Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/6jfdAC3BoGGt8e1HOpT4WVvOO7E.roa
File: 6jfdAC3BoGGt8e1HOpT4WVvOO7E.roa (raw, json)
Hash identifier: SLzSIXyN8XleNqxLEISmWYRoXk8QlumOpA3yRYV7jqg=
Subject key identifier: EA:37:DD:00:2D:C1:A0:61:AD:F1:ED:47:3A:94:F8:59:5B:CE:3B:B1
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018C672A2C169B057DD85F12912BBC4B4142
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/6jfdAC3BoGGt8e1HOpT4WVvOO7E.roa
Signing time: Thu 14 Dec 2023 07:11:06 +0000
ROA not before: Thu 14 Dec 2023 07:11:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 46.38.136.0/22 maxlen: 22
46.38.132.0/22 maxlen: 22
46.38.130.0/24 maxlen: 24
46.38.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Dec 2023 08:44:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:2a:2c:16:9b:05:7d:d8:5f:12:91:2b:bc:4b:41:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Dec 14 07:11:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea37dd002dc1a061adf1ed473a94f8595bce3bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b3:82:e4:14:0e:9f:69:90:95:f1:4d:37:07:
a3:d2:e1:67:80:10:5a:f0:13:88:68:e0:93:32:ee:
b5:ac:5f:41:c4:5f:cd:67:ff:03:65:62:6e:a0:f5:
c8:b1:0d:ce:96:95:46:f6:82:02:48:51:79:9b:e6:
76:de:a9:d5:79:36:ad:03:8f:f4:1d:b7:59:c4:57:
3b:23:b5:1c:76:4c:25:78:b0:39:f7:12:fb:bc:aa:
52:72:35:10:1c:f1:33:c6:b0:3c:a2:5e:8e:ef:8f:
2d:ae:7b:c3:14:44:46:63:91:81:ae:a0:a7:42:f9:
a6:1d:83:11:b2:1f:54:0f:83:88:55:9a:4c:a2:74:
ed:2c:d6:41:b2:19:be:6b:5b:6a:c2:f3:c6:75:4c:
a3:e7:af:fa:ea:23:6c:b6:1f:c8:05:a1:4c:ad:4b:
7c:af:59:62:85:a0:e8:8c:08:45:df:b1:53:b2:9f:
80:5e:e5:af:7f:8f:45:9a:53:95:20:a2:4c:f0:ee:
4e:f6:df:0e:be:4a:9e:63:2d:a6:d0:48:4a:bd:41:
aa:b6:aa:06:9b:28:98:cf:57:5d:b5:7f:87:fe:bd:
be:c9:1d:58:39:bf:05:58:b0:fa:25:c3:a7:1f:be:
cb:80:d5:93:be:27:fc:4b:5d:b1:97:b4:a1:77:75:
33:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:37:DD:00:2D:C1:A0:61:AD:F1:ED:47:3A:94:F8:59:5B:CE:3B:B1
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/6jfdAC3BoGGt8e1HOpT4WVvOO7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.128.0/24
46.38.130.0/24
46.38.132.0-46.38.139.255
Signature Algorithm: sha256WithRSAEncryption
64:67:d1:9d:62:43:14:24:84:a2:85:87:4a:b5:5c:6d:23:b7:
5f:bc:31:28:5c:a8:2c:31:c2:f8:d1:ad:91:7a:c9:b5:7f:48:
16:f2:0a:97:b9:0b:66:60:84:27:ec:fb:d6:8e:3e:8a:43:d9:
2b:9b:9c:9c:12:83:20:7f:51:92:b6:4a:de:a6:a3:d7:c1:4e:
67:25:1f:89:25:15:07:5a:73:d3:1a:ad:dd:5a:0a:4f:df:b2:
ab:d8:e8:55:9c:a5:c3:40:ac:44:e3:f0:b5:e2:b8:e3:57:ca:
9b:14:10:cd:9b:e9:5d:b2:5a:96:c6:29:b4:fe:ce:cf:a9:0b:
d4:d8:1d:fc:37:2d:8c:21:b4:a1:92:01:f6:a3:a4:8f:ba:35:
1c:7e:1d:bb:1c:b6:a8:b7:32:ac:d6:d6:73:c1:30:46:20:17:
ec:97:96:91:0b:e3:27:b7:e5:a1:73:a6:4f:29:9d:71:ea:ba:
78:e2:bb:b0:ee:5d:5d:be:45:24:7c:83:19:cd:34:03:98:5d:
c1:01:26:83:fd:49:d4:4c:d4:60:26:6e:7c:b9:b0:21:b4:fa:
60:a4:97:51:55:0a:d4:da:da:c6:79:98:a9:d5:09:7f:70:1d:
38:ea:10:97:ec:41:cf:3f:c8:7b:bb:62:98:30:ac:e3:cf:79:
b8:68:1e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:06 2024 by rpki-client on console-ams.rpki-client.org