Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/a5V9mnWrxUu_EKJ9oqMM2oCo22o.roa
File: a5V9mnWrxUu_EKJ9oqMM2oCo22o.roa (raw, json)
Hash identifier: 07RY8hTA026+R7kfz9c0iavmXqSjOdfm6nP7r8pm/9E=
Subject key identifier: 6B:95:7D:9A:75:AB:C5:4B:BF:10:A2:7D:A2:A3:0C:DA:80:A8:DB:6A
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 018730C47089615401123A1B72595CDFA602
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/a5V9mnWrxUu_EKJ9oqMM2oCo22o.roa
Signing time: Thu 30 Mar 2023 04:26:32 +0000
ROA not before: Thu 30 Mar 2023 04:26:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138687
IP address blocks: 158.46.205.0/24 maxlen: 24
158.46.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Apr 2023 12:13:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:30:c4:70:89:61:54:01:12:3a:1b:72:59:5c:df:a6:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Mar 30 04:26:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b957d9a75abc54bbf10a27da2a30cda80a8db6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fa:6a:96:74:75:f0:ef:55:e8:9c:3b:f0:07:
89:2f:57:64:2f:05:ff:c6:02:c4:0b:e0:8d:95:cf:
fa:ea:64:72:9b:6e:37:f8:4a:1e:ff:46:12:a7:7a:
76:44:33:00:bd:cb:48:a7:7b:52:a9:e0:40:d5:9e:
c9:25:ff:5d:f3:69:ca:22:1a:c1:f0:dc:70:80:3a:
02:cf:73:49:1b:34:a8:5b:9b:93:b1:e9:e1:23:01:
fd:03:0b:52:11:d1:1f:d4:5e:51:ea:3a:d7:65:41:
68:7e:bf:41:e2:85:13:b6:54:e1:32:e0:c6:61:76:
71:d4:4c:4e:b1:71:2d:35:9d:8c:24:be:83:bc:a5:
cd:43:4b:c8:32:01:12:2c:a4:43:bc:c5:f1:b9:45:
0c:28:86:93:7f:78:e4:16:f8:df:76:ad:cc:2a:df:
e3:ff:57:a4:05:ee:dc:97:51:6d:9f:8b:42:fa:86:
ca:63:a5:b0:38:c4:6d:4a:56:9c:1b:c4:a4:a9:97:
ab:11:b1:11:f1:8c:d5:55:7c:b0:cf:b9:ee:55:a4:
09:7f:37:9a:85:05:cf:95:9b:d6:ab:5a:d2:a8:11:
43:a1:d5:21:77:65:43:20:fc:fe:45:45:fb:ad:12:
cd:86:de:00:65:fc:0e:b3:ea:e0:8b:43:76:b1:3e:
06:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:95:7D:9A:75:AB:C5:4B:BF:10:A2:7D:A2:A3:0C:DA:80:A8:DB:6A
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/a5V9mnWrxUu_EKJ9oqMM2oCo22o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.205.0/24
158.46.207.0/24
Signature Algorithm: sha256WithRSAEncryption
83:20:ff:61:a3:7e:a3:75:35:2a:21:12:0b:ac:22:7d:ef:eb:
3f:09:f9:e4:60:36:ce:74:ab:06:48:2a:9a:ce:d9:8e:fc:3f:
f4:fc:8f:95:98:71:59:1c:68:91:8e:bd:ba:3f:02:8c:c6:5c:
0d:c2:75:d0:b9:60:77:1c:b4:44:43:b3:d9:50:29:63:e4:79:
1c:8e:ec:68:ee:11:d1:b2:d6:74:e7:c4:48:84:3f:4a:49:99:
15:6d:3c:d2:bb:f5:c2:39:c4:ca:2e:f3:92:e8:9c:c0:5c:70:
d6:1d:d3:66:8f:50:25:9e:3c:bf:48:5e:fe:13:de:77:5e:8f:
c5:a2:b0:25:91:5b:53:d3:d0:55:87:34:ab:38:b1:d1:99:78:
33:00:0d:cb:d7:b0:5c:36:20:94:91:34:0d:11:30:e6:d8:f9:
31:37:75:3e:86:1a:64:c2:2d:7f:82:b2:50:5a:6e:59:cc:19:
ae:e2:04:65:0f:2e:1e:23:a2:aa:46:6a:c3:a9:31:9a:c1:7d:
e2:8f:59:06:58:63:12:c5:3e:34:91:f7:2e:0c:85:5e:c7:fe:
5d:9c:e5:b1:4f:d0:ae:d1:6b:6e:70:44:cc:6c:f2:6d:a7:f1:
c0:8b:22:fa:d8:d9:03:65:ac:03:37:80:d4:04:b4:49:c2:25:
48:8a:f1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:39 2024 by rpki-client on console-fra.rpki-client.org