Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/XtlP_oqR16Dn27UAhn0sg6iZhvk.roa
File: XtlP_oqR16Dn27UAhn0sg6iZhvk.roa (raw, json)
Hash identifier: oCi0rs4j112Je1WZr6fyKc4E9Oe5YsVeWX/ae6MypvU=
Subject key identifier: 5E:D9:4F:FE:8A:91:D7:A0:E7:DB:B5:00:86:7D:2C:83:A8:99:86:F9
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018D7D77BDAAE1E3AE9FCF35A73223DE163B
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/XtlP_oqR16Dn27UAhn0sg6iZhvk.roa
Signing time: Tue 06 Feb 2024 08:10:15 +0000
ROA not before: Tue 06 Feb 2024 08:10:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208287
IP address blocks: 46.38.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 18:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:77:bd:aa:e1:e3:ae:9f:cf:35:a7:32:23:de:16:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Feb 6 08:10:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ed94ffe8a91d7a0e7dbb500867d2c83a89986f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6c:ea:ea:c0:11:d2:19:29:95:ba:dd:69:5b:
37:5a:e8:3e:d7:75:be:e1:b9:a8:db:ce:49:8e:a3:
cc:77:79:af:6e:30:3c:ee:f7:74:e1:ea:78:91:43:
bb:19:b0:65:22:6d:93:cc:f4:8e:c9:4a:60:d5:93:
a7:71:75:ea:23:9d:c5:85:9f:df:97:8b:06:0b:e4:
f0:d4:28:d5:07:4c:6c:66:4d:ad:2d:68:d8:41:76:
80:8e:b8:8b:a6:5a:85:e5:2f:41:fa:3c:7c:ea:4d:
bf:3d:fb:69:a4:b7:3e:05:b5:43:7e:d3:1a:e2:fc:
4d:77:cf:2e:6d:63:9a:aa:c8:4a:ab:57:6d:b6:6c:
d2:fa:5d:f4:77:ab:04:b5:0a:49:5d:c5:1a:f0:f6:
6d:74:d6:8a:64:27:d9:ef:05:5b:d6:30:ec:12:ca:
9d:55:bb:5d:49:ec:53:ba:59:58:ae:a1:d5:fd:24:
ac:ab:6c:ac:98:f7:d8:a1:7a:e3:19:6a:76:a6:96:
7a:6a:cf:a7:26:3d:44:d4:d6:20:d5:3f:27:ea:f0:
40:95:bd:44:08:a7:ab:ff:f1:f5:f5:98:c3:99:70:
45:d3:09:7f:8e:20:7d:11:a3:b7:85:80:76:54:33:
51:68:a6:2c:5f:e9:b9:aa:68:43:ee:16:46:dd:ba:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D9:4F:FE:8A:91:D7:A0:E7:DB:B5:00:86:7D:2C:83:A8:99:86:F9
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/XtlP_oqR16Dn27UAhn0sg6iZhvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.130.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:fc:09:66:41:3c:46:3c:43:94:7e:93:18:ad:8c:3e:56:02:
5c:cf:56:22:2d:61:30:33:48:64:dc:00:9d:e6:31:ec:66:ee:
13:a8:ba:72:ff:92:8c:36:04:37:26:06:f7:34:61:c9:f7:17:
24:7f:f5:52:d6:8d:3b:d2:c2:38:b0:9d:9a:27:06:4a:61:4e:
85:ba:24:b2:5a:d6:c1:9b:1e:f7:6d:1a:2e:c2:c0:5c:4b:10:
c0:7c:0e:a5:e9:78:b2:8d:26:02:89:8e:a9:5c:ba:86:aa:b7:
ed:59:26:b0:bb:7d:f7:b1:09:13:1a:ca:6f:36:fa:ba:f1:82:
ff:64:83:0b:e9:a8:d0:00:68:a1:e8:a5:c3:14:0c:4a:0d:18:
16:da:b3:12:db:b7:12:0f:b8:a1:83:a9:c6:06:0c:65:a0:d2:
25:c2:44:27:d5:4e:57:7a:7c:3e:3a:b4:8b:06:32:01:48:c4:
2f:9a:72:df:55:bd:bd:12:6d:ab:7c:af:78:35:21:5f:a3:fc:
fc:5f:b8:2a:b9:30:6b:46:f1:00:8f:ef:9d:23:c0:3d:89:26:
db:32:50:38:32:2f:2d:95:46:a8:4e:0c:25:54:1a:21:2b:5c:
60:db:55:ff:67:9d:22:67:22:8b:2a:25:41:02:01:2d:a3:9f:
2f:5b:bb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 22:58:53 2024 by rpki-client on console-ams.rpki-client.org