Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Am5Rin8XIT4WVdV1pHLgQ0u6A-M.roa
File: Am5Rin8XIT4WVdV1pHLgQ0u6A-M.roa (raw, json)
Hash identifier: 5nMr2Iecr1Xc42HbDsSu0Zf/ZIELrGjjR8Q9jTLXppg=
Subject key identifier: 02:6E:51:8A:7F:17:21:3E:16:55:D5:75:A4:72:E0:43:4B:BA:03:E3
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018E5A7BC705FAF4675CF5762D6D66C63157
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Am5Rin8XIT4WVdV1pHLgQ0u6A-M.roa
Signing time: Wed 20 Mar 2024 06:10:45 +0000
ROA not before: Wed 20 Mar 2024 06:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30738
IP address blocks: 46.8.224.0/20 maxlen: 24
188.130.154.0/24 maxlen: 24
188.130.182.0/24 maxlen: 24
195.211.53.0/24 maxlen: 24
2001:1468::/32 maxlen: 33
2001:1468:8000::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 21 Mar 2024 05:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5a:7b:c7:05:fa:f4:67:5c:f5:76:2d:6d:66:c6:31:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Mar 20 06:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=026e518a7f17213e1655d575a472e0434bba03e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:e8:05:1f:d3:03:c3:4a:8f:37:4a:d1:f6:
24:31:31:03:7e:90:41:04:34:d3:58:b5:f0:41:8d:
ae:c7:a6:27:e7:3f:eb:5a:1b:94:cb:df:95:de:07:
9b:d0:8b:cb:1c:af:15:9f:5d:9b:bf:70:71:22:f5:
9f:e3:29:81:39:90:01:8a:12:0e:9d:42:a6:18:33:
5a:e3:10:93:45:ce:c6:88:34:d2:99:92:98:8a:1f:
b6:43:f4:20:06:fc:f7:6a:b9:32:45:bb:66:b5:02:
cd:c1:ed:45:c9:a2:64:f2:1a:d0:05:bf:e9:ab:e7:
2f:17:c0:be:a6:77:62:d0:24:1b:e1:23:75:b1:9d:
98:38:f3:05:d6:3a:6e:d6:11:0b:5a:58:79:83:a0:
fb:50:b9:ab:11:61:d7:75:6c:f3:bf:a8:77:c4:b3:
77:87:69:d5:4b:2f:f7:48:af:1d:e9:dd:85:66:70:
48:76:20:1f:10:69:62:1e:df:07:b9:04:34:6b:ff:
1d:31:80:8c:74:3b:af:be:44:ca:9b:df:55:ba:dc:
66:e3:2f:18:e0:77:ff:0c:16:53:34:a7:dd:4d:bf:
17:1a:f6:32:d8:2f:ee:13:78:4c:5d:6e:53:be:5e:
ab:67:5c:5f:22:89:10:1e:07:de:a6:1e:1d:15:05:
c1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6E:51:8A:7F:17:21:3E:16:55:D5:75:A4:72:E0:43:4B:BA:03:E3
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Am5Rin8XIT4WVdV1pHLgQ0u6A-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.224.0/20
188.130.154.0/24
188.130.182.0/24
195.211.53.0/24
IPv6:
2001:1468::/32
Signature Algorithm: sha256WithRSAEncryption
a4:82:58:e2:b4:fc:5c:80:01:93:02:4e:22:bb:44:9d:48:1a:
49:9a:5d:fd:c7:46:ed:2e:2a:81:0a:4c:b4:bb:cb:08:e8:a8:
b2:46:c5:9b:39:31:4d:ab:a9:a6:0a:d0:91:c3:63:3e:09:52:
b7:d6:94:87:80:bc:ba:1f:bb:07:5b:85:5a:0e:80:81:45:2b:
3b:67:2e:86:1f:ec:5d:40:81:a2:b5:91:75:5e:13:3c:ac:da:
89:7c:8b:70:ee:0a:b7:b6:81:a2:ed:f2:cb:5e:25:33:f2:b6:
1f:5d:11:f6:33:af:41:7a:e5:7e:d3:d0:4d:31:ff:ab:89:fa:
7e:63:8d:fc:6b:91:04:a5:9a:1b:fb:42:2c:2a:ea:40:28:2f:
ef:19:64:2c:44:7a:73:ef:f6:73:6f:8c:c6:6e:a9:9e:2e:ae:
73:a4:f5:1e:dc:a5:bc:00:86:d8:da:1b:42:fc:cd:ba:1c:df:
e3:c5:09:cd:1a:9d:bb:f9:75:90:1e:fe:cf:e8:70:a3:ed:83:
e5:df:b8:08:f8:ea:15:2c:27:fe:ed:2f:10:57:0f:ca:47:c8:
7c:e4:ec:ba:3d:2c:75:d0:0d:51:a2:e9:80:02:79:a2:30:50:
3a:34:d6:2f:ca:d8:3c:54:6a:f6:75:1f:df:85:22:99:2d:ae:
2b:6d:e9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 21 08:04:10 2024 by rpki-client on console-ams.rpki-client.org