Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/3gt_SbVcbVP4UkdHJyFZdqiUIQ0.roa
File: 3gt_SbVcbVP4UkdHJyFZdqiUIQ0.roa (raw, json)
Hash identifier: fmSNgessKuH/iE1TL3pMy2NYA/Bl39PFsIHuGLjKjpo=
Subject key identifier: DE:0B:7F:49:B5:5C:6D:53:F8:52:47:47:27:21:59:76:A8:94:21:0D
Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial: 018BF6B77A5A2E328B02D7AB2D1EA85F4938
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/3gt_SbVcbVP4UkdHJyFZdqiUIQ0.roa
Signing time: Wed 22 Nov 2023 11:08:21 +0000
ROA not before: Wed 22 Nov 2023 11:08:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 193.107.46.0/24 maxlen: 24
2a13:7f00::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:b7:7a:5a:2e:32:8b:02:d7:ab:2d:1e:a8:5f:49:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
Validity
Not Before: Nov 22 11:08:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de0b7f49b55c6d53f852474727215976a894210d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bb:de:99:4c:4d:a8:d8:bb:ba:f9:52:7d:4f:
98:11:c5:39:d5:a7:78:62:e4:67:14:c3:0b:77:0a:
f7:f1:e9:a3:71:eb:dc:2c:6a:ab:38:ce:b9:a5:b3:
be:e1:be:e0:c3:73:5d:aa:5c:8a:9e:b7:bf:b0:8a:
ef:9a:35:a8:03:0e:87:46:5e:7f:2a:d5:2e:75:0a:
93:3b:c0:89:dd:f2:83:dd:03:7d:f1:91:97:5a:f6:
94:24:23:2b:af:3e:31:6b:ec:db:d7:3b:e0:76:f3:
e4:4d:03:7f:72:60:09:0b:8e:65:44:dc:61:25:dd:
cb:59:a6:59:bf:52:9f:6e:91:4c:00:35:98:e4:88:
b9:58:7c:f2:86:7f:4c:04:74:48:19:ab:ba:bc:2e:
34:63:f3:09:0a:f1:f9:a2:b5:8f:ad:4d:ca:ff:35:
ef:95:64:e8:f9:67:d5:6c:d3:a1:2c:1d:78:ba:4a:
89:39:57:cf:75:32:a7:fd:b8:a0:59:ca:74:80:a6:
d7:d4:ce:19:f6:9d:f8:77:2c:fd:1c:a3:d3:ec:7c:
4d:fc:ce:e3:5b:c5:17:fa:67:c3:87:84:64:7b:67:
72:7f:1c:3e:f6:58:3d:ab:c2:23:5d:d2:21:6f:14:
b5:2a:c8:b7:1b:16:06:a6:72:95:f1:2e:33:9b:20:
83:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0B:7F:49:B5:5C:6D:53:F8:52:47:47:27:21:59:76:A8:94:21:0D
X509v3 Authority Key Identifier:
keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/3gt_SbVcbVP4UkdHJyFZdqiUIQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.46.0/24
IPv6:
2a13:7f00::/32
Signature Algorithm: sha256WithRSAEncryption
00:e2:2e:f9:f2:dd:99:8b:fe:00:80:8e:70:8c:73:10:d9:a5:
e3:a9:02:34:eb:ca:c9:6a:c0:6d:76:ab:c4:e9:3d:99:1f:bb:
9d:09:22:20:94:a2:ca:5e:9b:a5:e9:8b:78:7a:a4:65:e7:07:
90:e5:38:db:d7:b1:25:63:f6:02:e5:fb:1a:c6:be:15:a9:ed:
38:c3:a6:4f:0e:7f:3e:2a:d1:6c:03:57:12:a3:76:1e:6c:35:
32:3c:c1:9a:35:c6:2f:7d:d3:f3:0d:f7:29:a4:32:6c:c4:14:
85:15:17:35:f1:32:8f:c5:af:0b:f6:fd:4a:98:d0:79:04:ef:
ae:ad:b3:51:9a:d0:53:54:17:86:8c:ec:8f:73:b5:38:9d:43:
5b:e3:b1:20:46:9a:6d:54:00:11:e9:e8:c2:95:3b:dd:c6:60:
84:48:61:83:02:f3:ca:82:ab:01:96:68:9b:85:3d:3d:05:26:
4a:4b:27:91:69:76:5f:6d:2a:a9:de:ec:e1:a4:d2:bf:8c:19:
04:38:be:aa:40:09:36:bb:d2:36:bd:4d:9e:13:31:48:de:43:
40:76:8a:86:fe:f6:52:2e:c2:af:d1:42:62:92:a7:5d:68:38:
90:98:b3:38:e1:97:3a:3e:bc:28:c6:90:19:39:47:d6:e1:e3:
d5:2e:0e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:10 2024 by rpki-client on console-ams.rpki-client.org