Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/9mtWCsLgsWaCBYa0jR-8WmDyQs8.roa
File: 9mtWCsLgsWaCBYa0jR-8WmDyQs8.roa (raw, json)
Hash identifier: h6DWd4PjHd3e4v+1cmZPHnQ+KlDFvMv2Og49iyBYvI4=
Subject key identifier: F6:6B:56:0A:C2:E0:B1:66:82:05:86:B4:8D:1F:BC:5A:60:F2:42:CF
Certificate issuer: /CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Certificate serial: 018E376EB2D57BB1A5DD9696148747BB4548
Authority key identifier: 6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/9mtWCsLgsWaCBYa0jR-8WmDyQs8.roa
Signing time: Wed 13 Mar 2024 10:49:45 +0000
ROA not before: Wed 13 Mar 2024 10:49:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64476
IP address blocks: 46.247.136.0/23 maxlen: 23
46.247.138.0/23 maxlen: 23
46.247.140.0/24 maxlen: 24
46.247.141.0/24 maxlen: 24
85.190.64.0/24 maxlen: 24
85.190.65.0/24 maxlen: 24
85.190.67.0/24 maxlen: 24
85.190.84.0/24 maxlen: 24
85.190.85.0/24 maxlen: 24
85.190.88.0/22 maxlen: 22
87.121.208.0/21 maxlen: 21
185.161.168.0/22 maxlen: 22
185.231.8.0/22 maxlen: 22
185.253.168.0/24 maxlen: 24
185.253.169.0/24 maxlen: 24
185.253.170.0/24 maxlen: 24
185.253.171.0/24 maxlen: 24
2a0a:e805:210::/44 maxlen: 44
2a0a:e805:500::/40 maxlen: 40
2a0a:e805:610::/44 maxlen: 44
2a0a:e805:710::/44 maxlen: 44
Validation: Failed, certificate revoked on Wed 29 May 2024 08:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:37:6e:b2:d5:7b:b1:a5:dd:96:96:14:87:47:bb:45:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Validity
Not Before: Mar 13 10:49:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f66b560ac2e0b166820586b48d1fbc5a60f242cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:64:55:fc:28:59:53:99:53:0b:c9:d1:4b:d6:
f4:98:86:b0:d1:39:7f:39:fa:3e:9c:f8:6d:b4:65:
1b:63:c2:40:8e:28:ad:e7:95:81:6e:9b:6f:6d:d6:
b3:e4:6d:ac:a1:28:f7:d1:3a:c6:e3:f3:c8:68:d2:
4f:11:f7:e1:06:0c:00:88:48:c7:52:09:56:56:35:
06:89:b6:fa:d9:70:8f:d7:68:9e:f3:b0:02:0d:58:
39:18:da:c0:d9:8b:c8:94:b8:07:b4:b5:99:ed:94:
1a:8a:41:ee:86:3d:80:d0:b2:62:df:70:e2:a4:64:
26:c9:9b:b7:9d:82:f4:aa:0a:f7:37:f5:06:b5:e0:
5e:22:ef:8a:1b:ca:4e:41:4f:e5:9d:a4:2e:bd:e3:
d7:7a:81:40:d7:0f:bf:31:59:75:c5:9d:c2:74:ca:
14:37:56:4e:ab:23:6a:6e:cc:6b:f2:e1:de:cd:bd:
65:86:79:81:e7:f6:f8:1c:46:0c:8b:ba:80:28:e7:
72:47:8f:84:a4:9b:89:f8:85:40:e4:0c:fc:00:70:
1c:b8:bb:a0:c0:bd:92:f0:a3:3b:17:33:3d:38:dc:
90:7a:21:67:b6:32:2c:3a:84:71:79:cf:d8:8f:67:
20:71:e3:f5:d8:96:69:45:66:17:e8:39:aa:46:93:
6a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6B:56:0A:C2:E0:B1:66:82:05:86:B4:8D:1F:BC:5A:60:F2:42:CF
X509v3 Authority Key Identifier:
keyid:6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/9mtWCsLgsWaCBYa0jR-8WmDyQs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.247.136.0-46.247.141.255
85.190.64.0/23
85.190.67.0/24
85.190.84.0/23
85.190.88.0/22
87.121.208.0/21
185.161.168.0/22
185.231.8.0/22
185.253.168.0/22
IPv6:
2a0a:e805:210::/44
2a0a:e805:500::/40
2a0a:e805:610::/44
2a0a:e805:710::/44
Signature Algorithm: sha256WithRSAEncryption
2a:cd:ae:bb:cd:95:f3:0b:c5:43:03:e0:54:8f:18:fc:be:11:
19:f9:bd:51:6a:78:a2:22:6d:c4:ab:f5:24:d4:f0:6e:55:6b:
f5:80:28:3d:37:71:8e:34:c1:cc:6f:06:af:9f:46:4c:e3:73:
df:78:ce:ae:53:25:c1:1e:33:a7:02:bd:84:52:99:d3:f5:b4:
d3:10:b8:1e:d0:4c:72:3a:9c:88:e1:55:76:05:26:94:68:b8:
80:e2:39:59:99:2d:7a:41:3f:2b:35:f3:79:0e:f5:2d:e7:bc:
96:73:8f:bd:54:62:ee:92:e7:0d:a2:8c:3f:f5:04:b6:49:f6:
0a:67:d2:06:72:f4:f4:33:97:0e:9f:52:a7:52:a1:9d:94:9d:
23:81:ea:a6:00:e7:f1:4d:e9:00:d1:1b:fe:97:9e:03:45:c5:
2e:c1:b1:a8:d8:07:95:90:3c:56:fd:bc:04:f7:53:0e:45:c8:
59:ef:5a:51:53:b8:a7:aa:a8:d4:72:ab:ff:a6:74:e4:29:36:
5f:d5:2d:fd:98:2c:34:0b:26:ff:8e:45:ea:00:14:07:64:f0:
ce:e8:96:d6:ff:31:ce:a4:81:6b:b6:12:76:25:7b:94:d8:9f:
c9:9e:4a:70:78:57:fc:ab:25:f0:fa:5f:0c:a7:ec:54:cc:5c:
94:d2:d2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:06 2024 by rpki-client on console-fra.rpki-client.org