Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/4TpEVWMAkzXJw6lYLafY-i7b4M4.roa
File: 4TpEVWMAkzXJw6lYLafY-i7b4M4.roa (raw, json)
Hash identifier: fu0LMT1VERJD93d46MfUGmld1Czckpi/V0isCtlZgo4=
Subject key identifier: E1:3A:44:55:63:00:93:35:C9:C3:A9:58:2D:A7:D8:FA:2E:DB:E0:CE
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01913202B8AA89194F8FF0BD5737DEC7D86D
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/4TpEVWMAkzXJw6lYLafY-i7b4M4.roa
Signing time: Thu 08 Aug 2024 12:42:04 +0000
ROA not before: Thu 08 Aug 2024 12:42:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56971
IP address blocks: 46.8.230.0/24 maxlen: 24
46.8.231.0/24 maxlen: 24
46.8.236.0/24 maxlen: 24
46.8.237.0/24 maxlen: 24
46.8.238.0/24 maxlen: 32
188.130.154.0/24 maxlen: 24
188.130.206.0/24 maxlen: 32
188.130.207.0/24 maxlen: 32
Validation: Failed, certificate revoked on Fri 09 Aug 2024 08:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:32:02:b8:aa:89:19:4f:8f:f0:bd:57:37:de:c7:d8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Aug 8 12:42:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e13a445563009335c9c3a9582da7d8fa2edbe0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7f:35:13:5d:c6:ae:69:65:57:fa:65:eb:aa:
45:ec:12:cc:1e:8e:15:19:ea:5d:e3:4e:5f:95:e6:
1c:2e:a4:7f:45:e1:98:f6:61:9c:df:3d:af:e6:a2:
ce:eb:9b:e4:a4:ea:8b:3d:e6:95:0a:b2:00:a1:5b:
64:4d:75:83:72:db:d6:9d:8d:16:83:38:cd:41:7f:
59:51:96:42:ec:58:b0:98:6c:89:4a:94:80:df:d0:
73:dc:60:7f:17:48:25:93:02:c6:55:d7:03:d8:d8:
85:32:12:84:0e:e6:9e:18:4f:12:bf:89:8d:f0:ba:
87:8a:3f:1e:92:85:bc:6a:b9:b1:29:51:f0:1c:53:
2b:9e:db:a1:60:9b:a7:f8:11:37:5c:36:df:11:99:
7d:0f:e2:73:ed:bd:0c:1b:12:e2:72:fb:8d:57:ff:
56:9e:52:ef:26:24:cc:13:b5:90:e6:a6:5a:0e:53:
1d:18:e1:fc:d1:ae:29:cc:5c:d2:5d:03:3e:73:e2:
6b:93:ad:46:aa:26:5b:31:97:f2:a2:42:15:d9:47:
87:0c:64:e5:e4:58:ba:db:8c:bc:c7:b1:b1:5a:ca:
ad:3d:0b:28:7d:b1:66:3a:e3:82:a4:8c:9c:2f:0f:
1e:67:b5:48:cc:09:1d:dd:b1:bf:d3:41:7d:2a:2d:
d6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3A:44:55:63:00:93:35:C9:C3:A9:58:2D:A7:D8:FA:2E:DB:E0:CE
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/4TpEVWMAkzXJw6lYLafY-i7b4M4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.230.0/23
46.8.236.0-46.8.238.255
188.130.154.0/24
188.130.206.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:17:f4:16:33:4e:95:20:50:f8:71:cb:e4:e0:83:8c:8a:aa:
7f:b0:7f:28:4c:ed:e0:f6:38:77:05:ad:87:18:b0:36:38:96:
b0:2a:2d:2d:27:5b:a2:4d:ab:40:50:5d:13:66:b9:a2:51:5a:
f8:1f:4a:0d:66:de:72:ca:70:2a:12:aa:89:fb:c4:4c:9f:d1:
d0:75:c1:41:43:1e:20:fc:d9:66:18:c6:8f:a6:7f:98:88:39:
73:de:f0:c1:29:07:dd:b4:9e:c8:45:3a:68:e6:4b:29:b4:b7:
1d:f7:da:0c:60:09:ce:cb:42:11:a1:43:38:95:b9:8f:59:d1:
5c:12:c8:d3:e6:ee:40:15:e8:73:6f:29:af:fa:e9:6b:95:eb:
a9:d5:eb:f6:9e:80:94:9e:80:cb:3e:9b:47:d3:04:a2:1d:f1:
d8:70:50:51:a7:f8:1e:33:1b:19:7b:a2:24:4e:22:b4:59:50:
d8:57:aa:95:7e:9e:2a:78:a9:c3:92:30:97:27:2c:aa:f2:d7:
f9:77:eb:e2:47:5e:92:a3:80:07:0f:d4:ba:dd:d1:bd:55:62:
b3:dc:04:e9:7a:36:78:ac:97:83:64:e1:9e:ac:b4:3c:08:bf:
52:25:a5:cf:34:df:fb:a0:31:de:2a:f6:c0:9e:e6:2a:83:f1:
e4:35:da:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 10:30:38 2024 by rpki-client on console-ams.rpki-client.org