024 15:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215304
IP address blocks: 185.101.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Aug 2024 12:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:79:3a:8d:56:10:6f:54:b7:ef:c4:7e:bf:0e:9c:45:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Validity
Not Before: Jul 3 15:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b9861591c4ec6e2a4eab2bcee301454f620bab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:d3:cb:6a:53:7a:51:e3:90:75:d2:91:96:
c0:17:20:15:49:e0:b5:63:3d:33:b1:bf:63:8b:70:
b1:37:58:28:43:82:41:bb:69:cc:c4:79:ee:7d:c4:
c8:1e:d4:74:a5:cf:0e:db:16:63:a5:35:79:5c:e5:
c5:90:94:67:29:3a:5b:15:93:ab:04:53:10:73:d5:
68:ac:62:10:0e:a3:6a:2f:b6:8c:50:2d:ea:0d:bb:
6f:b1:fb:4d:32:79:4d:c3:f8:0d:71:4d:5e:bc:a3:
4e:61:dd:f5:d8:85:c2:e4:ca:33:88:71:83:6a:7f:
36:d4:4a:5f:ba:9e:20:18:7a:c1:b9:52:b5:4a:75:
dd:43:10:a3:6e:b9:1f:6e:6e:52:9f:65:18:e9:04:
9c:9a:b8:33:50:45:b3:dd:fc:ab:e9:ef:f4:3c:1b:
40:1f:e8:ef:46:9b:4d:6b:2f:76:01:e8:50:06:b7:
92:53:5f:dc:b7:21:6a:be:34:77:e7:19:26:70:1e:
d2:b9:ec:8a:16:b0:49:8d:cd:2d:54:1e:5b:95:fb:
c6:ca:69:16:9a:b2:82:6f:b0:31:d4:65:3f:e3:df:
ac:5c:a0:a7:b9:a3:c4:08:93:8f:4d:b3:1b:4c:7c:
1c:df:38:05:91:8c:05:25:65:5d:e3:db:a3:de:ba:
6e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:98:61:59:1C:4E:C6:E2:A4:EA:B2:BC:EE:30:14:54:F6:20:BA:B7
X509v3 Authority Key Identifier:
keyid:8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/m5hhWRxOxuKk6rK87jAUVPYgurc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.46.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:90:b9:0b:57:62:a5:9f:28:5f:78:d3:02:6e:91:93:ac:89:
e8:a0:bd:f3:b8:4c:d0:e6:8c:09:cd:7d:31:08:9d:48:f2:e9:
cf:fe:d2:12:92:47:10:8e:c7:0d:b7:bf:cb:51:34:b6:f9:f8:
51:48:6e:ac:15:a5:43:d3:08:18:e3:68:74:34:ee:52:e5:6b:
ee:7a:25:c8:7c:70:23:ed:bf:be:39:61:ef:06:0a:03:5c:99:
5a:fa:fe:26:cc:d1:1d:91:21:41:03:9e:4d:30:a3:e3:8e:74:
1d:87:e4:41:38:e5:da:ed:b8:a4:b0:fb:b5:62:0e:62:b9:dc:
3e:7e:32:73:e7:23:f6:79:0c:62:0f:10:52:94:20:cc:07:5f:
e9:f3:31:f8:6a:aa:01:73:29:f4:82:44:13:77:29:d7:fb:ab:
93:b9:a7:9a:70:3e:33:e9:bb:fc:da:52:d7:e5:e9:7e:07:3e:
ad:99:dc:de:31:2f:0b:a4:74:75:fa:fb:8d:dc:21:24:f6:2e:
be:97:f4:fd:b5:de:84:0d:be:f3:09:a2:65:aa:d0:ed:64:1d:
61:d6:50:12:46:67:7a:42:5e:37:3a:a3:4c:47:7c:ff:21:3a:
de:6d:e1:e8:4e:77:0b:cd:04:54:12:f6:de:10:55:2a:fb:b5:
cb:29:7e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 13:36:36 2024 by rpki-client on console-fra.rpki-client.org