Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ORIajTvdjSmE64YW-dGEtlnAZbU.roa
File: ORIajTvdjSmE64YW-dGEtlnAZbU.roa (raw, json)
Hash identifier: LpAHvdsojIAuZKmts4jx7P56q39Qwkt2XNk5W+ZP6ks=
Subject key identifier: 39:12:1A:8D:3B:DD:8D:29:84:EB:86:16:F9:D1:84:B6:59:C0:65:B5
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018E93F70CA5B4C0A7483769D61BF1AEA800
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ORIajTvdjSmE64YW-dGEtlnAZbU.roa
Signing time: Sun 31 Mar 2024 10:03:45 +0000
ROA not before: Sun 31 Mar 2024 10:03:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47585
IP address blocks: 46.38.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Mar 2024 11:05:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:93:f7:0c:a5:b4:c0:a7:48:37:69:d6:1b:f1:ae:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Mar 31 10:03:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39121a8d3bdd8d2984eb8616f9d184b659c065b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:28:5f:e0:f5:40:36:99:33:e1:a0:f7:d8:1c:
da:ed:6c:79:15:34:df:3b:47:af:5e:ed:7e:1d:b7:
2a:98:2b:22:b9:39:2d:85:e5:1a:dc:99:5e:f8:a4:
7d:43:bd:76:a6:70:89:c4:9d:c9:40:a7:90:1a:01:
d5:7f:31:7f:86:8a:41:a4:d3:94:cf:f4:71:7e:33:
ea:ac:30:42:41:81:3f:de:0d:2a:a7:74:da:59:cf:
ea:c9:0b:cc:c4:7f:f5:f9:56:03:58:82:72:1f:64:
ad:dc:88:96:c1:4d:64:5a:55:cf:7f:2c:fa:17:c5:
d1:2f:08:6d:05:ef:19:3e:c4:eb:eb:62:c8:70:75:
ab:a9:45:70:88:79:ae:c1:65:29:17:ca:94:c4:9e:
fb:15:ef:74:49:d2:fc:5e:40:57:7b:d3:93:56:96:
54:48:15:68:40:b1:30:dd:1b:d8:d2:7c:e7:ef:0b:
3d:4e:3b:78:86:81:ed:f2:52:de:f9:20:60:ab:40:
52:00:86:3d:43:4c:90:f8:34:e7:9b:1f:9d:9c:b0:
0b:e0:6c:3c:e4:60:2c:4d:82:fb:c9:58:3e:86:b7:
43:ec:d7:f3:4f:e4:55:4d:a4:45:34:fd:d9:4c:07:
1f:67:c2:2d:64:37:d5:44:56:38:47:de:76:fa:0c:
24:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:12:1A:8D:3B:DD:8D:29:84:EB:86:16:F9:D1:84:B6:59:C0:65:B5
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ORIajTvdjSmE64YW-dGEtlnAZbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.141.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:c0:c0:e5:cf:9f:90:d6:dc:97:6c:25:e9:4b:11:92:16:e8:
35:5c:1e:11:67:39:43:67:29:1e:38:55:47:8b:e1:f6:c0:66:
f6:c7:03:f8:e7:4e:61:e4:db:da:4b:81:9d:4d:19:b2:89:c1:
5d:aa:67:09:8c:11:8f:33:68:b5:ef:81:af:d9:18:8a:cf:58:
20:03:6a:7d:37:fb:04:1d:5c:88:23:dc:f1:6a:ec:a9:cc:56:
9e:4a:7a:92:0c:f7:5d:07:48:70:2e:a8:0e:ad:00:f2:8f:ff:
3b:2e:c3:6e:1a:db:29:2b:f0:7d:fc:09:36:52:7f:f4:9a:8b:
ce:c2:9e:83:d0:cb:5f:6d:77:f9:81:04:3b:c7:b5:b9:74:b0:
c7:2a:25:42:03:d1:09:f6:71:43:38:29:48:44:93:61:da:85:
f0:e2:00:4c:54:66:12:1f:fd:39:7f:28:ec:c2:f6:46:d5:1b:
c1:80:c4:73:0e:bc:a8:c9:aa:c5:7c:de:b6:0f:5d:9e:b9:6f:
55:09:ff:ec:d7:11:8d:d4:15:64:0d:be:25:22:80:67:36:78:
18:15:3c:a7:2f:a5:98:ea:8f:12:97:2f:2d:cc:af:cd:f7:d8:
ce:f2:c0:1e:cf:0f:1f:f1:f1:f5:c5:c6:59:bf:9c:c0:c1:1d:
dd:f9:38:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 12:08:34 2024 by rpki-client on console-ams.rpki-client.org