Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/Xdio_M0KOSGGEEv7VSykJCrD-P0.roa
File: Xdio_M0KOSGGEEv7VSykJCrD-P0.roa (raw, json)
Hash identifier: cGkaBaOhWHp8s1qJZdRdVsWZcOx9XKouFDowYsxgbdI=
Subject key identifier: 5D:D8:A8:FC:CD:0A:39:21:86:10:4B:FB:55:2C:A4:24:2A:C3:F8:FD
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 0190DAC5DE4CCE5C574CA485CE7BE24413F4
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/Xdio_M0KOSGGEEv7VSykJCrD-P0.roa
Signing time: Mon 22 Jul 2024 14:08:38 +0000
ROA not before: Mon 22 Jul 2024 14:08:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48753
IP address blocks: 46.253.3.0/24 maxlen: 24
46.253.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Aug 2024 10:29:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:da:c5:de:4c:ce:5c:57:4c:a4:85:ce:7b:e2:44:13:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: Jul 22 14:08:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5dd8a8fccd0a392186104bfb552ca4242ac3f8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:5c:25:c9:ea:9a:6b:9f:15:ce:5b:b4:4d:
53:2c:34:77:f1:0d:cc:55:ca:fd:b2:6d:9b:91:1a:
9d:6c:53:f4:b0:6b:a6:1a:84:a7:85:53:a6:f7:e2:
7e:a9:2b:21:fa:26:df:be:b7:b4:44:cc:19:e7:b4:
53:c0:16:cb:7d:43:71:ce:2f:dd:ff:b0:ff:70:96:
11:7c:bf:ee:f2:09:5d:07:d3:75:d4:20:3f:d4:b9:
64:9d:f3:16:9c:24:e8:f9:70:04:c0:61:c2:92:79:
21:40:57:5a:7f:9c:54:31:f7:7c:9c:86:3c:00:e0:
85:ec:63:b5:4c:dd:43:48:21:92:b0:bd:93:e5:81:
a2:72:69:7a:ac:7b:3d:73:2a:11:5c:e0:c6:e4:e9:
be:c0:11:a1:57:e3:c5:82:5f:7e:7e:f0:de:fb:1e:
cd:a7:4b:6c:9a:78:5a:7d:dc:59:b6:10:fc:88:e0:
55:0a:bc:d9:e7:7c:80:22:1f:cf:75:f0:cc:41:d6:
a1:50:bf:5a:d9:fb:83:52:7a:22:b3:0e:54:a8:68:
79:a5:c1:db:a9:c0:1b:cf:d5:77:f8:77:7f:4c:1e:
8d:9f:22:b5:5e:60:98:58:18:72:57:80:da:aa:cb:
a4:e2:b8:86:8c:4e:5c:29:fd:75:95:67:b5:5d:24:
eb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D8:A8:FC:CD:0A:39:21:86:10:4B:FB:55:2C:A4:24:2A:C3:F8:FD
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/Xdio_M0KOSGGEEv7VSykJCrD-P0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.3.0-46.253.4.255
Signature Algorithm: sha256WithRSAEncryption
98:95:25:23:3d:51:32:9d:86:24:47:8a:a2:8a:ba:a1:5c:e7:
a2:48:79:70:31:65:75:b4:b1:ad:ac:c5:74:ee:f8:26:d9:88:
b8:3a:85:cb:3d:b4:1f:21:09:32:2c:0c:d9:05:10:65:ff:d7:
bf:d2:c7:24:4d:f6:99:c8:a6:b2:84:fc:df:cd:68:19:1e:5f:
f4:00:3c:7e:88:12:15:ca:fd:5e:df:1b:cc:51:c7:37:c3:e9:
c7:c0:b3:19:bd:99:ac:d6:bb:2e:0e:ff:56:bf:41:ef:32:46:
d4:39:df:ef:5a:11:bb:c1:80:de:72:25:59:d7:32:3b:1e:3d:
48:7c:2d:67:22:c7:80:f6:64:08:50:c7:f0:bd:96:f0:4f:45:
f6:0c:97:a5:3e:20:c2:ea:58:30:a8:9f:bd:39:9a:e2:d0:6c:
7f:77:31:fd:06:91:a5:5f:09:f3:9d:b7:fe:20:52:f1:7d:43:
e5:81:85:9d:6f:7a:57:7a:21:eb:f2:14:a6:b2:a5:2c:75:60:
a3:48:c8:dd:95:df:40:7c:16:25:78:0a:5e:d8:3b:03:b7:84:
59:96:82:d1:cd:d2:0f:e2:3f:7b:a8:ce:24:e6:65:ff:0c:68:
a0:bd:47:51:a6:5f:86:bb:97:bd:b0:35:62:45:0d:db:e4:1e:
ef:9e:7c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 13:20:18 2024 by rpki-client on console-ams.rpki-client.org