Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/DPB6s4BX2-BCagymHR1Abs_SA9Y.roa
File: DPB6s4BX2-BCagymHR1Abs_SA9Y.roa (raw, json)
Hash identifier: /E4l0ze6HFQ2wqFGLPHAkuc/VHw6UtCHabbLodUiQO8=
Subject key identifier: 0C:F0:7A:B3:80:57:DB:E0:42:6A:0C:A6:1D:1D:40:6E:CF:D2:03:D6
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0191526CFE6580ECCF0CAEF2333EAFFE8B4A
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/DPB6s4BX2-BCagymHR1Abs_SA9Y.roa
Signing time: Wed 14 Aug 2024 19:46:00 +0000
ROA not before: Wed 14 Aug 2024 19:46:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48031
IP address blocks: 46.149.173.0/24 maxlen: 24
91.246.56.0/24 maxlen: 24
91.246.62.0/24 maxlen: 24
91.247.169.0/24 maxlen: 24
185.225.190.0/24 maxlen: 24
194.59.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Aug 2024 18:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:52:6c:fe:65:80:ec:cf:0c:ae:f2:33:3e:af:fe:8b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 14 19:46:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cf07ab38057dbe0426a0ca61d1d406ecfd203d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:84:46:12:13:97:39:11:23:e0:7f:19:a2:f0:
f2:36:e8:62:d3:7c:ad:38:7c:42:e9:5f:d7:2b:28:
6c:ab:5d:23:31:34:c8:06:54:0a:f2:59:bc:19:e5:
e6:72:01:18:96:af:c6:5c:e9:b0:c2:29:45:c1:1b:
d7:f9:ea:05:72:64:c2:75:f9:f6:e3:0d:96:b2:94:
ea:c2:d2:5c:bb:5d:2d:bf:7b:96:79:44:b8:80:b7:
95:f9:93:03:56:4c:60:08:63:1d:11:dd:57:5a:04:
87:93:29:25:69:99:ef:43:a2:b8:e3:8e:0e:ac:d8:
f9:c3:83:50:25:74:ee:4b:2a:d6:35:3a:91:3c:8c:
ca:ee:11:94:8a:e6:dd:ef:c2:ee:27:4c:48:bc:4f:
33:d7:61:27:90:d5:a5:e9:f7:af:e5:f3:27:bb:2e:
b5:07:22:1e:5e:ba:63:23:c5:f2:bc:7a:10:cd:4a:
f2:38:f9:3f:d6:ed:cf:8c:d7:7b:f0:38:94:df:d6:
18:54:90:70:8e:85:0a:f3:87:90:cd:96:be:d6:e9:
c5:35:55:10:2a:00:57:45:ee:e7:6e:72:83:b7:7f:
a3:f0:f5:1e:7f:0e:92:a2:b6:f7:1d:84:ef:86:d4:
55:92:1a:6a:7f:7b:65:33:29:c7:ed:bd:25:1a:80:
8e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F0:7A:B3:80:57:DB:E0:42:6A:0C:A6:1D:1D:40:6E:CF:D2:03:D6
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/DPB6s4BX2-BCagymHR1Abs_SA9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.173.0/24
91.246.56.0/24
91.246.62.0/24
91.247.169.0/24
185.225.190.0/24
194.59.246.0/24
Signature Algorithm: sha256WithRSAEncryption
95:03:aa:2c:8d:18:3d:da:7f:c5:59:b9:c9:4c:9a:f9:24:23:
2c:b9:64:5f:95:8f:69:7f:cf:4d:37:3d:de:c9:78:8e:cc:d8:
8b:05:4f:f6:97:1e:6c:b5:9f:cb:d6:7e:42:5b:df:ea:2c:f2:
9a:60:5a:1a:20:e1:6d:a6:f4:cb:35:17:a3:f2:03:d0:5d:da:
cc:1d:bf:b8:5d:8d:a6:f2:bb:36:5e:7e:b8:22:ff:c1:f9:05:
80:5d:06:74:5e:32:49:23:e5:6c:dd:b8:e1:47:4d:12:27:c3:
d2:2e:e0:04:c5:36:b5:12:b7:4a:ca:2e:00:71:31:02:2f:14:
e6:d4:35:37:ad:f8:b5:c3:81:b6:d3:26:61:43:ae:89:fd:ad:
e3:e2:7b:27:a4:97:6d:5e:d3:af:99:97:5b:a1:ad:7d:2c:d3:
cd:65:fa:93:b4:b4:f7:32:f4:5a:18:54:8e:26:30:68:b2:7e:
48:95:9a:c6:84:35:56:6a:ed:ba:aa:38:95:0c:a4:3a:ef:d4:
c2:88:fd:69:cf:69:ed:af:ff:a7:d8:24:2a:cb:73:b4:08:2c:
22:53:8d:94:6d:c0:78:ab:bc:14:51:13:32:dc:9d:a6:2c:95:
41:ad:03:aa:ea:c7:89:65:3e:ce:9f:49:9d:2b:68:62:0b:30:
87:ce:69:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 23:31:40 2024 by rpki-client on console-ams.rpki-client.org