Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/yOCK04cQhDMjg8Wg7GZtON-W0EI.roa
File: yOCK04cQhDMjg8Wg7GZtON-W0EI.roa (raw, json)
Hash identifier: 2+2zhCS7cFZOp7tyUPhS0xg3XQGWfwmqDZ8SQ0p3AMs=
Subject key identifier: C8:E0:8A:D3:87:10:84:33:23:83:C5:A0:EC:66:6D:38:DF:96:D0:42
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0191F50BAE338F9E38F3778380B0E8EAA773
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/yOCK04cQhDMjg8Wg7GZtON-W0EI.roa
Signing time: Sun 15 Sep 2024 09:37:48 +0000
ROA not before: Sun 15 Sep 2024 09:37:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214304
IP address blocks: 46.38.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Nov 2024 09:21:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f5:0b:ae:33:8f:9e:38:f3:77:83:80:b0:e8:ea:a7:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Sep 15 09:37:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8e08ad3871084332383c5a0ec666d38df96d042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4b:17:f5:95:69:3d:e7:ba:55:0c:7c:74:5b:
ac:79:83:17:90:98:34:aa:f9:81:5e:55:4b:df:52:
1f:78:df:3f:7c:86:97:b3:13:0c:56:d4:a1:cb:58:
87:89:60:81:a3:ef:00:24:78:83:0d:84:a7:d0:38:
b9:70:bd:02:4d:bb:f3:92:26:95:2a:bf:e1:76:9d:
28:c1:a1:aa:c3:f8:22:9e:15:31:c0:fd:94:fe:35:
c5:16:6f:83:ce:13:33:e7:f2:2b:f5:a1:89:07:4c:
9f:9f:8f:bd:52:a3:14:10:92:41:27:e0:6f:fc:c9:
3d:ad:41:25:76:9d:96:33:4f:7d:1f:4b:b2:32:89:
d1:f6:23:4c:53:c2:dc:84:86:f4:d6:e9:4a:76:3a:
f4:07:50:a0:64:02:cd:4e:eb:36:4d:24:c9:e2:02:
92:29:20:9e:f6:19:98:b0:50:02:1a:5f:c4:9a:b2:
c9:5f:38:47:7b:72:4d:5e:0c:a1:fc:37:d8:49:6b:
ea:29:bd:69:80:d0:38:93:37:1a:cf:6c:81:9d:5f:
e6:10:1f:39:c7:96:1f:1f:a1:40:e5:fe:8f:53:0f:
ac:55:0c:67:47:5b:0e:ca:91:8f:35:9c:6b:11:4d:
8f:86:a5:d0:a5:bc:81:c5:97:9f:be:2c:7a:6f:eb:
09:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E0:8A:D3:87:10:84:33:23:83:C5:A0:EC:66:6D:38:DF:96:D0:42
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/yOCK04cQhDMjg8Wg7GZtON-W0EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.157.0/24
Signature Algorithm: sha256WithRSAEncryption
52:fe:58:e9:2b:fe:ca:c7:01:15:9b:11:ad:87:f2:5e:0c:5b:
3e:4c:d8:d0:2d:d3:49:16:73:86:58:fe:99:ff:1f:44:2b:99:
7c:88:e8:20:9e:e5:e2:a9:08:01:64:bd:3b:d0:e5:5b:d5:01:
1b:5d:eb:76:2e:b1:c8:bc:94:21:cb:7e:ba:23:ca:d7:17:d8:
8b:ee:9e:bb:d6:78:44:19:2e:13:41:58:6f:6f:05:ec:0e:22:
3c:4a:dd:36:15:4e:de:a0:85:39:8b:a1:ca:a2:de:e7:cc:9d:
f9:41:62:cd:de:ec:a2:08:9d:25:ab:91:d0:09:0c:25:d9:3a:
a5:4d:79:6c:13:93:8b:ab:fd:e7:f8:f6:9b:f6:b7:a2:5b:ef:
ab:c2:7e:20:41:bd:00:26:64:cc:ab:23:17:9b:a8:f6:0e:d1:
56:7a:60:ff:9c:f3:7d:5a:46:cf:fe:68:e1:cd:8b:87:a3:ab:
3b:61:b8:bb:45:04:97:0e:8d:8e:e7:96:c6:ee:c2:94:49:40:
94:0f:41:b3:23:6d:5d:1c:ca:9b:c0:04:0e:ad:e8:e6:e5:a1:
98:38:3f:df:e1:d6:36:a5:55:8d:9e:18:13:6d:6a:a7:49:b5:
6e:f8:04:a1:e6:cd:17:54:b3:00:be:e0:ff:a0:84:55:1e:94:
72:2c:58:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 11:33:04 2024 by rpki-client on console-ams.rpki-client.org