Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/U6NEII9g27b1eWmUHD2H6IXIQy8.roa
File: U6NEII9g27b1eWmUHD2H6IXIQy8.roa (raw, json)
Hash identifier: XDjKQqRgtyG6oDaM8x9iNg4BSSiNp/yAN3H8WUoSG/w=
Subject key identifier: 53:A3:44:20:8F:60:DB:B6:F5:79:69:94:1C:3D:87:E8:85:C8:43:2F
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018CC8DE2DFF1F8BC57FD1B4A2BE9E4480E7
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/U6NEII9g27b1eWmUHD2H6IXIQy8.roa
Signing time: Tue 02 Jan 2024 06:30:53 +0000
ROA not before: Tue 02 Jan 2024 06:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12722
IP address blocks: 46.150.248.0/24 maxlen: 24
46.150.249.0/24 maxlen: 24
91.195.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 19:55:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:2d:ff:1f:8b:c5:7f:d1:b4:a2:be:9e:44:80:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 2 06:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53a344208f60dbb6f57969941c3d87e885c8432f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dd:f4:80:13:24:56:9c:22:e4:c9:03:d8:81:
25:8e:f4:9a:18:9e:d7:a9:53:0a:ff:c2:5e:6b:f4:
7f:c3:2d:45:b3:fb:f2:c2:14:c7:0e:0a:af:7a:2c:
d0:d0:11:50:02:84:dc:25:2e:26:f2:fb:6c:00:dc:
4c:c8:69:f8:38:9f:e6:9b:ae:47:d2:f9:01:ef:bc:
94:79:5e:f9:ce:08:55:55:93:24:ca:91:a7:04:03:
84:50:41:0a:1f:57:72:09:de:8f:81:78:25:84:8f:
7f:2a:64:0b:4c:f6:15:f0:39:db:92:0c:c6:17:51:
7d:46:fb:8e:e0:d8:78:66:00:11:9c:77:b6:82:8e:
2f:9c:e4:ea:b9:10:b9:f7:b4:e3:c6:47:4f:8d:e3:
30:40:ea:38:ef:d3:f2:84:22:6e:27:fc:3b:8f:74:
db:75:1e:69:fd:3c:07:61:a0:c7:c7:76:46:59:ba:
b7:9d:91:ef:21:b2:2c:7f:33:0e:cd:19:38:fb:5f:
b0:5f:b8:37:bc:d4:7e:c8:84:e7:31:8a:84:60:e2:
06:27:64:0d:6e:60:26:56:12:f4:a8:5f:90:bf:cf:
9e:a2:b7:a6:a9:f2:cc:42:37:38:68:97:ab:f9:b7:
01:36:a0:7a:e4:d7:63:a2:21:00:91:be:e5:7c:b5:
10:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A3:44:20:8F:60:DB:B6:F5:79:69:94:1C:3D:87:E8:85:C8:43:2F
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/U6NEII9g27b1eWmUHD2H6IXIQy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.150.248.0/23
91.195.21.0/24
Signature Algorithm: sha256WithRSAEncryption
65:e3:10:c7:4b:ae:28:2c:9e:47:e6:78:93:21:a9:da:3c:f8:
f1:01:b4:51:2b:b8:22:cf:ab:67:71:eb:6d:ba:6c:d8:a6:1d:
70:75:03:de:80:89:29:9b:46:61:ad:ce:f4:ce:d6:ec:10:4a:
69:2f:02:a6:ec:7c:54:e4:eb:37:91:f1:64:ed:7e:1d:49:46:
47:d1:a0:ba:ab:60:19:c9:d9:2e:b5:a0:e5:18:92:77:e2:3a:
f6:d3:1a:4d:e3:5b:13:f7:98:d1:17:89:cf:f9:08:d2:ba:df:
32:0b:25:ca:7d:2c:e0:71:8f:19:95:61:c9:f2:da:ac:73:b3:
68:a9:3f:42:80:97:ea:52:e3:f4:95:89:3c:db:c5:e4:e3:76:
5c:ae:82:0c:ee:3c:7f:f7:12:bc:b8:03:3c:17:b7:b4:2f:02:
d3:04:86:2c:8d:a5:fc:4e:37:bf:51:61:73:df:ea:58:5c:69:
4d:93:b6:52:9a:f9:08:d2:bc:6a:67:4d:9a:5e:4a:b5:ff:b6:
fc:f6:29:f9:32:9f:f2:98:4c:28:14:5d:cf:96:8a:3f:75:c1:
e0:70:f2:8f:20:1b:92:09:93:90:61:9b:a8:df:db:68:cf:a2:
b9:7b:11:2b:8b:d6:b4:77:41:6d:e6:fc:dc:80:cc:ca:80:dc:
fb:02:ff:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org