Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/IR3QRlowSMWu40lsWMl4gKHhl54.roa
File: IR3QRlowSMWu40lsWMl4gKHhl54.roa (raw, json)
Hash identifier: 9GYKiY+x43mWsRp+HelwJgenwMoGx2Z4PkwBUn9lMCA=
Subject key identifier: 21:1D:D0:46:5A:30:48:C5:AE:E3:49:6C:58:C9:78:80:A1:E1:97:9E
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018E7F6FC2AB398B5BE171CA11E60C0B2AD6
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/IR3QRlowSMWu40lsWMl4gKHhl54.roa
Signing time: Wed 27 Mar 2024 10:23:34 +0000
ROA not before: Wed 27 Mar 2024 10:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212667
IP address blocks: 46.174.192.0/24 maxlen: 24
46.174.193.0/24 maxlen: 24
46.174.194.0/24 maxlen: 24
46.174.195.0/24 maxlen: 24
46.174.196.0/24 maxlen: 24
46.174.197.0/24 maxlen: 24
46.174.198.0/24 maxlen: 24
46.174.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 15:56:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7f:6f:c2:ab:39:8b:5b:e1:71:ca:11:e6:0c:0b:2a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Mar 27 10:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=211dd0465a3048c5aee3496c58c97880a1e1979e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8c:95:aa:dd:f9:89:50:88:db:08:88:65:59:
f0:b3:4d:d2:7a:57:80:51:de:73:4b:5f:2e:dc:cb:
4b:5c:d4:69:a5:98:55:d4:f5:9e:74:7d:59:24:08:
87:bd:34:a0:a4:ca:51:0f:49:e0:98:3f:76:6b:5a:
3b:34:45:f9:b0:39:ab:fe:6a:d3:0d:29:af:d4:3c:
e4:1c:58:23:fe:c0:6c:49:6d:6c:ed:17:b2:2f:81:
30:55:02:6b:8c:d0:6a:d0:b0:3c:a9:b1:5d:4a:3a:
7b:1a:91:ac:92:f8:c1:1d:12:a4:ce:dd:75:28:12:
29:33:1e:e8:51:03:da:86:69:d8:4f:28:5b:3c:08:
e1:e3:8c:f9:16:d3:83:fb:c9:56:7c:b3:2f:b0:ec:
72:0e:50:83:01:0c:62:9d:36:4a:68:3c:22:96:b3:
7d:1b:58:b3:4c:c2:d9:fb:2a:68:8b:6b:11:56:bc:
9f:20:78:2d:a9:3c:10:bb:3a:5e:92:57:d3:7b:fb:
aa:7d:7b:70:57:ad:5c:e1:3d:a6:e3:54:01:d2:78:
3e:0a:18:5b:19:bc:13:ae:e1:87:f1:22:de:92:d9:
55:1d:56:44:c2:0e:6c:c2:47:52:9f:55:fb:cf:40:
22:a2:dc:85:64:b5:ce:72:09:95:23:7d:f4:e7:3a:
55:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1D:D0:46:5A:30:48:C5:AE:E3:49:6C:58:C9:78:80:A1:E1:97:9E
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/IR3QRlowSMWu40lsWMl4gKHhl54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.192.0/21
Signature Algorithm: sha256WithRSAEncryption
03:3e:b7:4f:c8:97:16:ee:d3:5f:1d:64:f9:ec:6e:6c:69:6e:
38:b3:71:47:33:b2:ff:21:06:77:c3:a1:44:94:21:de:3a:cd:
62:1c:d4:ea:ff:44:67:e6:02:d9:fa:50:db:21:3f:dc:d8:38:
fe:f8:a3:86:4c:b2:08:81:eb:57:b0:5f:80:cd:30:a1:4b:46:
8b:0d:c2:aa:c2:01:dc:ab:ac:92:5c:ce:70:1e:91:33:f2:3f:
62:2f:65:12:61:2e:b1:f5:86:37:d8:db:db:73:f2:aa:b1:73:
55:89:18:65:9a:71:8b:63:b1:d8:61:89:69:67:03:0e:1b:56:
eb:5e:34:ba:03:34:46:5e:54:6e:9b:31:aa:1c:8d:a5:76:13:
db:ab:fb:1a:6c:dc:f9:6d:91:68:9c:77:2d:85:5e:b0:56:56:
21:05:fe:6e:28:c5:1d:69:ff:40:f7:d9:56:33:f1:76:a1:0f:
03:cf:9c:07:15:fb:7b:25:db:9c:46:94:56:1a:c0:93:23:c4:
30:c3:78:9d:64:9e:be:db:66:cf:54:e7:2b:f4:21:bc:a2:68:
cc:c2:5b:78:59:c9:38:80:c6:15:bc:ed:09:95:2f:b3:53:09:
15:9a:c2:b4:cb:18:c5:62:31:31:60:28:18:76:b8:97:a5:a1:
ce:fa:a0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:51 2024 by rpki-client on console-ams.rpki-client.org