Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/VDUd9IjJJSAESmeqErJoypDmiZI.roa
File: VDUd9IjJJSAESmeqErJoypDmiZI.roa (raw, json)
Hash identifier: KkNO4K+fL4YbeSk+swtJnsOEkSrOotgS8UbVoF7MhI4=
Subject key identifier: 54:35:1D:F4:88:C9:25:20:04:4A:67:AA:12:B2:68:CA:90:E6:89:92
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 0187C7F47E438A390B258F6B8C7DF36DE471
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/VDUd9IjJJSAESmeqErJoypDmiZI.roa
Signing time: Fri 28 Apr 2023 13:01:41 +0000
ROA not before: Fri 28 Apr 2023 13:01:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25198
IP address blocks: 195.74.93.0/24 maxlen: 24
46.229.243.0/24 maxlen: 24
46.229.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 May 2023 12:58:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c7:f4:7e:43:8a:39:0b:25:8f:6b:8c:7d:f3:6d:e4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Apr 28 13:01:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54351df488c92520044a67aa12b268ca90e68992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:e8:ea:f1:fa:af:96:c4:db:19:20:3f:8c:
c3:27:83:a4:6e:b4:32:14:08:8d:bd:c7:eb:81:a6:
9f:6b:61:66:69:18:81:a7:71:41:6c:0b:2b:95:98:
c8:44:93:82:52:23:63:7a:71:c1:97:ef:65:44:d8:
6d:0e:55:c7:0e:8c:c4:dd:bb:50:2e:d5:de:4b:da:
f4:fd:98:fb:16:52:4d:b7:03:6b:27:06:b7:ad:61:
5c:35:7b:76:d2:5e:a0:5b:5d:6e:1e:6e:ba:48:93:
e0:14:65:0e:4e:b1:a7:88:da:94:a1:9f:08:8d:ae:
5c:44:4c:a1:d2:02:3f:c0:c0:df:0a:ab:1e:49:4c:
10:69:83:76:24:50:ad:f6:14:a4:1c:45:1a:97:a2:
94:2a:07:59:75:d9:23:ff:2a:1b:b5:be:36:c6:09:
5d:93:f6:0c:07:ff:03:86:d8:77:ab:bc:66:4a:dc:
c8:fa:24:66:6b:8e:f0:8b:72:a0:e6:7c:cf:cd:d3:
dc:90:ab:71:ed:d4:d7:63:52:46:a0:be:fe:40:e6:
5a:d4:36:43:b3:61:24:fb:d5:59:f4:7b:a8:e8:18:
8a:e5:2e:b3:f5:3f:19:69:7c:6c:90:7d:84:63:15:
ce:a4:ad:39:cd:f4:41:8e:0d:bc:32:d2:f8:3f:3d:
b8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:35:1D:F4:88:C9:25:20:04:4A:67:AA:12:B2:68:CA:90:E6:89:92
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/VDUd9IjJJSAESmeqErJoypDmiZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.243.0/24
46.229.251.0/24
195.74.93.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:74:3b:21:bc:16:a1:c7:ba:30:fd:1c:f1:0d:58:da:e8:a8:
45:3f:0b:11:2a:e8:13:3f:7a:42:9e:72:39:37:b6:84:e6:c9:
b4:a2:d2:dd:e7:7c:27:44:e4:3e:1c:a4:42:4c:37:3a:f6:3e:
fb:50:64:d9:21:a2:0c:ea:12:22:9a:ad:62:ea:3e:99:83:ee:
e4:67:bc:12:4b:04:8a:eb:08:33:44:22:ba:c9:46:c9:27:5b:
88:08:bc:81:42:18:4d:22:b0:e0:97:e3:7c:e2:f2:b2:80:c9:
30:af:9f:fd:88:e8:c5:5c:44:2d:1a:6f:7d:d6:65:3d:2c:09:
d0:be:a8:20:8f:fc:fc:e8:c7:00:b9:96:05:76:8a:49:a1:50:
e1:f4:2f:e4:a9:f9:d7:25:36:f2:5d:f4:4d:0c:ab:4b:f8:d1:
1a:3d:80:79:0a:ba:8f:46:c9:39:94:65:67:30:85:77:78:b6:
2d:c2:b9:e7:a3:cb:cf:e2:64:5e:6b:a9:15:2a:3a:e1:4c:d0:
7d:af:48:cc:55:da:7d:79:c1:bd:ce:48:b0:cd:9d:6a:61:ee:
6b:ca:28:5f:5c:0a:21:64:5b:47:3c:ff:c5:94:27:c4:26:d1:
9c:3f:95:3d:34:f8:c6:91:fd:f2:27:b4:f9:e5:03:a4:c4:60:
c9:ae:2b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:19 2024 by rpki-client on console-fra.rpki-client.org