Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/zZC5XHozwxSZkH2VEWlGxEOEL0I.roa
File: zZC5XHozwxSZkH2VEWlGxEOEL0I.roa (raw, json)
Hash identifier: jR5iJDwmPOjcDVNcx18MuL8cuJcCBrmO3RPFLzSnXDs=
Subject key identifier: CD:90:B9:5C:7A:33:C3:14:99:90:7D:95:11:69:46:C4:43:84:2F:42
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018EE648FDD23C350BB6ABAF72BB3DC80C33
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/zZC5XHozwxSZkH2VEWlGxEOEL0I.roa
Signing time: Tue 16 Apr 2024 09:42:07 +0000
ROA not before: Tue 16 Apr 2024 09:42:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21239
IP address blocks: 46.38.154.0/24 maxlen: 24
212.16.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Apr 2024 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:48:fd:d2:3c:35:0b:b6:ab:af:72:bb:3d:c8:0c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Apr 16 09:42:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd90b95c7a33c31499907d95116946c443842f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:03:53:4b:c9:c2:2e:d0:de:0b:78:7c:46:62:
3c:06:aa:85:02:a4:fe:d8:b3:f5:48:1a:e0:2e:84:
f3:54:a2:ae:e1:13:3e:7e:1d:b8:a7:dd:aa:7a:3e:
3d:63:da:d4:63:70:48:29:ef:9c:64:17:fc:a2:cc:
bd:b1:40:5b:51:40:8a:8a:55:3a:8b:89:8e:c6:a2:
90:3c:33:d5:c1:a7:eb:70:81:d1:7d:0c:6c:ca:46:
d5:de:17:46:a0:6e:14:54:45:0b:cb:22:c0:48:ff:
61:c2:a0:ba:17:bd:5d:2c:b0:e3:0e:88:26:e0:cc:
1c:e7:f9:a1:f9:56:b4:6f:6f:3a:a1:ad:b4:98:23:
06:76:cb:6d:00:d1:a0:2b:3b:85:4b:21:58:f5:fe:
c7:43:31:ce:05:45:b6:c1:30:b3:3c:c1:6d:db:54:
e8:3e:4d:97:21:79:c1:fb:9d:fa:92:6f:2b:a5:3c:
17:52:a3:7e:7d:2d:dd:ef:c7:6c:c9:fa:1f:88:dc:
71:ee:06:11:c2:37:fb:68:c2:15:4b:25:8a:04:81:
84:05:d2:fe:0c:93:d3:ee:92:eb:c7:0f:9b:6b:b3:
19:27:72:f1:64:af:0a:29:a9:73:02:ce:04:b9:94:
44:2b:88:90:69:25:42:10:8b:1d:75:bc:79:24:db:
84:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:90:B9:5C:7A:33:C3:14:99:90:7D:95:11:69:46:C4:43:84:2F:42
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/zZC5XHozwxSZkH2VEWlGxEOEL0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.154.0/24
212.16.79.0/24
Signature Algorithm: sha256WithRSAEncryption
55:b9:85:b1:fc:45:09:93:bc:e1:ef:ba:37:a4:ff:8e:d1:5d:
94:79:91:5b:2a:11:fc:b1:84:af:28:b1:42:be:12:cb:df:fb:
7d:19:76:72:fd:5c:90:30:c1:3d:11:22:ba:1b:00:28:f0:c3:
f8:ce:82:16:9a:7a:ba:ea:c7:9e:6e:60:7e:a0:c9:aa:57:7e:
0d:b1:c2:95:df:62:89:61:34:96:c4:71:c2:86:50:fe:6f:09:
dc:cb:0f:d2:75:23:a8:5c:f1:55:6b:ca:95:a3:c0:90:e1:b0:
68:f1:fc:8d:47:84:65:78:c0:37:2a:81:33:b3:16:5d:65:29:
de:33:e9:f1:10:06:9a:87:f3:9c:ee:44:3c:de:c2:ec:9c:d1:
a2:92:81:41:a2:93:66:fb:19:6f:b2:8b:54:e3:ce:0b:5d:b1:
aa:4d:42:09:27:62:42:22:00:35:10:4a:39:5b:63:10:9c:da:
ab:8d:2c:fb:2a:c1:8a:2e:f4:90:2c:d7:02:13:d7:2f:20:21:
55:05:be:cb:cf:c4:5c:f0:d4:a5:db:56:e5:93:02:83:c1:52:
63:89:4b:37:28:36:44:2b:1e:20:5d:1a:d8:f7:b2:b5:61:80:
c6:57:50:40:42:e1:3b:1f:c8:69:1a:83:9f:a8:de:8e:2c:c9:
11:37:67:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:07 2024 by rpki-client on console-ams.rpki-client.org