Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/czFLmQrFmNoo-Zj6zK0t3NyaRy4.roa
File: czFLmQrFmNoo-Zj6zK0t3NyaRy4.roa (raw, json)
Hash identifier: UjEH+iFDTXT2NtnDOkZ4Dx67uGPc6uNAeGZ94NJenaw=
Subject key identifier: 73:31:4B:99:0A:C5:98:DA:28:F9:98:FA:CC:AD:2D:DC:DC:9A:47:2E
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018C67803B37EBFCD84503064EFAB9C0A66D
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/czFLmQrFmNoo-Zj6zK0t3NyaRy4.roa
Signing time: Thu 14 Dec 2023 08:45:06 +0000
ROA not before: Thu 14 Dec 2023 08:45:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 46.38.136.0/22 maxlen: 22
212.16.94.0/24 maxlen: 24
212.80.20.0/23 maxlen: 23
46.38.132.0/22 maxlen: 22
46.38.130.0/24 maxlen: 24
46.38.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:80:3b:37:eb:fc:d8:45:03:06:4e:fa:b9:c0:a6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Dec 14 08:45:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73314b990ac598da28f998faccad2ddcdc9a472e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:58:80:13:f4:e2:11:48:e5:01:41:80:6f:e5:
8a:c9:d3:84:36:89:7b:a8:48:d5:ac:06:e7:0e:30:
a5:49:b6:cb:a9:c3:64:db:86:95:6d:52:eb:43:90:
c7:88:0e:d5:79:a2:52:eb:db:5b:bb:cf:e4:f5:bb:
67:99:2d:ee:1c:76:28:da:aa:72:24:30:e2:d7:2a:
7d:e9:c1:0c:07:75:e1:5d:f1:dd:e6:16:a5:45:ee:
58:eb:fe:97:9a:71:4c:6e:b9:12:ad:58:e6:dc:b8:
10:e5:6c:81:e6:8d:6a:48:23:77:69:b0:d0:f0:24:
73:b2:ce:b0:e9:24:1e:b9:d3:7e:a6:79:09:4c:35:
ae:d6:7e:b8:e0:91:e7:a7:9c:1c:f3:7f:18:25:66:
86:38:ef:a0:d7:ab:dc:09:bd:8b:f8:66:53:53:1f:
f3:a9:54:e7:0c:a0:72:b6:e9:da:ae:9a:2f:e8:ca:
70:f5:ea:da:24:31:11:e5:a1:a3:8a:8e:d6:85:56:
be:d0:9c:7d:71:64:15:80:b2:79:01:dd:9e:61:d5:
01:f0:c4:1c:55:72:d3:2b:ec:e7:c0:53:c1:c6:21:
ab:33:17:25:b1:12:8a:93:44:6b:a0:a7:3a:69:f0:
77:3e:c8:a6:f3:c4:2b:21:29:bf:e1:77:8a:96:9d:
9b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:31:4B:99:0A:C5:98:DA:28:F9:98:FA:CC:AD:2D:DC:DC:9A:47:2E
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/czFLmQrFmNoo-Zj6zK0t3NyaRy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.128.0/24
46.38.130.0/24
46.38.132.0-46.38.139.255
212.16.94.0/24
212.80.20.0/23
Signature Algorithm: sha256WithRSAEncryption
84:c8:0f:fe:35:66:35:21:c5:30:96:e3:1e:a1:6d:27:95:79:
6b:a5:f4:db:46:34:7a:b7:d5:5b:08:d9:1e:33:33:7b:84:96:
30:27:10:46:72:6a:31:96:2b:d5:cd:c1:76:22:bf:64:7c:9b:
54:cc:10:5a:8b:10:2d:56:8e:20:a5:29:e5:8b:54:4b:44:99:
55:9d:6f:e0:95:e4:2d:02:e8:04:42:26:81:11:41:6d:ca:dd:
33:29:fe:09:65:15:4e:13:bc:c2:7b:b0:63:5c:5d:83:10:73:
9d:bc:0d:7b:d4:c9:3d:b0:6b:54:95:d5:24:5f:3d:96:5c:c3:
a2:98:c5:5c:30:e6:27:f5:b0:ea:54:4b:10:b7:67:7e:3b:d1:
68:b7:6b:4f:a6:76:49:1d:39:ba:50:7d:a4:a0:b5:a7:0f:40:
2e:73:68:4d:37:02:18:c3:5a:21:78:b7:dd:b8:17:ac:58:15:
2b:2b:80:cf:cb:2f:f7:66:58:dd:15:6e:84:80:dc:f4:cc:25:
63:aa:f0:e6:d5:cb:44:4f:b3:f2:ce:7c:89:9d:86:2a:4e:63:
e3:70:80:3b:cb:a3:10:f6:27:b4:c1:42:83:68:ff:d6:73:97:
2b:c0:5c:dc:fb:26:20:9e:6e:55:c0:b3:b9:7b:84:46:9e:74:
ae:60:0e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 15 15:41:37 2023 by rpki-client on console-fra.rpki-client.org