Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/88OGhRJq0aPv3xinK82LeEZBE04.roa
File: 88OGhRJq0aPv3xinK82LeEZBE04.roa (raw, json)
Hash identifier: Es22kYxWjBVVaLoXVydnVRo04dApAhOkeqSlcOA3OFE=
Subject key identifier: F3:C3:86:85:12:6A:D1:A3:EF:DF:18:A7:2B:CD:8B:78:46:41:13:4E
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018E942FCF329F3AEDAD49C14645EBA2C9C9
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/88OGhRJq0aPv3xinK82LeEZBE04.roa
Signing time: Sun 31 Mar 2024 11:05:44 +0000
ROA not before: Sun 31 Mar 2024 11:05:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47585
IP address blocks: 46.38.141.0/24 maxlen: 24
46.38.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:94:2f:cf:32:9f:3a:ed:ad:49:c1:46:45:eb:a2:c9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Mar 31 11:05:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3c38685126ad1a3efdf18a72bcd8b784641134e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0b:61:9b:78:f8:a2:7d:b8:90:8c:f2:85:41:
c6:0d:96:6b:f7:8a:11:57:28:8a:3f:c1:83:51:0d:
c9:ec:20:25:4c:6f:d4:78:45:25:07:ff:2b:b3:02:
ee:c8:12:56:f5:00:43:0d:a7:71:32:96:93:6b:bb:
df:bb:5b:d3:ff:d1:0d:13:fd:57:58:2b:07:d3:db:
b1:e9:ae:57:77:07:26:62:fa:5b:23:1d:cc:55:a8:
dc:6e:33:53:39:5f:d6:f1:bc:2f:e1:fc:34:95:1d:
24:47:4a:d6:64:50:4d:55:a7:6c:1f:e8:38:7a:43:
30:33:d5:e8:6b:9b:74:71:cc:88:5b:0b:76:73:ed:
aa:96:f3:69:d5:89:e4:77:d0:2a:bc:f9:92:28:b1:
63:ee:42:87:7e:22:9d:35:d6:23:43:52:2f:16:be:
7c:0a:13:d8:5e:0e:ef:70:4a:24:fa:27:02:45:06:
2d:73:19:42:4c:41:cd:3d:a8:dc:45:dc:bc:14:cb:
5d:ba:e6:ae:8f:45:c2:6f:bd:f6:41:30:d6:d5:49:
15:3c:6c:09:03:e5:e2:fe:e4:2a:0c:3e:b1:16:a5:
75:86:e2:c7:47:8c:87:76:79:b1:cb:33:44:a6:0a:
33:61:64:79:f4:9c:a4:c6:4c:77:90:a3:0d:73:cb:
97:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C3:86:85:12:6A:D1:A3:EF:DF:18:A7:2B:CD:8B:78:46:41:13:4E
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/88OGhRJq0aPv3xinK82LeEZBE04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.141.0/24
46.38.153.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:80:0d:f5:e2:67:f0:f6:96:95:e0:7e:d2:45:b8:ad:14:f5:
5c:50:fd:cd:f3:3a:66:61:36:9f:1c:1b:b3:00:2f:ed:26:5f:
79:fa:28:d3:72:28:7b:44:8a:61:e3:2c:54:c7:91:8c:0f:dc:
2e:29:77:68:ae:fb:19:54:7b:33:b6:41:27:b2:21:c9:3c:51:
a4:f1:08:19:3f:fe:c3:2d:55:d0:99:1d:6b:bf:53:1f:bd:e8:
c8:8a:31:eb:4a:a8:15:1d:59:5c:f5:df:a6:9e:11:88:99:ef:
15:ee:23:47:31:a0:51:0f:ef:12:c7:93:2a:6b:aa:1f:d5:d9:
a3:d9:a4:d1:b2:ea:6e:1c:1b:ca:5a:36:d6:ef:fa:e5:66:00:
4d:6d:10:39:3d:1f:1d:7c:62:77:6a:1c:67:3f:7a:3a:4b:34:
8f:cc:4f:8e:0e:fd:40:14:d7:86:de:43:ec:21:74:86:f9:a6:
ed:55:ed:3c:b9:8e:4d:aa:04:e1:58:9f:9a:23:0e:c9:c5:0e:
54:d6:b5:77:41:cf:95:80:c7:f6:9f:a1:98:a7:36:b1:40:9f:
d8:18:8a:23:2c:78:7a:bd:b5:22:9d:f4:d3:38:4e:b3:03:70:
78:83:93:46:f9:33:09:5d:60:7d:07:04:97:bb:c0:63:73:bc:
dc:eb:03:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:24 2024 by rpki-client on console-fra.rpki-client.org