Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/MhOjMfQv7gjscwSvqycUrpZgyjY.roa
File: MhOjMfQv7gjscwSvqycUrpZgyjY.roa (raw, json)
Hash identifier: TWRIadE/QsPRgShUYuK9QzzEuiB0zRprREqDeMcduC0=
Subject key identifier: 32:13:A3:31:F4:2F:EE:08:EC:73:04:AF:AB:27:14:AE:96:60:CA:36
Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039
Certificate serial: 01888B0AF84E9D23777AB9221E6E5DA16599
Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/MhOjMfQv7gjscwSvqycUrpZgyjY.roa
Signing time: Mon 05 Jun 2023 10:12:11 +0000
ROA not before: Mon 05 Jun 2023 10:12:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203088
IP address blocks: 46.172.80.0/24 maxlen: 24
46.172.87.0/24 maxlen: 24
46.172.86.0/24 maxlen: 24
46.172.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:0a:f8:4e:9d:23:77:7a:b9:22:1e:6e:5d:a1:65:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039
Validity
Not Before: Jun 5 10:12:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3213a331f42fee08ec7304afab2714ae9660ca36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d0:e2:8a:06:67:10:af:a5:dd:50:f8:d9:e4:
39:ca:d1:18:da:ed:04:68:4f:78:38:16:25:7e:a3:
ca:0d:47:f9:07:8d:68:8c:93:2d:54:f8:a0:e7:10:
7c:ef:ad:c3:6b:1e:3e:79:16:f9:b5:fb:e1:f3:a4:
0f:7b:5d:fb:92:64:4d:48:54:83:01:7c:10:87:a1:
3d:54:a0:4c:31:31:7c:2f:df:6f:cb:50:92:f8:b9:
6f:ba:ac:c9:e6:41:53:83:4c:bf:99:2f:4c:7e:9a:
9e:f0:3c:de:e7:40:90:20:f0:f2:ca:d1:5f:ab:ab:
25:c2:c3:83:7f:be:39:d6:12:2c:d1:d6:c6:6a:b3:
aa:fa:19:89:c0:b1:f1:5d:b2:25:81:e8:12:20:54:
57:f6:e8:6c:f3:57:33:02:05:8c:bb:a5:23:54:ea:
c5:8a:1b:e2:e3:59:b5:90:4d:97:99:e2:84:bf:59:
6e:3e:79:41:68:fc:be:b0:40:a0:2f:e9:6b:7c:a6:
47:57:7d:c2:a2:b2:11:09:34:24:1f:a6:b7:31:09:
6d:47:77:3e:99:d5:d6:c9:70:c1:ec:55:81:d2:10:
e7:05:eb:19:58:63:1c:8a:7a:51:d0:3a:bd:be:11:
41:1f:7f:7e:19:95:3f:83:a5:21:7d:f9:63:10:5b:
f6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:13:A3:31:F4:2F:EE:08:EC:73:04:AF:AB:27:14:AE:96:60:CA:36
X509v3 Authority Key Identifier:
keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/MhOjMfQv7gjscwSvqycUrpZgyjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.172.80.0/24
46.172.86.0/23
46.172.94.0/24
Signature Algorithm: sha256WithRSAEncryption
81:85:97:7a:be:85:09:33:19:a0:58:6a:4a:91:e1:37:81:72:
55:c4:2d:76:b1:46:25:98:ae:ab:20:cd:c5:cb:94:80:9d:c5:
95:0e:41:74:44:1f:ed:41:2e:81:d9:ca:a1:e4:b3:41:ad:15:
31:93:fa:95:82:aa:f5:74:e9:11:86:31:cc:04:8d:24:88:2d:
d3:06:cc:92:5d:59:56:99:87:7d:05:ba:f5:b2:58:b9:23:b7:
9c:fb:79:d4:60:28:8e:bd:c2:61:a1:be:fc:0f:11:86:71:52:
20:d5:7f:e0:51:30:57:63:6a:7a:c3:59:fd:99:ea:ee:14:cb:
05:12:35:89:24:1d:f6:0a:31:0c:59:0e:98:25:26:9b:1d:3d:
af:67:bb:7c:7f:6a:ca:4a:cc:6a:41:6f:96:2b:9d:cd:ec:43:
e4:88:af:6f:17:ee:c3:f8:12:ba:6a:66:05:a8:e8:25:2b:8e:
d8:7f:e5:78:30:71:91:f4:85:83:de:77:9f:da:77:f5:6c:86:
ef:09:6d:25:fb:bf:3b:bc:b5:96:eb:4a:2a:8f:5e:76:3e:22:
a0:92:f1:16:ce:ad:18:80:68:61:57:26:f7:5c:da:1d:8e:91:
47:ea:31:94:d9:a7:01:ba:ab:91:bf:94:18:ca:de:96:6a:9b:
4c:72:52:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:58 2024 by rpki-client on console-ams.rpki-client.org