Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/5uy7O1oklYvuHK2WyZRn7z5Fflw.roa
File: 5uy7O1oklYvuHK2WyZRn7z5Fflw.roa (raw, json)
Hash identifier: Zm8zFmFlauyYCulTlABd9fqT8LRVerps613BVAIbLlU=
Subject key identifier: E6:EC:BB:3B:5A:24:95:8B:EE:1C:AD:96:C9:94:67:EF:3E:45:7E:5C
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019301280A058FE43C7E9E0F80FC2E0F971C
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/5uy7O1oklYvuHK2WyZRn7z5Fflw.roa
Signing time: Wed 06 Nov 2024 11:07:01 +0000
ROA not before: Wed 06 Nov 2024 11:07:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34918
IP address blocks: 46.38.139.0/24 maxlen: 24
46.38.148.0/24 maxlen: 24
185.29.222.0/24 maxlen: 24
212.80.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Nov 2024 14:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:01:28:0a:05:8f:e4:3c:7e:9e:0f:80:fc:2e:0f:97:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Nov 6 11:07:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6ecbb3b5a24958bee1cad96c99467ef3e457e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:c5:14:b5:1e:70:48:f4:cc:14:46:12:89:
be:60:36:a5:e8:1a:95:3d:e4:87:01:df:fb:3a:50:
b8:89:4b:f7:3e:5d:0b:f8:ef:fe:81:a6:84:91:96:
de:af:ff:0d:d6:6e:37:bd:89:d5:72:c6:16:41:32:
25:26:19:82:ed:e6:4c:87:5d:33:43:1e:1d:f0:ab:
cf:7c:df:e3:ab:60:74:03:bd:ef:a1:0d:3f:fb:d0:
b0:ce:85:55:b0:1b:d2:e1:eb:17:2e:54:3e:4c:52:
9c:05:f3:32:45:f3:90:9d:56:4f:24:73:11:95:6e:
0f:1b:5e:90:0a:50:3e:92:c5:d5:1a:2e:61:5b:91:
c0:db:05:f2:d9:f8:94:24:05:1d:9d:56:31:e2:77:
90:4c:ac:98:4f:60:7d:6b:7f:2f:90:30:55:e7:c1:
e5:ba:9e:b2:fa:2b:d8:c1:36:e9:e1:c8:87:02:dd:
6b:ce:2a:9b:3e:3f:56:ab:d4:e1:94:dc:b9:33:89:
30:f3:cf:05:5f:67:9c:51:af:5c:89:23:90:8c:f4:
2c:7c:06:76:2d:57:c6:df:35:e9:ef:1d:72:5f:e3:
78:72:0e:1b:5f:70:41:72:9e:a6:be:c3:ea:5e:3b:
12:e1:52:14:b7:64:e1:e3:bc:92:82:7d:6f:0e:b1:
16:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EC:BB:3B:5A:24:95:8B:EE:1C:AD:96:C9:94:67:EF:3E:45:7E:5C
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/5uy7O1oklYvuHK2WyZRn7z5Fflw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.139.0/24
46.38.148.0/24
185.29.222.0/24
212.80.11.0/24
Signature Algorithm: sha256WithRSAEncryption
69:be:11:7e:db:a9:56:be:0a:29:8a:0e:80:e9:c8:10:46:ef:
c5:98:38:2f:fa:f7:a0:87:8e:97:af:a3:18:c5:1b:44:82:62:
b6:eb:9f:1d:2b:33:66:f7:fc:d8:95:40:8b:33:c9:12:41:13:
4c:9f:df:ac:11:91:b1:59:1a:c9:cb:20:9e:16:90:29:35:69:
e5:5b:42:7a:44:b7:58:31:3e:af:c0:00:da:a8:ff:a1:3b:81:
48:2d:54:f1:81:b2:04:89:43:d4:e7:c2:85:0c:21:4f:b4:96:
dc:bd:d0:75:ff:90:2d:04:27:d7:47:1a:e3:54:03:26:74:6b:
e8:36:f8:08:e3:24:4c:2e:67:53:a7:72:56:ab:12:aa:49:92:
f9:56:14:aa:68:68:2c:e1:1d:ed:a2:c7:0f:fc:c3:0f:f7:c9:
d0:50:e9:c2:73:83:72:7a:15:06:f6:18:28:78:20:e6:68:49:
32:4d:41:1b:44:d9:3f:b3:4a:71:85:ce:87:1d:54:da:da:ba:
fc:2e:70:36:81:ed:5f:e8:45:ff:8f:28:0c:46:5d:75:66:47:
87:cf:a1:7b:8c:a7:10:cc:1f:72:59:b2:92:2a:1c:0c:df:40:
59:dc:69:0c:d8:9a:9b:f9:8d:b4:95:d3:ff:1b:e3:4a:f3:f4:
41:19:2c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 17:38:58 2024 by rpki-client on console-ams.rpki-client.org