Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Gz7W1ZHpXGVkEHAZUUnmOMJZF9c.roa
File: Gz7W1ZHpXGVkEHAZUUnmOMJZF9c.roa (raw, json)
Hash identifier: BnKXl8VETLf0Rzlw3H0AusWPs+5Bg8uArj+257Ywbsw=
Subject key identifier: 1B:3E:D6:D5:91:E9:5C:65:64:10:70:19:51:49:E6:38:C2:59:17:D7
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018DA2B9CC0AC918948DF6DFA3CBE50E2ACC
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Gz7W1ZHpXGVkEHAZUUnmOMJZF9c.roa
Signing time: Tue 13 Feb 2024 13:48:21 +0000
ROA not before: Tue 13 Feb 2024 13:48:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215535
IP address blocks: 46.38.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 May 2024 09:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a2:b9:cc:0a:c9:18:94:8d:f6:df:a3:cb:e5:0e:2a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Feb 13 13:48:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b3ed6d591e95c65641070195149e638c25917d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cf:aa:a2:d2:14:a2:bd:88:07:0a:99:cd:07:
a4:d0:16:b7:72:37:15:1c:bb:26:7b:7b:65:6b:42:
5d:6e:38:d3:c8:c3:fd:9a:90:e4:8a:c8:8c:fb:b4:
ee:ce:d2:95:22:c6:6a:2c:32:81:ed:57:e9:1a:b1:
8c:d8:00:b5:44:d0:53:d0:3e:46:1f:c7:c0:6c:a2:
0a:4b:f3:82:2b:7e:8c:b0:c2:ca:fe:00:f8:b6:7e:
97:9c:0e:dd:b6:60:41:a6:2a:de:bf:98:ac:56:fd:
98:25:c7:f4:d1:3d:44:0c:34:42:b5:21:b4:06:42:
38:7b:56:d7:c7:3f:31:fc:99:6e:f0:91:6c:19:d3:
a2:6d:56:4d:df:e3:a8:0e:16:25:fb:66:05:7b:e8:
9c:85:3e:2b:4f:81:d6:24:84:0b:8e:1d:fd:d1:c6:
fb:90:81:c2:7f:9e:ae:17:d6:75:89:e2:16:80:e7:
38:04:de:d1:91:3f:5b:7b:8c:a1:32:cb:bd:8f:0e:
3c:2a:88:16:69:75:d9:32:69:7d:2b:2a:76:bf:99:
69:6e:b0:13:5f:e8:a2:ff:0f:51:1d:73:50:6a:e4:
f6:c2:f1:e8:a7:bd:00:38:0e:cd:2f:9f:05:c1:25:
e0:44:7f:71:4f:5a:59:c3:aa:3d:37:de:48:f8:02:
9f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3E:D6:D5:91:E9:5C:65:64:10:70:19:51:49:E6:38:C2:59:17:D7
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/Gz7W1ZHpXGVkEHAZUUnmOMJZF9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.158.0/24
Signature Algorithm: sha256WithRSAEncryption
65:0c:a1:be:27:91:31:c4:0b:4e:55:cf:1e:2b:6a:a0:23:8c:
73:ba:69:18:2f:dc:de:71:6b:2f:99:ae:c2:6a:1e:48:f2:14:
3f:91:5b:1d:71:8b:e9:36:3f:91:1b:fe:6b:56:aa:95:f9:5c:
8e:6e:44:c3:2b:fa:f9:0a:5c:06:10:d5:9a:3e:f3:aa:4d:43:
7b:c8:e6:09:f4:69:e4:69:43:45:ca:06:80:88:16:9b:de:56:
5a:96:13:17:73:8e:08:18:51:a9:80:1d:5b:2e:f4:84:64:02:
b5:ab:29:c2:c1:a4:8b:f2:f7:62:d6:f7:69:38:d9:d3:6d:75:
f3:e5:e0:50:ea:c7:07:cc:4a:d0:bc:60:13:94:7d:33:f7:10:
15:da:87:de:c4:28:0d:b0:7b:b2:14:e1:7a:11:16:a3:a6:78:
a5:0e:ec:e2:09:3d:75:12:39:9d:16:cf:9b:06:43:04:c7:2e:
78:86:bd:d1:99:f0:99:d9:9d:86:72:d2:87:a9:18:d5:ac:64:
26:a1:e8:9f:87:57:0b:4b:f9:b7:6e:54:85:ae:b3:85:99:1a:
13:49:1d:db:bf:d8:27:64:fa:c2:ad:b3:71:cc:8d:28:9d:59:
15:a9:04:0f:cd:a1:ad:4d:52:cd:36:28:82:87:11:f4:06:aa:
ae:19:18:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 13:20:23 2024 by rpki-client on console-ams.rpki-client.org