Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Ggbm0Zh2vakd9Dvo2XCs83_vz5Y.roa
File: Ggbm0Zh2vakd9Dvo2XCs83_vz5Y.roa (raw, json)
Hash identifier: 1papdt7UHob+DPpeFYU6/xXduL3eyKBJqYBaa6gX6BE=
Subject key identifier: 1A:06:E6:D1:98:76:BD:A9:1D:F4:3B:E8:D9:70:AC:F3:7F:EF:CF:96
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018CC79415DB48C42594072D0E7849D5F8BE
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Ggbm0Zh2vakd9Dvo2XCs83_vz5Y.roa
Signing time: Tue 02 Jan 2024 00:30:19 +0000
ROA not before: Tue 02 Jan 2024 00:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16262
IP address blocks: 46.8.52.0/23 maxlen: 32
109.248.169.0/24 maxlen: 24
109.248.168.0/24 maxlen: 24
46.8.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 14:06:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:15:db:48:c4:25:94:07:2d:0e:78:49:d5:f8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 00:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a06e6d19876bda91df43be8d970acf37fefcf96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a6:71:4f:4b:ee:23:e3:2a:b0:36:81:80:09:
e5:b3:76:4e:23:eb:87:c3:aa:ca:13:ac:8b:89:84:
6a:6a:46:f9:4c:24:86:c2:28:d1:e1:b4:c5:b7:7a:
21:b1:81:29:55:6c:9e:b6:2d:dc:72:a6:2e:4d:48:
94:9c:64:85:c8:f4:a0:aa:88:02:b2:66:00:49:2f:
80:68:fe:ce:47:90:a4:01:5c:e6:65:5a:e2:88:2a:
f7:74:7e:6f:91:5a:58:0d:09:3e:4a:1d:0c:87:53:
e2:33:01:eb:72:0e:fb:2a:d2:7d:c9:ee:3d:1c:7c:
0e:25:fa:86:c2:50:c3:b5:ff:15:84:18:b6:34:0a:
38:26:cf:3a:cf:fc:08:2f:a7:c8:f3:27:5b:37:f8:
a9:d7:0e:2a:63:aa:01:ce:fc:83:6d:20:54:0f:50:
89:6e:2f:2c:32:43:e9:f3:f4:c2:9b:bd:81:9b:75:
f0:97:ee:b3:a6:25:d5:cf:a8:26:15:41:94:e1:f0:
a4:bb:44:92:af:94:e0:2f:91:42:22:00:37:b8:4d:
35:96:2e:00:27:a7:c3:5f:d2:51:63:2d:6c:14:fc:
03:f0:9a:c2:83:ad:96:15:c2:48:65:20:ee:2e:d4:
1b:c2:b5:9f:ec:35:33:eb:36:1a:5f:aa:36:96:5c:
69:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:06:E6:D1:98:76:BD:A9:1D:F4:3B:E8:D9:70:AC:F3:7F:EF:CF:96
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Ggbm0Zh2vakd9Dvo2XCs83_vz5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.52.0/23
46.8.153.0/24
109.248.168.0/23
Signature Algorithm: sha256WithRSAEncryption
18:7e:42:43:3a:c8:06:1b:3f:14:89:ea:15:34:a9:ca:aa:0a:
ed:85:60:33:04:96:dd:1e:87:3a:cc:05:f6:56:d1:49:2b:0e:
49:ff:b7:67:19:92:9b:46:d8:f6:f5:f6:7b:9c:ad:ca:73:31:
f5:d8:c5:4d:e1:84:23:fb:36:83:58:2c:2d:fe:7a:73:e3:51:
9a:bb:30:d4:10:31:a8:14:45:9e:d5:a0:8b:1f:5c:16:5b:3f:
ff:54:c4:e0:75:b1:03:d6:1b:5e:38:cf:7b:a2:65:56:6f:c5:
40:6a:2c:a6:e5:bb:97:5b:ec:dc:ed:b4:83:8a:ab:18:c4:a4:
45:47:40:bf:8f:5c:88:1f:fc:cb:78:6f:68:5e:8c:f4:f1:48:
d8:17:3a:59:8b:24:61:2a:13:85:b9:30:d6:a4:c4:de:3f:b9:
7e:85:e6:cf:4f:8c:55:b2:90:9f:6c:f5:3c:94:74:11:b6:b7:
8d:f0:18:e1:8a:10:92:4a:f9:10:74:33:80:a4:1f:cb:47:4c:
e8:f1:ad:33:f4:96:04:4d:49:8a:a0:9c:9b:c0:7c:f7:bd:2e:
3a:0a:6f:5c:0c:c9:20:a2:fa:71:89:a1:9a:77:4f:6d:ac:6e:
1e:4b:f2:84:55:9c:b6:f3:84:6c:97:3f:ac:4d:66:3f:42:4b:
fd:2d:f3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:00 2024 by rpki-client on console-ams.rpki-client.org