Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/Ci58htooRzcTaBBlFsSnn3T5_W8.roa
File: Ci58htooRzcTaBBlFsSnn3T5_W8.roa (raw, json)
Hash identifier: sFzDUSQwc35+r4xahlRHZOtk7Mhbt9fyk6XjYlp1AL0=
Subject key identifier: 0A:2E:7C:86:DA:28:47:37:13:68:10:65:16:C4:A7:9F:74:F9:FD:6F
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 018CC2DB3DBD2454CCF4807FC3A55EA869E5
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/Ci58htooRzcTaBBlFsSnn3T5_W8.roa
Signing time: Mon 01 Jan 2024 02:29:57 +0000
ROA not before: Mon 01 Jan 2024 02:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199366
IP address blocks: 46.20.10.0/24 maxlen: 24
46.20.12.0/24 maxlen: 24
46.20.13.0/24 maxlen: 24
95.130.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jun 2024 18:12:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:3d:bd:24:54:cc:f4:80:7f:c3:a5:5e:a8:69:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Jan 1 02:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a2e7c86da2847371368106516c4a79f74f9fd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:36:57:ec:33:eb:2b:e4:c4:d1:51:0b:df:4b:
42:61:3a:39:62:69:62:fa:b0:24:5f:83:29:1d:73:
ea:e8:68:17:58:02:e4:64:db:4b:93:dc:11:fa:65:
26:f5:e7:e2:cb:b7:fe:cd:ef:04:7a:8c:af:43:69:
e8:cf:ea:22:0e:c1:54:6d:2e:85:1e:90:fc:11:9f:
55:df:ad:e0:eb:01:8d:26:66:86:50:83:fd:59:90:
a2:9b:f2:08:bb:9a:e3:87:ee:14:a0:bf:a5:c5:23:
5f:c3:9b:3d:ed:7f:97:fe:2b:66:cf:be:2e:b1:b2:
7e:b9:0b:63:9b:10:86:aa:db:12:48:68:70:55:8b:
7b:f6:40:73:c4:93:be:d4:1f:8a:14:25:18:4a:4c:
05:5c:da:17:36:d0:8b:9f:a3:ba:a8:cb:d4:59:85:
12:ac:ff:76:c9:ab:23:43:9e:9d:69:1e:fb:1b:df:
7a:5b:59:4c:ca:51:a4:be:1f:4e:97:72:fc:49:0e:
1f:88:ab:3e:76:37:41:d6:1c:ca:bb:07:ae:8d:65:
98:46:a1:5f:ce:53:61:69:f5:c2:34:ed:91:b4:00:
27:6e:bc:d7:19:40:a1:d4:ea:b9:e7:f3:7e:8c:5d:
da:78:96:55:47:75:1b:17:31:88:46:e1:43:2e:eb:
5d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2E:7C:86:DA:28:47:37:13:68:10:65:16:C4:A7:9F:74:F9:FD:6F
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/Ci58htooRzcTaBBlFsSnn3T5_W8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.10.0/24
46.20.12.0/23
95.130.174.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:9b:28:b5:ff:76:4f:1e:27:17:23:33:0f:40:1f:38:b6:b8:
79:85:52:51:e7:12:2a:84:e6:e1:95:19:dc:d8:21:3a:a8:5f:
e2:d1:37:d6:e5:85:e0:f0:c6:4f:b7:49:08:ea:68:d7:1b:2b:
56:d3:e4:9a:b1:69:23:10:bb:f5:1a:5e:db:db:3c:03:5d:9f:
32:1a:28:71:b2:a8:b3:17:fe:bb:e6:c2:d2:22:c4:ac:00:5c:
65:4f:ab:a0:98:57:3f:7b:4a:eb:11:a1:da:81:e7:9b:e9:81:
dc:ca:67:36:42:5b:b4:9b:f3:59:3d:c5:bf:3a:dd:02:c1:77:
e1:be:9c:7d:d6:cf:31:94:e1:28:a6:2d:53:de:c2:30:2a:de:
53:de:8b:45:2f:6d:ae:b7:c2:4b:cd:b0:11:c6:4f:70:7f:4e:
87:bc:a5:f6:43:b6:52:da:07:29:aa:90:1a:78:7b:ea:ae:9b:
34:af:bf:c1:a3:14:18:8a:5a:e7:8b:aa:91:09:b8:e1:b0:fe:
34:a4:54:7b:67:f3:dd:7d:1a:ba:cb:83:94:89:42:0d:e1:9c:
a8:0d:2e:30:ea:50:2d:f9:72:9f:b3:9b:1d:22:b3:6a:7f:28:
9a:59:ca:d0:bc:f9:19:a6:55:59:c1:56:8c:86:a3:7d:b6:94:
60:d0:3f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 23:34:15 2024 by rpki-client on console-ams.rpki-client.org