Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/x5Es_QtUmbUEZhuLtuzaYSDA2Ks.roa
File: x5Es_QtUmbUEZhuLtuzaYSDA2Ks.roa (raw, json)
Hash identifier: X7173spPudkQHI09RsHTfhh4vyfN2qQRoi5RHbcPlI0=
Subject key identifier: C7:91:2C:FD:0B:54:99:B5:04:66:1B:8B:B6:EC:DA:61:20:C0:D8:AB
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0192CE33D78BB38E5CE06634B13B31699E60
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/x5Es_QtUmbUEZhuLtuzaYSDA2Ks.roa
Signing time: Sun 27 Oct 2024 13:39:16 +0000
ROA not before: Sun 27 Oct 2024 13:39:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34918
IP address blocks: 46.38.139.0/24 maxlen: 24
46.38.148.0/24 maxlen: 24
185.29.222.0/24 maxlen: 24
212.80.9.0/24 maxlen: 24
212.80.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 11:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ce:33:d7:8b:b3:8e:5c:e0:66:34:b1:3b:31:69:9e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Oct 27 13:39:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7912cfd0b5499b504661b8bb6ecda6120c0d8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7a:cc:6b:e1:39:52:94:1a:da:68:42:21:f7:
9b:ed:b5:0b:3a:21:31:96:7b:e6:38:37:c6:10:41:
50:95:06:6b:77:65:4b:83:a8:6b:5d:ea:c6:70:5d:
cf:6c:88:08:6d:41:a1:88:90:0d:5c:50:af:ef:06:
70:a0:8e:dd:f9:16:dd:ca:71:42:d2:bb:3a:ce:ef:
c0:ff:c3:7a:1b:0a:9b:3c:34:81:82:4a:9d:3e:84:
ca:9c:d1:ee:9c:ee:70:a7:ff:35:14:5d:7a:63:62:
34:30:01:2e:5b:b0:e1:d8:b0:19:9b:5d:a4:7a:6e:
bf:28:00:b3:3c:92:62:f4:c6:04:16:70:90:fc:93:
f9:7c:6f:80:9c:00:5f:63:99:56:78:0b:ff:25:4f:
f0:78:b2:b4:a1:1f:d4:83:f9:fd:12:c1:94:0c:0d:
dc:87:70:66:27:1e:ef:49:10:ad:af:a0:9a:6f:b8:
d2:bd:91:f0:d1:3f:70:9a:70:b3:32:b0:8e:24:fc:
f1:7f:65:f1:fc:90:ed:78:29:4c:14:47:cb:66:8b:
85:d4:79:75:c7:3e:16:f9:95:ce:6a:4d:07:b6:9e:
73:16:8c:c5:4b:87:a4:9c:d2:a4:cc:5f:42:5c:6d:
06:10:67:1a:87:5f:5f:7b:3b:45:ba:aa:50:b9:37:
ee:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:91:2C:FD:0B:54:99:B5:04:66:1B:8B:B6:EC:DA:61:20:C0:D8:AB
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/x5Es_QtUmbUEZhuLtuzaYSDA2Ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.139.0/24
46.38.148.0/24
185.29.222.0/24
212.80.9.0/24
212.80.11.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:a1:4d:f8:b0:b5:2d:c9:7b:24:a5:23:60:93:83:b3:0d:8f:
f8:24:0f:3d:0e:27:de:82:99:4e:20:43:c6:fc:3f:e3:05:8a:
c8:1e:dc:b3:2d:57:99:9c:72:76:25:1e:d3:43:87:ad:71:07:
ca:99:78:be:a4:8a:b1:4f:f1:81:58:5d:41:5b:90:f4:41:0c:
22:9f:98:77:b1:3b:c9:ec:e7:e5:64:39:dc:23:0c:0b:a1:0c:
8d:48:f9:99:7e:bf:cf:7a:16:2d:99:1f:e0:7c:a4:4e:78:f0:
cb:5e:70:48:aa:c4:4e:09:15:cb:f4:e1:28:72:41:a3:63:5d:
60:cf:aa:e2:44:bb:59:b5:49:b1:ab:97:43:9b:17:64:7f:6c:
1c:86:4d:a1:3f:71:ae:a7:af:4b:02:c3:ae:6a:a3:0c:43:f1:
5e:56:bb:a2:be:62:f6:92:85:4e:b4:78:11:02:7d:fc:fe:2b:
3f:6b:62:f3:b7:c1:8a:6c:d1:6a:3d:68:01:75:a6:f4:ec:ef:
2e:7e:f4:2d:d2:8b:a0:82:04:4d:ee:c5:2a:63:17:41:76:30:
33:24:a1:ca:05:22:5f:68:bf:85:9b:8e:94:0b:d9:db:2d:f9:
28:02:74:41:44:31:6a:05:26:05:71:60:17:34:04:1e:bb:c9:
a5:fc:0b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 14:01:45 2024 by rpki-client on console-ams.rpki-client.org