Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/4vsdkBNo2bbjTY9zZxY8RjX9umM.roa
File: 4vsdkBNo2bbjTY9zZxY8RjX9umM.roa (raw, json)
Hash identifier: ECBHy28FXuorS2bvnPtPev/bbDupUiN1HEiadAzxcwQ=
Subject key identifier: E2:FB:1D:90:13:68:D9:B6:E3:4D:8F:73:67:16:3C:46:35:FD:BA:63
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018EF0DB94805218083F831A472C1E9C59F2
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/4vsdkBNo2bbjTY9zZxY8RjX9umM.roa
Signing time: Thu 18 Apr 2024 10:58:25 +0000
ROA not before: Thu 18 Apr 2024 10:58:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 46.38.154.0/24 maxlen: 24
212.16.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 May 2024 08:35:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f0:db:94:80:52:18:08:3f:83:1a:47:2c:1e:9c:59:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Apr 18 10:58:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2fb1d901368d9b6e34d8f7367163c4635fdba63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:53:e6:32:1b:81:56:18:e4:7b:c9:e1:0c:5d:
b8:62:2e:72:c4:af:19:bd:ad:49:0a:cb:13:85:d6:
b1:a6:fa:27:2f:33:29:e6:24:56:07:31:3f:4d:7c:
b1:3b:4c:01:ee:55:b9:79:fd:b8:03:18:f7:28:61:
2f:49:c6:5a:c0:28:55:e9:bc:95:14:d3:dc:ee:8b:
21:3e:c1:62:e7:93:cd:da:b1:98:36:c7:11:02:ef:
8e:8c:8b:0c:bd:34:f7:a2:de:17:7e:9d:0e:89:d1:
69:11:48:ee:c8:2b:6e:ba:ee:76:82:7c:68:55:06:
73:f8:17:90:a6:ce:09:e1:bb:3d:5e:9c:bb:47:78:
8d:b3:d5:d9:c2:db:bc:a6:5c:43:ed:f7:45:ed:1d:
a1:60:c1:88:2a:9b:ac:81:57:8a:0c:88:ad:34:23:
d0:6b:3d:36:92:57:d2:0e:71:e4:c2:97:75:a5:10:
d4:42:4d:5a:e7:03:03:55:99:66:4b:6f:7a:c0:ed:
b1:a4:44:64:20:a5:51:0f:a7:bc:a6:0f:9a:55:92:
9a:e9:72:37:09:20:a1:32:63:fb:c5:8d:bb:bc:d6:
9a:00:9d:e0:6c:67:b8:cb:00:68:59:32:9f:90:27:
84:50:d8:7f:c5:c4:48:dd:75:17:20:8f:04:7e:76:
92:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FB:1D:90:13:68:D9:B6:E3:4D:8F:73:67:16:3C:46:35:FD:BA:63
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/4vsdkBNo2bbjTY9zZxY8RjX9umM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.154.0/24
212.16.79.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f5:2b:6c:73:34:e5:41:46:af:7a:07:14:f0:11:aa:53:5c:
5b:05:e7:47:6e:f6:e1:c1:92:db:5f:3f:14:1a:32:23:4e:4e:
11:d0:78:de:1f:2c:73:5e:62:3a:46:f0:90:f6:82:fe:b6:48:
53:a7:46:f6:bb:f6:83:3e:5c:15:d5:89:32:3b:2e:4b:13:54:
3e:bf:da:54:11:b7:fc:64:ba:dd:b4:e6:c0:fa:5e:18:ab:59:
6e:e4:ef:19:6e:67:6c:1a:ca:d6:60:1a:f6:b0:9d:bd:5f:b6:
20:1e:00:e7:be:0b:4b:ff:24:69:9b:6e:15:f2:38:29:b6:0f:
45:aa:72:99:ce:c5:6b:28:29:38:ec:35:7e:4d:a1:81:c2:5c:
72:21:d7:a0:6b:bd:90:cd:77:57:10:36:03:ea:b5:e9:c0:1f:
0b:4f:ee:e2:60:2c:23:06:ba:d0:16:d2:1c:69:13:1e:4e:6e:
fa:6f:f4:c7:f8:53:8f:8d:bf:38:9c:d0:4e:89:b4:00:12:ac:
0f:f4:a8:6f:a9:26:a8:9c:f1:d7:45:d9:8e:d4:a3:eb:6f:69:
3b:ce:4e:ba:ab:89:14:bb:59:5e:fd:34:77:83:06:43:77:82:
40:37:64:67:79:ea:ad:2f:9a:8c:41:c9:f8:48:d1:cb:8d:09:
ad:fc:a1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 12:49:32 2024 by rpki-client on console-fra.rpki-client.org