Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/3Eix-UwtRpQbhdUfQiygUQrA-78.roa
File: 3Eix-UwtRpQbhdUfQiygUQrA-78.roa (raw, json)
Hash identifier: aWf/DmINwa4IbmBOpczavjj1C/iuumgpZM189/KHdng=
Subject key identifier: DC:48:B1:F9:4C:2D:46:94:1B:85:D5:1F:42:2C:A0:51:0A:C0:FB:BF
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018EA90A950569BFC76EEE3826473A60A874
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/3Eix-UwtRpQbhdUfQiygUQrA-78.roa
Signing time: Thu 04 Apr 2024 12:17:06 +0000
ROA not before: Thu 04 Apr 2024 12:17:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211557
IP address blocks: 46.38.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 06:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a9:0a:95:05:69:bf:c7:6e:ee:38:26:47:3a:60:a8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Apr 4 12:17:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc48b1f94c2d46941b85d51f422ca0510ac0fbbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3d:4c:50:fb:0e:be:a6:7b:e8:f0:34:56:e6:
57:53:3b:12:4c:85:3f:9a:22:3d:30:ab:70:4f:3c:
71:0b:d5:42:3a:1d:24:b1:22:c9:ba:88:42:a3:43:
d0:6a:b8:b7:e3:2e:9d:d8:03:16:b2:6d:17:b0:16:
d2:61:19:04:94:65:b6:0d:44:a9:ed:59:ab:82:c1:
86:23:21:cf:f1:67:94:20:fd:df:70:87:8b:76:a1:
75:01:41:9a:03:82:25:fb:e6:49:8d:80:6e:48:b4:
f0:70:50:23:37:68:80:99:2b:4f:2f:ce:99:76:06:
1a:91:7c:f1:87:72:0b:66:80:43:2c:c0:1a:be:bc:
96:ab:97:ec:63:c8:ff:16:10:2a:70:6b:a1:64:8e:
36:67:3a:3e:ae:6f:49:60:54:d2:8a:e2:e5:c3:74:
8b:2c:f2:c9:fe:7c:39:05:ce:21:87:b6:40:6a:62:
0c:ed:c4:b5:39:8c:0d:ea:8e:dd:93:bb:52:88:ce:
6d:6c:f7:7b:37:f1:51:98:c7:7f:19:2f:4b:87:97:
45:52:e7:8c:25:01:20:49:e8:93:51:63:fb:29:9c:
2b:3c:79:d9:8e:9c:a3:4d:2a:3f:98:bb:06:21:2f:
86:8d:b5:28:90:9c:78:90:fb:32:a1:70:f5:c9:49:
08:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:48:B1:F9:4C:2D:46:94:1B:85:D5:1F:42:2C:A0:51:0A:C0:FB:BF
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/3Eix-UwtRpQbhdUfQiygUQrA-78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.152.0/24
Signature Algorithm: sha256WithRSAEncryption
60:a3:0e:0e:3d:2d:b4:04:e9:ab:f6:05:d7:f9:12:76:c0:dd:
04:f2:52:b6:96:16:ac:8e:43:4f:b9:af:b3:97:9f:37:46:a0:
4f:38:7a:c6:59:15:c8:d9:1b:89:22:09:a3:d7:b5:79:e7:9a:
81:99:6a:d2:b0:0a:4e:3c:42:a7:ae:8c:6a:38:7d:ae:df:26:
cd:ac:a2:e4:03:bb:d0:85:7b:00:3e:e3:15:62:26:a1:17:81:
45:ae:c8:f3:ca:a1:e1:9e:ce:22:66:0a:4e:fc:9e:4d:75:ce:
1d:27:83:cf:a3:46:eb:61:c5:ca:72:f9:b7:e6:57:04:07:51:
c9:79:29:f6:11:b7:aa:be:31:b7:09:3f:d6:8f:f3:33:e2:01:
f6:de:e6:97:93:e4:03:3b:db:de:af:21:3d:89:9b:1a:ab:9d:
7b:33:45:a5:d8:2c:db:ab:05:ae:9b:da:43:86:03:cf:a2:1a:
f2:29:88:83:2b:80:a1:b6:96:b1:e8:bb:f9:b7:6f:e0:ab:a5:
b0:40:7d:4d:49:85:00:20:8b:71:59:94:44:55:b8:7f:d6:82:
ab:d0:7b:3f:6d:e3:32:85:f7:5b:ef:94:e7:ae:f3:c2:e3:08:
aa:83:f8:aa:3d:21:49:f7:24:6c:0f:05:79:93:e0:b0:a9:1b:
ec:13:ab:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:06 2024 by rpki-client on console-ams.rpki-client.org