Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CsAEefL0r_6KOdtyzJKy38zmHJw.roa
File: CsAEefL0r_6KOdtyzJKy38zmHJw.roa (raw, json)
Hash identifier: c4iqH6MoPOPtwwYhxd4zrxsYQLIeDPjYCdUEcZTbLBk=
Subject key identifier: 0A:C0:04:79:F2:F4:AF:FE:8A:39:DB:72:CC:92:B2:DF:CC:E6:1C:9C
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0191526CFD8A1874BA582341D454588E3226
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CsAEefL0r_6KOdtyzJKy38zmHJw.roa
Signing time: Wed 14 Aug 2024 19:46:00 +0000
ROA not before: Wed 14 Aug 2024 19:46:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41957
IP address blocks: 46.16.37.0/24 maxlen: 24
46.253.128.0/24 maxlen: 24
62.3.48.0/24 maxlen: 24
91.242.254.0/24 maxlen: 24
146.19.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Aug 2024 18:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:52:6c:fd:8a:18:74:ba:58:23:41:d4:54:58:8e:32:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 14 19:46:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ac00479f2f4affe8a39db72cc92b2dfcce61c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:87:86:5c:70:27:2e:1e:c2:b8:0c:4e:81:6f:
42:ee:4c:29:83:ba:89:2d:8d:1d:28:ab:19:34:56:
ef:3c:89:55:3d:83:e2:cc:8a:a0:3e:05:38:b8:d5:
be:6d:cc:2d:5f:84:98:47:8f:20:d0:ee:98:e8:82:
02:f5:ab:d3:f3:b3:97:80:85:08:45:e8:ee:d3:61:
1c:81:59:d2:be:41:90:83:05:81:81:fd:08:fd:68:
86:fe:e0:11:0f:f5:05:4f:98:cd:83:a1:e6:32:2f:
cf:79:fc:f4:65:59:38:45:ef:6c:2e:ed:e5:81:86:
a9:3a:0f:fe:22:ff:93:d9:43:59:6d:7a:3b:c8:e4:
7b:08:76:f4:37:ee:47:80:ff:e2:26:c7:2e:93:2d:
f2:54:e6:1f:b2:46:58:52:76:2d:31:69:f6:3e:8b:
a8:06:e6:33:2e:83:31:df:98:21:12:12:27:cf:52:
f5:2a:5e:5d:02:aa:72:0a:d6:ef:5b:1c:3e:b8:2d:
13:f6:e7:3f:89:41:2d:fc:28:da:b9:4e:b8:1e:c8:
7e:03:0b:1d:11:5f:e5:b1:7c:10:7c:98:45:f7:34:
e7:92:48:01:77:09:79:c8:9c:0a:d8:f2:30:1e:12:
97:83:7c:d5:59:62:5f:03:98:c1:17:f2:bc:92:db:
d3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C0:04:79:F2:F4:AF:FE:8A:39:DB:72:CC:92:B2:DF:CC:E6:1C:9C
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CsAEefL0r_6KOdtyzJKy38zmHJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.37.0/24
46.253.128.0/24
62.3.48.0/24
91.242.254.0/24
146.19.178.0/24
Signature Algorithm: sha256WithRSAEncryption
74:48:e4:db:2f:5d:d3:ec:05:ed:37:cd:3d:37:40:8d:22:72:
1b:ce:28:ca:e2:51:55:59:1e:ff:8e:4f:c9:90:62:fe:bb:30:
b3:e5:15:47:ad:cb:e9:8c:fd:23:d0:34:0a:be:e7:95:a4:b3:
cd:17:d1:a5:08:f2:e3:ab:59:47:b9:c6:79:53:9d:79:c9:ed:
93:49:07:7f:b9:36:75:4d:ae:a9:cc:0e:bc:97:1c:98:bb:b2:
53:b0:4a:dd:2f:fb:d0:62:4b:92:72:f5:07:e9:48:76:20:76:
17:26:48:bc:57:a5:86:a2:f0:ca:5a:23:43:ad:14:5c:4c:d5:
0c:b3:e7:61:d5:1c:9e:17:dc:54:45:2d:d5:77:d9:63:65:b6:
7c:c1:78:ea:67:11:5b:ad:04:1d:da:c2:da:e5:db:74:a8:b3:
3c:2d:70:63:a7:5e:2c:12:7e:fc:40:92:9e:5a:e4:90:0b:24:
61:d9:73:af:82:01:34:7b:59:8c:7f:ab:6c:91:f2:9f:05:08:
bd:49:47:56:c5:5f:42:5e:4b:e5:04:42:91:11:d3:e1:d4:9d:
da:20:53:d7:9f:9f:36:96:12:c3:6e:84:d7:e2:f3:f0:89:74:
5b:c7:4d:33:0e:44:a3:51:47:a1:69:70:18:ce:ce:7e:84:56:
2a:8e:68:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 23:31:40 2024 by rpki-client on console-ams.rpki-client.org