Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/eDr2Xw8cN5MipKVj-Y4pQesDEWs.roa
File: eDr2Xw8cN5MipKVj-Y4pQesDEWs.roa (raw, json)
Hash identifier: n+TDE/EbviEd1/ah9ttfQhFKTD2JIxyG3evalZ+edBM=
Subject key identifier: 78:3A:F6:5F:0F:1C:37:93:22:A4:A5:63:F9:8E:29:41:EB:03:11:6B
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 018608493AC6ABC903A40EFC6E0EF2062EF5
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/eDr2Xw8cN5MipKVj-Y4pQesDEWs.roa
Signing time: Tue 31 Jan 2023 14:44:22 +0000
ROA not before: Tue 31 Jan 2023 14:44:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206346
IP address blocks: 46.253.11.0/24 maxlen: 24
46.253.13.0/24 maxlen: 24
46.253.14.0/24 maxlen: 24
46.253.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:08:49:3a:c6:ab:c9:03:a4:0e:fc:6e:0e:f2:06:2e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jan 31 14:44:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=783af65f0f1c379322a4a563f98e2941eb03116b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d5:24:f6:cc:72:aa:a8:25:a6:49:82:de:59:
ac:b6:94:20:57:23:7a:b3:c3:2f:5c:dc:c2:05:63:
12:c8:37:35:7c:1f:0f:91:7d:84:1c:93:b8:f7:84:
fc:b0:30:08:71:7c:18:76:77:af:5f:15:af:3a:7d:
d8:f6:8a:83:aa:ad:72:29:98:73:56:55:e0:7b:09:
49:55:60:20:e8:1d:89:78:93:50:84:d4:7b:f8:d8:
6e:4a:11:57:c8:81:41:3a:db:13:ee:8d:3f:8a:35:
6f:68:c0:98:cc:ae:4d:49:3a:a6:fc:cd:f3:ed:3e:
b6:bd:d2:65:a4:c4:c2:c9:74:94:23:97:f2:63:22:
c8:e9:57:ad:a3:3d:8d:88:40:80:10:eb:e9:5d:4a:
6a:cc:31:46:68:ba:86:4c:8f:04:0c:02:eb:2d:a9:
6e:bc:c1:82:e8:10:58:f1:42:9a:7e:ed:c2:97:aa:
de:1e:65:d1:68:72:dd:1d:7f:18:ca:69:69:43:15:
8d:00:4e:82:ec:f7:41:5e:4c:cd:81:ca:4e:8c:e8:
0f:af:76:7b:f7:e8:25:0c:1e:3d:c2:62:18:42:2e:
2e:5a:ac:ca:5d:e2:ff:06:e2:17:7b:4b:31:27:5d:
cb:30:69:a9:63:9d:c1:ae:07:54:f2:28:c0:cc:c8:
d3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3A:F6:5F:0F:1C:37:93:22:A4:A5:63:F9:8E:29:41:EB:03:11:6B
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/eDr2Xw8cN5MipKVj-Y4pQesDEWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.11.0-46.253.14.255
Signature Algorithm: sha256WithRSAEncryption
1c:a2:0f:05:df:65:a0:b0:63:8c:c9:23:69:84:94:66:06:78:
02:19:37:66:48:b1:23:3c:f4:9e:57:08:51:67:69:3a:70:9a:
b9:3e:2e:64:65:39:9d:8d:bf:3b:82:90:83:5f:78:c9:93:5a:
ed:ac:3a:fe:17:3f:11:53:15:a9:f4:20:4a:9c:a0:9a:81:49:
70:a6:26:c4:49:99:36:37:3e:cf:dd:71:e8:30:d2:07:3f:5a:
b3:e4:2f:52:d0:2b:92:3e:bb:09:28:07:a2:e2:e0:36:a9:2f:
26:d0:62:e9:9e:30:40:bd:f0:10:be:c5:1d:68:24:90:29:01:
2e:b8:c5:33:67:0d:96:b8:a4:10:62:d3:ea:ff:8a:e4:c3:6b:
a3:de:db:3f:13:23:0c:a7:a2:46:71:36:47:d0:82:58:98:2b:
78:e0:a0:61:76:b6:82:b4:ed:e8:19:84:40:5d:bb:8d:1d:d5:
95:1f:18:ca:c6:90:f9:83:48:8d:34:6f:3f:5b:96:b1:20:42:
6f:0f:ac:77:de:62:27:50:23:ae:c3:2c:a2:0f:30:01:cd:e8:
58:5f:44:7c:46:22:7a:33:17:ad:a4:1b:3f:6f:0f:61:8a:7d:
67:1a:02:9d:ca:c2:20:b9:71:da:13:3d:f3:47:a9:24:04:80:
12:06:39:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:06 2024 by rpki-client on console-fra.rpki-client.org