Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/Ap_vASG0mIYfn6s09SwXzkfuOEY.roa
File: Ap_vASG0mIYfn6s09SwXzkfuOEY.roa (raw, json)
Hash identifier: ppv9tbWp7mMRQPdNYu9dZzfcisTwWl0YANe+Ey1DNrQ=
Subject key identifier: 02:9F:EF:01:21:B4:98:86:1F:9F:AB:34:F5:2C:17:CE:47:EE:38:46
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 01888269CD5663F3C94F92EBEAEF5EC652A1
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/Ap_vASG0mIYfn6s09SwXzkfuOEY.roa
Signing time: Sat 03 Jun 2023 17:59:11 +0000
ROA not before: Sat 03 Jun 2023 17:59:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25198
IP address blocks: 195.74.93.0/24 maxlen: 24
46.229.243.0/24 maxlen: 24
46.229.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Jun 2023 09:24:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:82:69:cd:56:63:f3:c9:4f:92:eb:ea:ef:5e:c6:52:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Jun 3 17:59:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=029fef0121b498861f9fab34f52c17ce47ee3846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:46:cd:18:58:a0:6f:58:44:48:3b:f0:03:18:
40:fb:99:76:21:c2:51:d8:32:a7:ad:0e:70:47:ba:
41:b8:40:8a:38:6d:8a:ae:c9:76:ec:40:8e:0a:9c:
3a:f9:d0:a3:07:31:3e:12:48:1f:4e:d5:68:1a:ad:
cb:d8:e3:9a:bd:89:52:05:ee:ce:b7:59:79:8a:5e:
7a:f6:6b:db:94:23:e5:85:22:b6:a6:9c:bf:06:0b:
4d:2e:77:e2:8a:ff:01:8e:83:7c:e1:e2:74:da:6b:
d1:97:d0:c4:76:43:74:d9:4c:65:75:52:1a:d1:18:
fc:a3:75:1f:95:74:b6:a2:07:1a:f6:61:f8:2a:a8:
12:8a:40:a3:95:b6:d9:ed:1c:06:1e:77:fd:62:5f:
2f:8e:08:ed:85:0e:6b:b1:18:7a:e3:c3:26:2b:7c:
fd:06:ee:71:3d:32:22:91:ff:47:86:98:17:8f:44:
a2:98:82:72:1d:8e:4d:df:ed:da:f0:2d:46:af:f7:
44:31:a4:70:56:ea:11:07:4e:7a:5f:17:74:14:b3:
d7:6c:5d:94:ce:0d:56:0a:46:20:f0:e9:da:e4:14:
c2:c4:6f:2e:19:3e:41:8e:4b:fe:87:22:44:76:f9:
da:8b:48:8f:23:83:86:9e:ba:72:e3:6d:40:19:ca:
c3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9F:EF:01:21:B4:98:86:1F:9F:AB:34:F5:2C:17:CE:47:EE:38:46
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/Ap_vASG0mIYfn6s09SwXzkfuOEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.243.0/24
46.229.253.0/24
195.74.93.0/24
Signature Algorithm: sha256WithRSAEncryption
82:5f:d3:1b:41:e7:a5:9e:24:2e:43:46:e0:cc:5d:15:49:40:
06:cc:ac:8a:f2:bf:48:92:86:5c:89:e8:b3:e6:1a:8b:d9:96:
91:0d:6f:91:5c:1b:9e:e5:77:83:74:27:4f:07:53:f3:eb:8a:
7f:1e:00:e4:fa:8e:8c:9a:4d:d3:82:4f:b7:8f:8c:4d:60:55:
11:8d:55:d0:61:cb:fd:80:eb:ea:7e:1c:81:71:85:89:e6:7a:
ad:2c:f5:89:24:cf:47:d6:10:ac:34:c6:5d:ca:30:db:8a:6d:
da:78:0c:1e:d9:4f:77:1c:27:c1:3a:5d:c0:f3:da:8a:df:21:
f2:e7:95:7e:80:db:32:73:d0:6c:83:07:8e:97:04:49:6e:ee:
07:dc:1e:1d:5a:ad:90:64:10:42:e0:68:ca:7c:4a:cc:e8:9e:
75:62:43:7c:b1:42:e4:89:22:35:7b:95:a5:2f:9f:c0:46:0f:
07:87:4b:8c:5f:ee:a9:d4:c8:10:e8:4d:28:d3:40:ad:c5:32:
3d:ea:d5:e7:6b:27:b4:3a:2c:17:26:4b:73:68:46:2f:27:10:
83:f5:0e:77:8b:ce:10:1d:64:04:76:14:f2:44:8f:1f:fd:b8:
c9:f5:82:2c:ba:71:86:21:76:83:f3:5a:36:ed:04:bb:aa:0c:
c1:94:f1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:19 2024 by rpki-client on console-fra.rpki-client.org