Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/3ht8x3QfhkATCBx0Bbw_VIwyzMc.roa
File: 3ht8x3QfhkATCBx0Bbw_VIwyzMc.roa (raw, json)
Hash identifier: J/VRafWbvRabe5/ZkyKzoLjWrXG/7bM7Whq/AbRAS3E=
Subject key identifier: DE:1B:7C:C7:74:1F:86:40:13:08:1C:74:05:BC:3F:54:8C:32:CC:C7
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0192D4C77F9AD6307FDFAFA2734F4871D2D7
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/3ht8x3QfhkATCBx0Bbw_VIwyzMc.roa
Signing time: Mon 28 Oct 2024 20:18:16 +0000
ROA not before: Mon 28 Oct 2024 20:18:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6939
IP address blocks: 46.29.24.0/22 maxlen: 22
185.254.28.0/22 maxlen: 22
193.35.152.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 08 Nov 2024 15:50:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d4:c7:7f:9a:d6:30:7f:df:af:a2:73:4f:48:71:d2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Oct 28 20:18:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de1b7cc7741f864013081c7405bc3f548c32ccc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:ff:69:e6:c4:2c:ff:83:5f:aa:d7:61:2f:
fb:14:51:13:e2:e4:6c:2f:9c:ba:16:70:aa:0e:10:
61:89:c4:d9:e1:38:87:3f:a6:30:8f:75:80:bd:81:
50:84:4e:ac:f4:48:33:9b:3d:aa:9d:06:0f:98:63:
f7:12:99:b2:95:af:28:9e:65:c1:7b:f8:bf:56:c8:
9e:24:98:31:5f:f8:9d:f0:1e:25:3f:99:19:12:20:
c4:c5:d5:31:b4:3a:88:a3:40:bd:4d:8e:5c:a5:cc:
5e:c2:61:63:0e:97:16:bf:2c:db:00:d8:f4:16:d4:
3c:a9:0c:22:bc:cf:15:64:d6:96:f1:f3:7c:8d:f4:
5b:4b:fa:a0:b3:92:f6:c8:01:51:4e:61:68:80:c0:
f6:e7:63:b6:8d:67:fa:fe:7c:78:75:21:e5:71:c6:
0a:44:b7:e5:0d:b7:24:c6:2f:46:92:68:12:06:ae:
64:46:6b:8f:14:45:bb:2d:82:3f:3e:cf:9a:1c:13:
22:52:ef:50:d2:ce:9b:8a:9b:38:08:c6:9d:0b:db:
09:83:e2:ee:fc:7c:70:6c:64:db:aa:a4:2f:34:ac:
e7:be:c8:7d:6c:af:e7:0f:79:f8:35:e2:e1:e1:f4:
a6:0f:4e:c3:1a:d0:b8:67:17:61:14:5d:24:3e:24:
96:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1B:7C:C7:74:1F:86:40:13:08:1C:74:05:BC:3F:54:8C:32:CC:C7
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/3ht8x3QfhkATCBx0Bbw_VIwyzMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.24.0/22
185.254.28.0/22
193.35.152.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:10:de:e7:8f:1f:11:6a:7a:85:1c:51:02:09:09:76:5a:1e:
5d:27:72:dd:21:17:8d:b3:47:95:d3:31:a9:83:44:08:37:a7:
c5:a4:d8:ff:7d:b0:8b:3c:63:bb:41:fd:ad:f5:9b:8e:d7:2a:
d0:9f:2f:68:4a:5c:94:a9:81:e1:a1:83:b0:56:c1:f6:17:74:
af:46:13:02:f0:56:c6:be:d9:a2:bc:70:34:24:7b:23:d2:ec:
b4:33:0e:d9:6f:42:74:e2:1c:ef:03:d3:ed:2e:91:2d:88:cc:
cb:60:02:79:85:69:9d:46:11:bf:83:2f:ad:48:42:72:d5:67:
53:ec:cc:78:5f:93:71:ae:71:6e:d9:59:57:86:d3:86:f8:7f:
d9:56:65:4e:c7:c3:2d:f3:47:c7:46:76:0b:80:5c:86:73:40:
25:70:2b:85:92:8a:b6:f6:4b:38:10:dc:87:67:77:40:dd:19:
f9:fd:c5:08:d1:dd:bf:92:fe:29:40:b0:70:87:a1:76:7a:e7:
86:ab:df:cf:23:75:ea:f6:71:77:9c:e6:b9:2b:a9:69:45:11:
15:04:2e:83:14:51:58:fc:18:c8:12:1c:8b:5a:8f:ff:f5:fe:
fa:90:10:61:db:80:03:6a:02:10:fc:c9:44:ca:37:00:bc:f9:
0f:7a:02:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 19:43:13 2024 by rpki-client on console-fra.rpki-client.org