Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/n8udhfviaORFkICuLivk8rXfKoo.roa
File: n8udhfviaORFkICuLivk8rXfKoo.roa (raw, json)
Hash identifier: W1gmbfj5pykdeKLQarZEUypOm3zgmuzfjUr8dghDqj4=
Subject key identifier: 9F:CB:9D:85:FB:E2:68:E4:45:90:80:AE:2E:2B:E4:F2:B5:DF:2A:8A
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018EF0A0FCDE134188D9543201F2CDC3CDD1
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/n8udhfviaORFkICuLivk8rXfKoo.roa
Signing time: Thu 18 Apr 2024 09:54:26 +0000
ROA not before: Thu 18 Apr 2024 09:54:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5650
IP address blocks: 46.20.96.0/24 maxlen: 24
46.20.98.0/24 maxlen: 24
46.20.99.0/24 maxlen: 24
46.20.102.0/24 maxlen: 24
46.20.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 07:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f0:a0:fc:de:13:41:88:d9:54:32:01:f2:cd:c3:cd:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Apr 18 09:54:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fcb9d85fbe268e4459080ae2e2be4f2b5df2a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:71:44:7b:fe:18:fe:20:c6:de:97:70:c3:c9:
c7:53:9a:ad:79:b1:e3:aa:69:29:c1:0d:2c:08:02:
e9:19:5e:bd:e5:38:e6:32:8f:fa:52:c1:29:a4:d2:
4f:c0:d1:e2:f7:41:5f:04:02:80:2c:8e:88:c3:2f:
e8:ef:48:ee:ba:ea:f9:53:85:c7:bd:5d:2e:20:4f:
fb:84:5d:6a:eb:86:63:e7:49:2c:65:50:fb:b5:e0:
a1:89:39:56:1f:cf:18:c9:b1:92:aa:37:24:43:a2:
fe:e7:bc:d5:2e:de:c0:b4:78:73:52:c8:b0:02:a2:
4d:f7:73:fa:5c:f8:66:b8:63:e1:17:aa:71:7d:fe:
bd:42:61:91:99:bb:a8:a9:fd:d5:98:30:b7:9e:c8:
ea:6e:50:dd:bc:df:11:9b:f4:ba:06:96:79:9d:93:
f5:b2:8f:27:ff:6f:b6:8e:a2:59:18:ad:62:42:12:
51:0d:77:a4:13:9b:fb:f9:b0:d1:5b:de:6e:12:26:
ea:a6:d8:a5:9b:b3:61:db:8a:db:8d:b3:4d:7b:1b:
f7:43:f3:9c:d2:e2:1f:16:24:ad:8a:05:e1:39:e8:
54:c5:d0:77:78:65:b2:a7:5a:7d:7e:32:ae:10:66:
8a:44:88:89:c1:45:69:34:a5:b2:bb:fc:35:14:d9:
4a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CB:9D:85:FB:E2:68:E4:45:90:80:AE:2E:2B:E4:F2:B5:DF:2A:8A
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/n8udhfviaORFkICuLivk8rXfKoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.96.0/24
46.20.98.0/23
46.20.102.0/24
46.20.104.0/24
Signature Algorithm: sha256WithRSAEncryption
37:21:32:f5:43:50:73:85:fd:3c:0b:f9:36:ae:c5:26:f5:5a:
dc:b6:db:91:aa:a3:0f:30:26:c8:d3:d5:ce:2f:9e:30:25:64:
57:f2:0b:f4:85:90:8c:8c:da:c0:f0:40:f7:c2:ae:34:10:d9:
76:4a:e7:9a:c5:d3:30:6c:a7:5e:bb:cc:55:f1:8f:34:ce:ce:
84:41:cf:f1:97:2d:86:25:26:70:29:96:fd:81:98:1a:30:7e:
ca:e8:2d:d2:d3:4b:54:3e:96:35:16:98:02:9c:dc:b8:1a:ac:
64:67:b3:f7:07:68:cf:05:d0:9f:56:52:fb:c4:e5:e7:f0:79:
66:87:b9:5a:22:9f:88:1b:8c:61:5a:79:e6:06:01:5b:fb:0b:
0e:f1:63:e2:9a:16:20:09:c8:e9:e4:d8:1e:76:49:b5:26:4b:
67:8f:4d:b6:60:aa:12:62:40:f4:ed:8f:dd:6e:e8:5e:45:a7:
42:c1:9c:41:ff:7a:4e:00:5a:45:25:9f:d4:e6:15:75:ac:a5:
65:cb:d5:61:a2:23:f3:8e:ac:60:5c:ab:a3:bb:3d:f0:fb:1b:
78:cc:e2:1a:2f:6e:28:71:85:7e:ea:1e:f6:27:cc:f1:1a:43:
c0:da:3e:b5:0e:58:14:a9:10:c3:9d:9a:9e:fc:2a:86:26:22:
7d:fe:5a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 09:54:28 2024 by rpki-client on console-ams.rpki-client.org