Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/0bJsekpErMM6f7rn1RFEsjvM27k.roa
File: 0bJsekpErMM6f7rn1RFEsjvM27k.roa (raw, json)
Hash identifier: V5eZGkT05uQHV+0cCmG3ICbsuyUGxrs0vmV+G4mGXjU=
Subject key identifier: D1:B2:6C:7A:4A:44:AC:C3:3A:7F:BA:E7:D5:11:44:B2:3B:CC:DB:B9
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0191487CBFF7EA06B31CED8B8177C19B1048
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/0bJsekpErMM6f7rn1RFEsjvM27k.roa
Signing time: Mon 12 Aug 2024 21:27:00 +0000
ROA not before: Mon 12 Aug 2024 21:27:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48031
IP address blocks: 46.149.173.0/24 maxlen: 24
91.246.56.0/24 maxlen: 24
91.246.62.0/24 maxlen: 24
91.247.169.0/24 maxlen: 24
194.59.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Aug 2024 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:48:7c:bf:f7:ea:06:b3:1c:ed:8b:81:77:c1:9b:10:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 12 21:27:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1b26c7a4a44acc33a7fbae7d51144b23bccdbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:01:3f:1b:e6:cb:9b:3c:f3:6e:a3:92:b9:
39:2d:f3:32:36:79:43:13:2a:59:bb:57:ce:6d:12:
bf:fe:4c:40:cb:42:72:23:30:46:29:bb:1c:d1:22:
a8:b9:56:fa:ee:34:6a:5e:76:ad:49:d8:a5:54:1c:
ea:3d:f7:b0:1d:d9:6f:21:77:d0:05:3a:14:35:e2:
db:cd:f0:5d:db:bf:05:e1:59:d2:3a:29:81:a4:63:
1d:1d:b2:79:a6:60:d3:79:bc:43:83:d5:fc:c7:5e:
cf:d0:5d:80:5d:1f:10:a8:88:e3:6f:d1:76:35:9f:
0d:89:9f:fc:e5:93:42:37:5f:6c:b2:37:43:54:39:
e7:1a:f1:5f:ae:e1:c2:30:c6:91:30:b0:77:ed:24:
41:73:14:c4:84:b3:97:e7:a7:1e:2f:8b:d5:83:a7:
52:c3:5e:87:9d:a3:cc:45:0e:91:67:5e:97:9c:1b:
be:93:82:13:f5:5e:67:91:36:49:13:9c:f9:c3:df:
ac:ed:20:9a:28:a1:6f:81:b7:8c:51:f0:d7:29:b7:
cd:5a:5d:ed:ea:aa:e8:51:4c:52:4d:9b:d0:13:12:
94:77:77:3d:bc:ff:59:b9:c8:c8:04:05:e0:27:dc:
50:56:a1:3c:21:bb:7e:2f:37:be:57:2d:60:c6:fb:
e1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B2:6C:7A:4A:44:AC:C3:3A:7F:BA:E7:D5:11:44:B2:3B:CC:DB:B9
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/0bJsekpErMM6f7rn1RFEsjvM27k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.173.0/24
91.246.56.0/24
91.246.62.0/24
91.247.169.0/24
194.59.246.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:4d:e8:e6:74:eb:7a:2c:37:a3:a2:14:58:a6:f4:84:1c:38:
21:34:be:be:42:dd:25:0b:3f:54:cf:f0:8a:b2:bd:98:fd:82:
f6:a0:d3:d8:c3:a1:3b:8d:53:a3:74:d3:e6:e5:b1:ef:a6:a7:
18:31:f0:1e:8d:59:3b:74:f3:3c:b8:fd:79:e2:4e:27:6b:df:
ed:0a:9a:60:7c:91:ea:60:85:f3:62:16:6a:e8:41:f9:1e:31:
0a:88:f6:cf:d8:8f:24:94:6c:c1:61:0c:ab:77:3e:45:4b:5e:
2a:09:d4:a0:0a:fe:37:1c:a4:01:af:ef:8f:4a:4a:da:29:fb:
be:0f:c6:a7:55:3f:df:b9:4a:44:02:c0:bf:33:72:f8:62:5c:
25:d5:0c:ce:a1:64:88:e5:bd:22:5d:76:c3:05:11:8d:e4:2d:
7c:c4:b1:cc:4d:52:d9:f1:0e:5b:35:29:9f:e7:23:e8:62:43:
fb:c3:8a:33:b0:81:f9:f7:2c:21:b6:6b:9b:b2:2c:aa:39:45:
42:f7:fd:24:fa:5a:1b:96:8d:64:aa:e1:21:e5:9c:89:70:22:
1a:21:69:32:2a:f5:5c:f4:ce:96:68:1f:08:bf:dd:45:1d:6b:
a8:24:71:c9:15:36:a2:c8:41:f7:89:42:1e:29:59:26:a5:f1:
e6:f7:cc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 22:30:40 2024 by rpki-client on console-fra.rpki-client.org