Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/4RQXnZmO0kuGUKuqf4mVFu9_5HM.roa
File: 4RQXnZmO0kuGUKuqf4mVFu9_5HM.roa (raw, json)
Hash identifier: myyIT0/luwF7tFjBClBT6x3ubLqh6dos8hNWuQjRE2Y=
Subject key identifier: E1:14:17:9D:99:8E:D2:4B:86:50:AB:AA:7F:89:95:16:EF:7F:E4:73
Certificate issuer: /CN=51f866f32b47c69d478ad95354e257e51a236a57
Certificate serial: 018570674F663D5BAA12B69B97443AAB7893
Authority key identifier: 51:F8:66:F3:2B:47:C6:9D:47:8A:D9:53:54:E2:57:E5:1A:23:6A:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ufhm8ytHxp1HitlTVOJX5Rojalc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/4RQXnZmO0kuGUKuqf4mVFu9_5HM.roa
Signing time: Mon 02 Jan 2023 02:54:56 +0000
ROA not before: Mon 02 Jan 2023 02:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197530
IP address blocks: 158.255.92.0/23 maxlen: 24
193.138.118.0/24 maxlen: 24
46.21.208.0/20 maxlen: 20
94.232.152.0/21 maxlen: 21
158.255.88.0/21 maxlen: 24
2a02:2928::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:4f:66:3d:5b:aa:12:b6:9b:97:44:3a:ab:78:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f866f32b47c69d478ad95354e257e51a236a57
Validity
Not Before: Jan 2 02:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e114179d998ed24b8650abaa7f899516ef7fe473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:62:db:6f:a0:84:50:9e:80:96:20:03:48:68:
d7:aa:30:f3:c7:a8:f1:41:83:9a:d8:f3:b7:cd:f9:
00:a0:2a:5c:7a:3c:b0:62:f8:32:4a:ec:76:0b:df:
7e:55:1d:c0:4a:b8:1a:59:f8:d3:5f:8c:5d:b2:13:
00:6f:e7:6b:5a:6e:8e:a8:ae:f9:9c:2c:51:d2:05:
30:1d:1a:84:fe:09:83:2e:77:1d:eb:e9:26:1d:8a:
24:a2:4c:21:d8:0e:a1:cc:6a:e3:e1:a0:26:91:4a:
55:4b:68:9d:82:6f:9b:a1:10:25:cf:b3:52:cd:ed:
fa:6c:d0:c1:a7:bf:cb:59:18:02:e5:cc:f6:f5:99:
52:11:49:3b:cc:18:7a:8e:15:ea:dd:cc:5b:2d:62:
c0:a4:37:a7:fe:ca:ac:14:01:c0:dd:80:4d:8e:1e:
49:04:52:9a:e4:1e:06:6a:72:34:b3:81:92:d2:a9:
c7:e3:06:16:cd:d1:77:b2:c6:dc:f2:1a:da:21:d7:
06:62:fa:14:cf:e1:9b:dc:c0:31:15:70:c2:7f:d4:
88:c3:93:ef:30:b3:38:33:3e:ce:6b:ce:ad:23:4c:
ed:15:21:95:cd:f5:fb:23:90:6a:a5:ad:ef:28:e8:
38:db:ea:e5:7a:99:ca:9d:db:f8:13:c1:b4:2c:eb:
c9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:14:17:9D:99:8E:D2:4B:86:50:AB:AA:7F:89:95:16:EF:7F:E4:73
X509v3 Authority Key Identifier:
keyid:51:F8:66:F3:2B:47:C6:9D:47:8A:D9:53:54:E2:57:E5:1A:23:6A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ufhm8ytHxp1HitlTVOJX5Rojalc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/4RQXnZmO0kuGUKuqf4mVFu9_5HM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/Ufhm8ytHxp1HitlTVOJX5Rojalc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.208.0/20
94.232.152.0/21
158.255.88.0/21
193.138.118.0/24
IPv6:
2a02:2928::/32
Signature Algorithm: sha256WithRSAEncryption
28:3c:f8:46:33:39:2e:8d:8b:99:71:f8:14:71:fc:ae:9d:21:
6e:ac:85:3e:cf:8a:43:ed:9a:32:3f:7c:e4:39:9a:11:60:f4:
47:80:d6:ec:ba:83:c1:32:50:24:48:84:3a:27:35:5f:f9:46:
ad:38:24:82:98:98:28:d5:3b:6d:4f:60:c3:64:aa:ef:e7:8e:
c1:d2:fc:54:8a:49:82:73:f2:7b:f7:cd:e9:6b:90:d2:d0:a1:
c0:d5:15:0f:d7:7d:4c:47:c5:fc:21:0e:4d:ff:76:82:11:a9:
a8:83:48:0a:8a:df:74:9a:89:e3:56:f1:a0:7e:78:f0:ae:c1:
ec:fb:18:f0:ce:ee:da:93:29:18:8e:95:6a:52:3c:ef:d3:7e:
d7:6b:38:52:88:a4:d4:9d:dc:dc:bd:ce:a7:90:ef:7a:37:72:
a4:42:b0:c3:38:fc:ca:3b:42:0d:0d:71:5b:f3:37:08:75:35:
75:3e:cf:64:77:9a:77:3d:e8:f9:cb:a0:1f:ae:aa:64:ef:8f:
cc:d6:98:4a:0a:33:e2:91:3d:2d:68:e8:d3:83:8a:26:4d:15:
4c:49:00:23:80:80:a1:15:60:39:72:66:bf:dd:1b:04:13:c1:
04:2e:bc:bd:d3:f2:30:45:da:f9:3c:e2:af:5c:44:64:d7:b2:
05:97:63:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:17 2024 by rpki-client on console-ams.rpki-client.org