Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/DnxABtpt45kQm-kxmtflBNHThhk.roa
File: DnxABtpt45kQm-kxmtflBNHThhk.roa (raw, json)
Hash identifier: fi4RKQi7pjGKukifn4ZPIUPesMsl1jc7vl58yC+lv+M=
Subject key identifier: 0E:7C:40:06:DA:6D:E3:99:10:9B:E9:31:9A:D7:E5:04:D1:D3:86:19
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018E9D628C3AEDC9CEC78DAF4A2244DEA5B8
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/DnxABtpt45kQm-kxmtflBNHThhk.roa
Signing time: Tue 02 Apr 2024 05:57:45 +0000
ROA not before: Tue 02 Apr 2024 05:57:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30738
IP address blocks: 46.8.224.0/20 maxlen: 24
188.130.144.0/21 maxlen: 24
188.130.154.0/24 maxlen: 24
188.130.182.0/24 maxlen: 24
195.211.53.0/24 maxlen: 24
2001:1468::/32 maxlen: 33
2001:1468:8000::/36 maxlen: 36
Validation: Failed, certificate revoked on Tue 02 Apr 2024 17:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9d:62:8c:3a:ed:c9:ce:c7:8d:af:4a:22:44:de:a5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Apr 2 05:57:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e7c4006da6de399109be9319ad7e504d1d38619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:5c:21:9c:4c:79:b3:4d:ec:35:5c:51:bf:
d6:ae:22:7b:82:ee:53:16:81:0e:39:d6:49:4b:c2:
2f:52:a2:23:82:a0:b1:ee:0f:b9:2c:62:10:dd:ae:
8c:11:0c:34:c2:88:ab:0f:c3:c8:dc:41:04:7c:40:
16:7e:ae:08:c2:f9:72:23:63:40:62:b1:f7:92:4c:
8f:ca:68:a3:2b:7c:3a:df:83:a9:25:b6:0d:fb:87:
91:34:3c:a2:c1:eb:85:86:41:08:a0:2e:c4:41:eb:
f0:cd:4d:3d:cf:7f:db:64:51:37:2f:90:36:f9:17:
70:ed:fa:f7:a6:8a:8f:32:07:f3:15:9b:55:6e:9f:
89:09:ce:f5:39:c0:8e:65:b0:e0:0d:70:53:77:29:
fa:83:5f:bc:77:96:26:65:a2:ef:8c:43:8a:2e:88:
6c:82:94:16:cf:74:55:ce:09:dd:d0:b2:9b:d6:28:
6b:56:2e:da:50:cf:fb:e7:1d:ed:d3:6b:8a:c6:c2:
a1:1d:75:7d:69:5a:94:19:6f:99:1f:0f:0a:2b:59:
70:a8:49:12:43:81:23:f5:f2:98:4a:3b:6c:38:7c:
54:88:da:ba:d9:1d:33:09:a8:97:6d:ec:32:65:e4:
fe:04:f2:e6:d2:03:32:ae:0b:2d:b4:fc:58:44:94:
de:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7C:40:06:DA:6D:E3:99:10:9B:E9:31:9A:D7:E5:04:D1:D3:86:19
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/DnxABtpt45kQm-kxmtflBNHThhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.224.0/20
188.130.144.0/21
188.130.154.0/24
188.130.182.0/24
195.211.53.0/24
IPv6:
2001:1468::/32
Signature Algorithm: sha256WithRSAEncryption
87:b2:f2:73:a9:e9:ee:ab:31:14:5f:c1:26:8b:65:79:7b:99:
7e:c6:dd:74:e3:bd:fb:2d:7a:0e:c4:78:d2:3b:22:04:b6:40:
b1:e3:79:3b:0c:d5:8d:bd:17:a4:6a:fe:69:14:eb:43:0d:cc:
b1:cb:8e:8e:90:61:ba:8a:cd:ce:46:04:4e:f2:42:87:c7:00:
7d:f6:f5:ca:b1:be:2f:57:d6:7d:a5:13:db:10:a1:02:aa:cd:
e0:53:c9:e5:69:39:36:6c:ce:12:5a:63:4b:70:6c:1f:4c:e7:
7f:f3:85:c0:c9:cb:d6:90:a5:27:44:50:44:bb:20:ac:d1:fd:
31:60:28:e7:b3:1c:91:c8:99:e9:6d:61:47:92:15:5a:de:cc:
48:9d:4d:b6:4c:7e:9a:b2:25:b9:0a:11:0f:23:cb:e1:7f:b4:
03:ed:b4:80:b2:2c:5e:f6:c0:44:2d:73:5d:8b:9a:4e:d3:8d:
35:52:9e:15:e7:60:91:88:bd:dc:54:e9:dd:c6:e4:49:a3:0a:
5f:fa:94:02:26:c8:cf:23:5a:89:d4:6c:21:23:f4:09:a7:c8:
53:bf:cc:d0:e6:82:9b:49:b9:f1:27:e0:ae:4c:cc:d3:74:75:
fa:6b:25:a6:04:56:b1:d0:13:bb:2f:e7:53:92:ce:be:74:e6:
5c:14:3e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:57 2024 by rpki-client on console-fra.rpki-client.org