Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/4X8spWLearEz9owgyR8Su3kyJwM.roa
File: 4X8spWLearEz9owgyR8Su3kyJwM.roa (raw, json)
Hash identifier: ndoF2bPcD9s8R5tC5ZYxsTtMpRnIjS+u76WZv7eNFEg=
Subject key identifier: E1:7F:2C:A5:62:DE:6A:B1:33:F6:8C:20:C9:1F:12:BB:79:32:27:03
Certificate issuer: /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial: 018CC9BBE963AD4D660F3E418A23C59D1B25
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/4X8spWLearEz9owgyR8Su3kyJwM.roa
Signing time: Tue 02 Jan 2024 10:33:04 +0000
ROA not before: Tue 02 Jan 2024 10:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207821
IP address blocks: 46.252.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 May 2024 05:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:e9:63:ad:4d:66:0f:3e:41:8a:23:c5:9d:1b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Validity
Not Before: Jan 2 10:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e17f2ca562de6ab133f68c20c91f12bb79322703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:6e:24:67:02:66:50:17:dc:b4:53:31:59:
24:bf:6b:0d:95:66:14:ba:43:bd:12:64:8a:1d:a2:
4c:de:a0:7a:02:88:35:72:d2:a5:cc:c1:ee:8a:09:
c2:38:92:bd:59:fb:05:0b:4a:d3:62:e3:6c:b6:3d:
8d:ba:62:07:ad:d8:c9:83:6e:01:ce:c4:2a:1b:91:
6a:88:49:0d:92:31:67:d0:54:1e:3a:78:82:7c:6f:
9c:00:73:32:07:db:48:5e:51:aa:5b:da:90:f5:77:
1b:88:cb:dd:ba:f3:80:7c:20:24:78:02:7a:73:8f:
90:6c:92:7b:46:6e:e0:a4:bc:be:db:80:af:6f:84:
04:8f:69:44:b0:9b:cf:1e:3c:1c:73:2f:5d:29:1a:
ad:08:e6:0c:a8:de:ee:00:b1:f2:ec:ef:c7:d2:68:
4a:c3:0d:33:0b:5a:af:6a:d0:65:77:26:a5:20:f1:
e6:f3:a6:5c:6b:31:89:f0:ec:b4:9d:c3:d0:60:8a:
09:d0:05:eb:f8:22:66:5f:0c:e9:cf:81:69:d4:a1:
b6:d1:b3:24:f7:a4:e3:e0:88:26:8f:71:00:22:bf:
67:82:00:56:06:1b:82:14:ce:ab:fd:fe:14:b5:e0:
93:da:bf:c0:99:e9:3e:63:20:58:fc:37:b3:48:14:
d7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7F:2C:A5:62:DE:6A:B1:33:F6:8C:20:C9:1F:12:BB:79:32:27:03
X509v3 Authority Key Identifier:
keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/4X8spWLearEz9owgyR8Su3kyJwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.252.2.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:8c:a3:f6:af:77:f3:3f:8f:94:29:fd:c7:69:88:a3:c4:92:
df:82:63:0e:b0:88:ac:da:f3:f4:03:65:a3:6a:49:ca:a4:3b:
24:ad:16:eb:3c:35:8e:cb:8f:6c:6c:8b:19:c0:54:37:01:18:
df:24:75:f4:5c:db:e6:ce:eb:c4:f8:e7:09:92:7c:31:d9:f7:
86:d2:00:75:2f:e9:b7:18:2e:6d:94:a8:a8:fb:1b:40:ef:61:
ce:e1:a1:14:d2:cc:83:68:90:f5:fc:fd:ac:d9:3a:e5:5c:91:
ac:fe:93:96:8a:ed:ce:3e:4f:f9:9b:16:1d:f8:21:e8:23:3c:
d3:c6:74:dd:97:2a:db:f3:0c:0e:41:d8:09:f2:f3:a1:82:02:
e6:68:ac:a6:78:4f:e1:a8:70:49:9e:c3:d8:1f:98:1a:ac:90:
bf:f6:c2:d2:6a:65:96:fe:08:f2:75:e4:8b:25:71:61:b4:f6:
a7:34:a8:a8:ec:6a:e1:1a:df:79:4b:89:ae:dc:ce:c2:7a:c2:
de:82:17:88:c5:ff:c3:a9:58:0c:e1:77:4b:c6:c7:60:5c:c5:
81:7e:8e:12:3d:be:7c:78:b3:59:ef:26:fd:65:49:0b:4d:40:
b6:ff:3d:e8:55:8a:6e:03:92:b8:af:df:70:d7:d0:aa:0e:aa:
f5:a3:6e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 08:01:48 2024 by rpki-client on console-fra.rpki-client.org