Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/YzUBr0HZPk4weZWvO3YHtr1Kmas.roa
File: YzUBr0HZPk4weZWvO3YHtr1Kmas.roa (raw, json)
Hash identifier: frqjJxfus26Wq4DKwkUz2G/NfQbZYx4LuO27B9lTLqM=
Subject key identifier: 63:35:01:AF:41:D9:3E:4E:30:79:95:AF:3B:76:07:B6:BD:4A:99:AB
Certificate issuer: /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial: 018CC9BBE91FBE67DF6C438679DFB0E74AC3
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/YzUBr0HZPk4weZWvO3YHtr1Kmas.roa
Signing time: Tue 02 Jan 2024 10:33:04 +0000
ROA not before: Tue 02 Jan 2024 10:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206774
IP address blocks: 46.252.1.0/24 maxlen: 24
46.252.3.0/24 maxlen: 24
46.252.9.0/24 maxlen: 24
46.252.8.0/24 maxlen: 24
46.252.10.0/24 maxlen: 24
46.252.5.0/24 maxlen: 24
46.252.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 May 2024 05:56:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:e9:1f:be:67:df:6c:43:86:79:df:b0:e7:4a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Validity
Not Before: Jan 2 10:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=633501af41d93e4e307995af3b7607b6bd4a99ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c7:d7:25:b3:9d:25:0b:7c:3f:00:f3:fb:9f:
b4:26:4b:bd:87:1d:c1:3e:f1:96:2b:1a:cb:de:ab:
be:4e:01:c8:f2:37:92:fe:c4:07:5b:71:46:01:cf:
e5:2c:0f:79:ff:7e:26:b9:78:ae:90:19:f8:d7:df:
34:23:25:7c:47:5e:2a:66:dd:a7:1d:07:80:c1:a5:
97:ee:6c:4d:66:34:da:24:f8:48:96:29:d6:26:28:
80:7e:f7:c1:a5:76:9e:79:b0:4d:b1:59:0f:bc:98:
fa:51:a3:06:aa:86:d4:30:46:23:dc:84:95:c7:91:
10:82:d4:f2:a6:9f:39:29:a9:50:27:e0:43:5c:17:
e2:c6:70:89:06:af:8b:fc:7f:8d:62:0e:af:7b:39:
18:23:75:62:d0:5a:bf:22:e2:f0:6f:14:fb:17:83:
87:40:88:f0:91:18:72:70:70:f8:a4:20:7e:11:7b:
27:d9:f1:13:b5:09:6e:ff:0c:6f:9f:8d:f0:4d:66:
c4:24:d7:d1:e5:cd:6e:df:54:01:37:c7:f9:3e:81:
d0:c2:c8:8a:54:50:46:b1:4a:35:91:19:5a:5e:4b:
ca:1b:74:d7:68:fa:09:e4:19:b4:08:dd:a0:b8:83:
13:c9:16:53:ee:5e:17:00:bb:35:a3:db:69:fa:a3:
62:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:35:01:AF:41:D9:3E:4E:30:79:95:AF:3B:76:07:B6:BD:4A:99:AB
X509v3 Authority Key Identifier:
keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/YzUBr0HZPk4weZWvO3YHtr1Kmas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.252.1.0/24
46.252.3.0/24
46.252.5.0/24
46.252.7.0-46.252.10.255
Signature Algorithm: sha256WithRSAEncryption
25:44:9a:be:a1:09:fb:05:98:c8:cb:a5:88:79:5c:df:62:0b:
a7:97:c8:7d:b3:4c:bd:90:8c:35:d0:6e:fa:c9:3f:64:bd:37:
d7:d2:e9:9b:30:32:17:ec:05:88:39:f4:84:85:ca:b1:e1:90:
a0:ce:13:ba:d0:54:d6:c6:cd:d5:a7:55:60:fa:5d:23:0d:b1:
92:ce:64:b5:ef:6e:f6:8d:68:d8:05:92:a7:5d:5c:8c:99:53:
1b:1c:ba:c6:66:03:4f:70:15:61:d4:4f:15:e8:93:30:ff:95:
5d:1a:bd:63:46:fc:ab:5f:9c:2d:84:3e:f4:ac:d0:7d:66:41:
8d:eb:3d:d5:af:3b:cf:4d:60:00:30:85:45:b6:58:a7:51:0b:
b0:a1:14:8d:e6:90:fe:58:58:fa:13:e2:8b:fa:76:eb:64:d3:
a6:8d:2b:5a:26:52:a9:ec:49:6a:52:e7:2f:9e:d1:66:e7:0f:
d5:41:f5:07:0b:4d:20:91:43:5d:0d:93:a0:0e:01:00:5c:25:
a1:7a:34:d3:87:51:b6:ad:25:57:58:bd:2a:b5:2a:d7:86:a6:
9b:20:48:bd:5f:cd:f4:d4:e7:aa:63:06:eb:0f:94:51:1c:fc:
c5:bf:51:53:91:c7:5b:96:ca:35:41:b5:2d:fc:8b:f6:d0:e7:
7f:7b:49:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 09:24:02 2024 by rpki-client on console-ams.rpki-client.org