Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/BlrNH0EUZlkUXK6S4hGHOP2225U.roa
File: BlrNH0EUZlkUXK6S4hGHOP2225U.roa (raw, json)
Hash identifier: QXAQ0FY6XhYigy7Xp2E30US2Ia7lDzk3aPJT2XpDYv4=
Subject key identifier: 06:5A:CD:1F:41:14:66:59:14:5C:AE:92:E2:11:87:38:FD:B6:DB:95
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018DE9A6F099FAE80893985B98533C249EA5
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/BlrNH0EUZlkUXK6S4hGHOP2225U.roa
Signing time: Tue 27 Feb 2024 08:20:48 +0000
ROA not before: Tue 27 Feb 2024 08:20:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 46.38.152.0/24 maxlen: 24
46.38.153.0/24 maxlen: 24
46.38.154.0/24 maxlen: 24
46.38.156.0/24 maxlen: 24
46.38.157.0/24 maxlen: 24
185.143.73.0/24 maxlen: 24
212.16.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 12:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e9:a6:f0:99:fa:e8:08:93:98:5b:98:53:3c:24:9e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Feb 27 08:20:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=065acd1f41146659145cae92e2118738fdb6db95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:c5:8d:b1:42:b9:cc:6b:09:09:99:5c:6c:
23:6a:68:ea:ef:25:58:4a:07:f4:4b:39:91:cc:d1:
50:d3:d5:38:2b:49:24:57:52:5e:5c:bf:b8:e1:14:
3e:9d:58:f9:74:71:17:d3:ff:bc:85:b1:69:f5:73:
0b:75:33:56:bf:ef:01:c8:10:5d:a5:5d:72:02:6c:
8f:5d:9b:60:e7:5f:f8:91:13:d9:3b:8d:95:ba:0a:
36:2f:2e:e2:f5:b7:d7:80:53:62:ed:69:d6:99:33:
58:92:62:7e:4a:4a:28:6c:2a:b5:a6:7a:48:47:60:
56:05:cf:a1:bd:8a:19:81:a8:8c:ac:42:a6:6e:be:
8c:fe:6b:cb:46:ac:fb:90:37:1b:b6:e1:4f:a0:5a:
c9:7d:84:f1:7a:4b:72:ba:f4:b2:c4:d2:02:69:b3:
e6:bf:d8:f5:89:d5:c3:ce:64:a2:25:81:53:66:21:
6f:81:f0:d1:93:10:af:47:c2:6c:c5:5f:65:2d:22:
46:bd:06:e1:fe:83:e3:8b:7b:6f:f8:22:d6:dd:28:
8c:95:a0:4e:b0:05:2c:f8:6e:e1:15:61:98:97:1a:
b0:39:a5:1f:57:34:66:7a:b0:f9:c5:ae:10:ca:d6:
dc:4a:80:58:98:66:d6:af:b8:43:8f:a5:a9:d0:92:
1d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5A:CD:1F:41:14:66:59:14:5C:AE:92:E2:11:87:38:FD:B6:DB:95
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/BlrNH0EUZlkUXK6S4hGHOP2225U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.152.0-46.38.154.255
46.38.156.0/23
185.143.73.0/24
212.16.92.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:df:1b:5e:fa:26:79:c1:2f:be:91:fd:70:5e:e1:7a:69:88:
45:7d:26:bd:df:5e:d5:d5:59:1e:1b:4c:43:24:94:a9:05:5a:
38:41:73:98:39:da:c9:ab:60:dd:26:9e:76:40:fa:86:d1:29:
ab:52:06:41:41:ab:5e:cd:ee:01:83:19:c1:5a:de:7c:bf:51:
57:8c:ca:2c:b5:63:63:45:e1:6c:13:34:aa:cc:59:b3:61:35:
e0:7d:bd:26:1d:64:1c:7f:47:49:78:e9:35:70:6a:59:bb:e4:
af:b5:4c:19:91:ac:ed:60:24:11:10:fa:92:fc:32:be:b2:d3:
fb:2a:59:82:b6:5c:69:b4:de:9e:f6:5e:14:16:5f:56:1b:13:
08:17:bc:69:aa:2c:46:ff:61:87:a5:51:a4:25:e1:82:58:35:
e9:8f:71:48:07:32:7b:b1:0b:1d:74:a4:75:5f:b6:6f:fe:21:
26:4d:7d:7a:76:fe:ed:60:c9:66:09:03:d9:22:85:9c:81:ff:
97:24:bf:dd:e2:6c:b0:b7:14:03:38:1a:37:b4:2b:ef:ea:ab:
23:13:76:7d:40:c7:b1:ee:6a:b3:6a:2d:c8:87:78:f1:86:8b:
3b:2f:31:22:d3:e7:b4:09:04:c5:29:c9:25:f0:1e:54:f3:7f:
25:a3:b7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:24 2024 by rpki-client on console-fra.rpki-client.org