Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/g8F1Lq2t0ZOx5gWRdMwBNol8eKc.roa
File: g8F1Lq2t0ZOx5gWRdMwBNol8eKc.roa (raw, json)
Hash identifier: cJA6mhjJMbRyrs6pKF8sJmI0BELpmp5GpdhfQ7xuAZ8=
Subject key identifier: 83:C1:75:2E:AD:AD:D1:93:B1:E6:05:91:74:CC:01:36:89:7C:78:A7
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018E8698CF2B0DE460439B059CB9327AC1A2
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/g8F1Lq2t0ZOx5gWRdMwBNol8eKc.roa
Signing time: Thu 28 Mar 2024 19:45:45 +0000
ROA not before: Thu 28 Mar 2024 19:45:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 46.38.156.0/24 maxlen: 24
212.16.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Apr 2024 12:43:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:86:98:cf:2b:0d:e4:60:43:9b:05:9c:b9:32:7a:c1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Mar 28 19:45:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83c1752eadadd193b1e6059174cc0136897c78a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:16:fa:5d:1d:df:a1:8e:80:a8:ef:b9:9b:1f:
37:01:0d:0e:81:f6:33:c7:84:14:d1:87:43:47:89:
b7:0c:ca:73:df:55:ed:38:e2:63:c6:44:6c:07:13:
2d:87:50:b1:29:21:94:ab:fd:a3:e1:f9:c2:c0:ba:
a4:45:ea:eb:83:fc:de:10:3a:2f:1d:9f:f8:49:3e:
b4:fd:53:61:c4:a9:12:34:5b:a3:f3:32:ff:0c:5b:
e9:70:64:8d:0e:1c:12:ea:8f:ba:e5:3c:cb:aa:7a:
44:07:11:9f:29:11:7f:b1:44:aa:4c:e7:23:31:37:
42:14:92:80:1b:20:50:8c:30:d2:f5:a2:98:f5:07:
2b:df:77:94:70:20:ed:96:94:06:c5:8a:ec:8e:a7:
64:69:f3:c1:77:e0:dd:77:d9:aa:04:37:79:df:4b:
ae:74:17:f6:e4:a2:e3:23:8d:b7:1d:e0:0a:a8:53:
98:6a:01:81:da:be:ff:f0:24:0f:10:e6:0b:f4:96:
a1:7e:5b:1f:a9:30:1e:e0:08:e2:66:71:67:80:ae:
0f:c0:c2:29:d7:2c:03:bc:b7:b9:d7:66:20:91:9a:
d1:73:6e:c8:47:d2:5a:c0:7c:b5:b7:23:38:50:53:
d8:26:4d:ea:3f:54:7c:71:e5:72:ac:af:5a:bd:28:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C1:75:2E:AD:AD:D1:93:B1:E6:05:91:74:CC:01:36:89:7C:78:A7
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/g8F1Lq2t0ZOx5gWRdMwBNol8eKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.156.0/24
212.16.92.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:85:fd:66:b8:f3:61:bb:07:3f:a4:1f:23:af:c4:0d:8f:4b:
aa:ce:cd:9e:f7:8e:5c:e9:45:d4:13:33:1e:74:b8:47:31:ab:
46:39:a0:8d:dc:75:66:ac:92:c2:d7:54:56:0e:04:d5:5e:03:
d0:fb:b2:58:71:ee:f2:78:83:e2:d4:46:0f:ce:47:b7:9f:fb:
98:ec:e8:79:80:76:36:82:b0:f2:49:69:32:f0:e7:8f:af:46:
ee:ec:84:6c:df:74:8d:3c:f5:03:15:e7:4a:9c:16:f9:be:e9:
01:3e:1d:16:f4:1b:75:bd:83:a7:34:59:fb:09:5e:10:c1:84:
58:57:d9:2a:a5:eb:9a:2e:a1:7f:c7:9f:8a:9b:42:d6:8d:94:
e7:6b:a2:fa:97:d0:7c:0a:2d:e0:ff:0d:4b:0d:0a:e8:42:cb:
49:2b:03:02:80:d1:73:54:12:2b:f3:33:70:6e:3a:d1:7a:5c:
db:d5:50:74:0f:15:02:e7:0e:dd:36:20:d6:21:3d:ba:f4:ad:
3e:de:e7:13:c6:f4:8b:7a:af:b6:d3:89:1b:48:f6:2f:b3:e9:
d9:5e:19:a2:91:37:66:0c:c2:88:4b:fc:1a:1e:f6:a7:eb:5a:
b5:e3:30:eb:74:d6:1e:ea:7b:49:ce:7d:bd:4d:54:5e:9a:74:
16:c6:f8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:24 2024 by rpki-client on console-fra.rpki-client.org