Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/1-hsTT8FauqC1pK8K4kjGJc96Hgc.roa
File: 1-hsTT8FauqC1pK8K4kjGJc96Hgc.roa (raw, json)
Hash identifier: 8Ab/BtH9mB41NGjwSK28iFxbp8vKiiKEb0It3nyTAWg=
Subject key identifier: FA:1B:13:4F:C1:5A:BA:A0:B5:A4:AF:0A:E2:48:C6:25:CF:7A:1E:07
Certificate issuer: /CN=42560fc1cf6b97466737c3027123fa120b1954d5
Certificate serial: 018572310A7B2907B8D165AA39C99912716B
Authority key identifier: 42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/1-hsTT8FauqC1pK8K4kjGJc96Hgc.roa
Signing time: Mon 02 Jan 2023 11:14:54 +0000
ROA not before: Mon 02 Jan 2023 11:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203148
IP address blocks: 46.18.32.0/24 maxlen: 24
185.59.16.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:31:0a:7b:29:07:b8:d1:65:aa:39:c9:99:12:71:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42560fc1cf6b97466737c3027123fa120b1954d5
Validity
Not Before: Jan 2 11:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa1b134fc15abaa0b5a4af0ae248c625cf7a1e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:98:39:b3:4f:2b:2f:94:f9:ca:88:ab:71:
8e:88:41:e1:28:5e:44:60:e9:f9:1d:5e:1e:0f:93:
43:d9:6f:3c:3a:cc:85:b5:23:93:39:b0:67:2d:35:
97:24:1a:af:17:13:69:37:15:b9:43:6a:a0:d7:7e:
08:6f:81:4f:fa:4b:9d:46:98:a5:f0:f5:76:11:23:
a7:00:95:a7:07:54:84:26:f5:9d:10:dd:52:3c:d9:
9b:80:48:8b:8a:64:54:14:ca:60:9d:8a:25:bf:d2:
8d:19:33:d9:28:84:05:73:59:61:f4:6f:ac:e0:8d:
73:1a:18:85:74:cc:94:dc:04:4a:0a:fc:1b:db:7e:
31:87:60:4c:10:a1:9d:bf:bc:6e:fd:4f:4b:d8:7e:
52:ab:c5:32:f6:26:dd:b6:e3:08:08:e2:fb:19:fa:
88:97:f0:16:7b:84:e5:21:37:b5:96:90:80:f1:dc:
7e:43:71:21:6a:c9:eb:c4:d9:03:94:3b:61:04:d3:
ce:08:b4:c8:2c:e7:eb:e2:89:13:48:b1:e3:d9:2a:
7c:f0:90:75:d1:b3:dc:c7:ce:70:de:49:6a:8f:de:
f5:3a:5d:25:5a:64:98:e4:66:f4:ff:79:5d:92:59:
64:b9:ab:b3:1a:7f:fc:4f:9c:21:ce:5c:36:25:33:
4d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1B:13:4F:C1:5A:BA:A0:B5:A4:AF:0A:E2:48:C6:25:CF:7A:1E:07
X509v3 Authority Key Identifier:
keyid:42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/1-hsTT8FauqC1pK8K4kjGJc96Hgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.32.0/24
185.59.16.0/22
Signature Algorithm: sha256WithRSAEncryption
30:4d:b4:d5:1b:37:cb:36:b0:2d:3d:5a:23:25:d3:dc:93:b8:
64:8c:76:7f:c3:90:33:69:c4:ad:81:e9:d5:69:8a:ab:63:e9:
3b:94:14:ec:12:5c:28:4e:8d:8a:7a:20:57:ae:af:13:d4:28:
e2:f7:a0:2d:8e:4d:57:86:26:f6:f0:ec:96:9e:c5:2f:7d:e9:
a0:d0:14:90:87:52:0b:18:bd:42:67:3a:2d:a4:43:01:fc:bc:
37:ae:1f:39:2e:20:92:b2:b7:9c:c7:9a:09:44:c9:36:14:08:
c4:68:bc:34:c9:68:48:c7:d9:4e:9e:5a:1c:c9:f4:b3:fe:5e:
5f:5e:96:20:93:95:59:e8:31:39:10:e0:b6:f9:fb:bc:bc:12:
8c:e5:7a:94:aa:3b:c6:36:6b:f3:d2:9b:66:17:0c:d9:f7:cb:
2b:4a:40:7e:df:3d:fa:d7:05:f3:66:f5:6d:0a:9b:3d:2c:35:
ab:cb:16:99:76:ad:2b:4e:df:58:10:70:d2:1e:d7:a7:3f:59:
f4:2f:69:9b:c0:05:5d:d3:a4:25:93:76:cb:47:1b:9c:95:c3:
02:ef:75:33:17:4c:66:db:cb:d9:e9:6d:07:94:52:42:4b:1d:
6e:44:19:62:97:1b:af:0f:f2:1d:95:97:f5:55:f0:26:2c:b4:
28:e4:75:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:29 2024 by rpki-client on console-fra.rpki-client.org