Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/2QuiKeDPfe_p5SQg8MxW3CcY9L0.roa
File: 2QuiKeDPfe_p5SQg8MxW3CcY9L0.roa (raw, json)
Hash identifier: erwc2eiOEJQ77o7sSXnwsBq5hsKWxWwiK8ZrOwSGCHc=
Subject key identifier: D9:0B:A2:29:E0:CF:7D:EF:E9:E5:24:20:F0:CC:56:DC:27:18:F4:BD
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018E9FD783AD65277C9753CC9A496A407AAF
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/2QuiKeDPfe_p5SQg8MxW3CcY9L0.roa
Signing time: Tue 02 Apr 2024 17:24:45 +0000
ROA not before: Tue 02 Apr 2024 17:24:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30738
IP address blocks: 46.8.224.0/20 maxlen: 24
188.130.154.0/24 maxlen: 24
188.130.182.0/24 maxlen: 24
195.211.53.0/24 maxlen: 24
2001:1468::/32 maxlen: 33
2001:1468:8000::/36 maxlen: 36
Validation: Failed, certificate revoked on Tue 16 Apr 2024 18:55:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9f:d7:83:ad:65:27:7c:97:53:cc:9a:49:6a:40:7a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Apr 2 17:24:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d90ba229e0cf7defe9e52420f0cc56dc2718f4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d4:1d:62:a4:8d:1e:8d:ba:ec:2a:15:c9:3a:
78:5f:d3:ab:81:61:f9:95:40:d8:3a:58:72:f3:37:
9f:40:96:9b:6f:8e:7a:da:e3:8a:23:ea:c5:12:c8:
d7:48:eb:91:3d:6a:35:cd:ed:bc:7c:5b:bb:38:92:
7b:23:d9:6b:ce:9a:0c:b1:c3:f3:f8:90:f6:3c:91:
47:9d:41:eb:19:35:c3:f1:c2:61:83:d3:da:ec:51:
55:6a:7d:ea:e3:0b:d7:15:b8:6d:60:b9:31:97:ed:
b7:75:c8:3c:22:0e:87:f9:1b:f1:5d:4b:28:ae:59:
e3:fd:6d:ca:96:c5:bc:b8:70:00:d3:d7:01:aa:dd:
1c:58:34:12:c6:aa:b6:7e:d4:55:80:ec:c5:a4:da:
1e:e3:1e:17:ef:22:f9:2f:c2:c8:15:d4:5d:e3:d6:
aa:17:b7:4f:4f:1d:d8:4b:48:a7:52:99:b4:ce:36:
b1:8c:2f:33:29:10:c2:24:d9:cf:1c:9c:e7:c8:4a:
49:35:89:81:2b:ca:00:ca:85:32:27:dc:c3:ee:dc:
74:18:c5:93:c7:2a:36:27:e0:99:e0:0a:0e:c6:f4:
c8:17:30:c9:dc:60:1c:f3:19:76:ef:bc:b0:de:a2:
dd:34:f1:e3:7a:84:7e:e1:cf:34:5c:29:86:c3:9e:
6d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0B:A2:29:E0:CF:7D:EF:E9:E5:24:20:F0:CC:56:DC:27:18:F4:BD
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/2QuiKeDPfe_p5SQg8MxW3CcY9L0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.224.0/20
188.130.154.0/24
188.130.182.0/24
195.211.53.0/24
IPv6:
2001:1468::/32
Signature Algorithm: sha256WithRSAEncryption
46:5c:d8:a1:df:3c:03:f2:14:b8:77:76:bb:92:c0:38:1e:de:
de:04:b3:f3:6a:39:6e:03:40:ab:8d:39:f7:88:ff:cd:f2:1f:
7c:a5:93:de:42:3a:8c:20:cb:99:99:42:6c:53:e1:30:05:d6:
19:26:84:fa:e6:c5:4c:4f:09:64:37:e3:68:3b:a0:83:42:67:
ae:de:58:4a:d4:33:75:e2:9a:78:df:2a:33:7c:35:b2:e7:2e:
e5:85:be:2d:57:18:e9:4e:af:3c:03:23:67:28:92:03:25:9b:
39:0f:a0:e9:75:0e:2d:42:ef:36:46:27:a3:2d:e6:87:25:2a:
c2:7c:06:a6:90:9f:4e:66:4a:8f:46:2c:c3:89:61:d9:69:e1:
b3:3b:b0:6a:d5:c8:56:df:ff:af:12:4f:3f:79:e7:96:67:73:
11:9d:93:38:d5:f1:97:27:85:af:7a:5a:6d:ff:06:51:fe:90:
eb:e1:89:ba:d1:e5:7e:76:cc:06:ae:6e:19:34:96:e2:81:3d:
9b:d9:ca:c8:6a:29:f1:9d:79:f0:90:c7:0a:30:e3:87:e7:07:
f4:eb:93:d6:28:35:ae:56:82:f0:9a:30:2f:6d:4c:c6:d4:dc:
d5:d7:5c:81:6c:81:2a:4c:5a:25:8f:de:38:a1:fa:65:df:c4:
95:31:8e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:00 2024 by rpki-client on console-ams.rpki-client.org