Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Yf_u503uqOjKsi7X12DCHBZiEo0.roa
File: Yf_u503uqOjKsi7X12DCHBZiEo0.roa (raw, json)
Hash identifier: y+XvFxX1HqIIR2ZmjoySaHi5KeoKdCq9WRZ1uU9T4W0=
Subject key identifier: 61:FF:EE:E7:4D:EE:A8:E8:CA:B2:2E:D7:D7:60:C2:1C:16:62:12:8D
Certificate issuer: /CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Certificate serial: 01875ABF5A3E26BDB486EC5D690C60CA6F0B
Authority key identifier: 63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Yf_u503uqOjKsi7X12DCHBZiEo0.roa
Signing time: Fri 07 Apr 2023 08:05:02 +0000
ROA not before: Fri 07 Apr 2023 08:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43926
IP address blocks: 46.253.36.0/24 maxlen: 24
46.253.35.0/24 maxlen: 24
46.253.37.0/24 maxlen: 24
46.253.38.0/24 maxlen: 24
46.253.32.0/24 maxlen: 24
46.253.34.0/24 maxlen: 24
46.253.33.0/24 maxlen: 24
46.253.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Apr 2023 07:37:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5a:bf:5a:3e:26:bd:b4:86:ec:5d:69:0c:60:ca:6f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Validity
Not Before: Apr 7 08:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61ffeee74deea8e8cab22ed7d760c21c1662128d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6b:e8:9b:2a:0f:df:bd:55:f8:b5:7e:db:c2:
0a:9e:db:c1:67:dc:46:85:56:8e:5f:00:8d:44:49:
d4:31:8c:02:c3:57:fa:01:67:aa:6f:de:a3:3b:a2:
c0:20:21:01:85:a0:d6:fa:9f:8f:a3:bd:97:02:2c:
2b:4e:a3:35:02:d7:6b:69:3e:68:fb:b8:43:3b:1d:
eb:96:de:0f:e7:db:d8:ec:50:24:37:bc:b8:0e:c7:
83:1f:05:46:25:04:11:6f:dd:77:23:77:9f:1e:a9:
38:d8:37:9c:d1:c6:06:ca:f6:95:04:75:e7:8a:ff:
c5:a2:41:f3:1b:fa:cb:af:75:63:06:9a:86:db:27:
aa:7d:9f:c5:a6:52:a5:0e:36:f1:4c:22:ad:83:f4:
8c:58:81:9b:a6:04:2f:a2:65:a8:ce:d5:62:5e:09:
79:52:44:d7:7b:19:cb:36:da:4f:da:13:5a:61:3b:
84:f9:93:55:bd:81:d7:31:e6:93:d3:9b:a8:f8:4d:
8f:7f:50:ba:fe:72:4f:6b:1d:7d:f8:68:1f:c2:62:
9e:86:af:a1:0d:6f:0e:43:39:f8:b1:3e:42:6e:a0:
73:04:9f:1e:0e:31:13:eb:51:b2:58:92:b7:75:5d:
d7:b6:7a:21:c3:42:20:d7:b5:a2:5f:fb:dc:59:85:
41:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FF:EE:E7:4D:EE:A8:E8:CA:B2:2E:D7:D7:60:C2:1C:16:62:12:8D
X509v3 Authority Key Identifier:
keyid:63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Yf_u503uqOjKsi7X12DCHBZiEo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.32.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:96:da:62:8c:4c:c8:74:e9:3d:dc:b0:a6:f3:58:53:cc:9c:
f9:ef:28:85:6f:17:f4:05:ec:a4:25:46:d1:dc:27:c7:f4:9a:
b5:02:87:2b:6e:88:83:2d:ff:09:96:4b:1e:ed:4b:5e:0c:20:
70:50:94:56:b9:64:0c:6a:2e:41:1b:33:f0:53:22:c0:86:c6:
5c:75:09:90:60:4e:e8:be:02:56:72:f7:a6:ff:b4:01:39:ee:
d2:48:1a:69:47:65:c7:92:47:2d:ee:65:a3:14:dc:fe:7b:91:
f0:c1:52:3c:ab:ad:cf:7e:7c:05:5d:24:40:9a:5e:0d:c5:44:
ec:e7:ca:9f:40:27:78:12:9f:0b:c9:65:db:83:89:e9:c5:d7:
4d:15:31:8f:35:f3:9f:67:3d:4f:c8:13:88:5e:5c:71:5f:ac:
a1:9d:47:bd:c9:50:cf:18:24:6b:84:03:90:c3:95:90:46:d1:
8e:ad:63:64:10:00:c3:9b:ec:f4:95:b8:8d:72:eb:8d:0a:21:
3d:03:5d:df:a1:1e:1f:21:d6:9f:b6:cc:80:5a:f6:7f:a9:f0:
7c:70:62:ba:c2:50:fc:9b:af:fe:d2:48:85:05:0c:93:92:ce:
ff:d1:45:48:d6:e8:41:63:34:96:6d:b6:b5:16:0b:09:6c:31:
66:e6:a8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org