Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Grk9n5mvdNRFgR12yY4vDxjKiXc.roa
File: Grk9n5mvdNRFgR12yY4vDxjKiXc.roa (raw, json)
Hash identifier: H7yrD5624QylBLe6sn67WkBocPHF0s0DbTGQNGADr+M=
Subject key identifier: 1A:B9:3D:9F:99:AF:74:D4:45:81:1D:76:C9:8E:2F:0F:18:CA:89:77
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018572BA4979F94D7A810FD3EB6CADF17210
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Grk9n5mvdNRFgR12yY4vDxjKiXc.roa
Signing time: Mon 02 Jan 2023 13:44:49 +0000
ROA not before: Mon 02 Jan 2023 13:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16262
IP address blocks: 46.8.52.0/23 maxlen: 32
109.248.169.0/24 maxlen: 24
109.248.168.0/24 maxlen: 24
46.8.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:49:79:f9:4d:7a:81:0f:d3:eb:6c:ad:f1:72:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ab93d9f99af74d445811d76c98e2f0f18ca8977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a5:f8:15:9f:51:ec:aa:83:4a:9b:03:c3:3d:
d8:cc:fe:1f:18:03:96:e7:37:6e:dc:40:0f:5f:bd:
c8:c4:6b:98:af:eb:b1:09:2a:ab:e8:d4:2a:03:69:
9b:5a:25:b0:d3:cf:17:c5:e5:68:62:1b:29:b3:e8:
c9:df:71:c3:7c:a0:8e:7c:cf:38:fe:36:d2:bc:40:
a1:04:00:0a:0e:5f:92:6c:92:f0:b1:73:60:dd:e7:
1f:6b:ad:2e:c6:5f:5e:ad:2b:ae:27:3c:da:42:6f:
5c:97:0f:b8:71:74:04:f3:2a:3b:58:3b:5c:34:c4:
70:4f:db:89:5e:32:2e:48:21:d8:e8:24:a9:ad:d1:
7c:17:2b:31:cd:94:7b:9c:5c:d2:87:99:39:0f:38:
86:dd:e8:5a:84:82:3f:4f:1b:58:cc:67:44:93:94:
95:d3:62:7f:b1:c0:f6:99:a1:4b:f7:48:56:08:d5:
78:fc:51:cd:82:20:c6:d0:3e:0e:12:22:57:64:8b:
29:47:f4:98:4a:0a:f6:94:c7:3b:76:8f:3b:06:04:
8f:cd:ff:94:3f:d4:d7:b6:7c:73:c7:b6:02:83:2f:
46:47:9e:a7:b9:45:c0:30:07:73:bb:57:49:a2:de:
9a:13:7f:90:d9:68:02:aa:37:10:09:48:c3:ef:15:
49:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B9:3D:9F:99:AF:74:D4:45:81:1D:76:C9:8E:2F:0F:18:CA:89:77
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Grk9n5mvdNRFgR12yY4vDxjKiXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.52.0/23
46.8.153.0/24
109.248.168.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:20:92:9a:29:d5:ab:96:5e:4f:83:56:48:74:e6:92:d3:54:
bd:17:1d:c1:81:53:71:aa:f5:43:b0:dc:e6:0b:fa:f7:1c:7c:
c4:f9:ba:2d:95:87:a4:ba:09:19:c8:07:5c:d1:3d:ae:1e:81:
92:5c:d3:a3:ec:a8:85:f0:ef:b4:c9:0c:27:90:17:df:64:34:
8f:09:ed:e3:06:a0:d9:78:5c:c9:5c:f6:b4:47:de:24:34:e0:
14:62:14:cf:e9:d2:4f:f8:ce:12:24:3f:bb:ea:e2:06:ca:76:
76:e7:13:1a:a3:0d:1a:e3:58:b2:94:de:09:62:b4:9a:c2:6d:
ad:03:29:43:63:d2:f2:57:c6:9c:e4:cd:db:f1:5c:38:a6:29:
ed:b0:14:a7:9f:a9:a8:11:b0:f7:5c:a6:0f:a0:8f:3f:d2:7a:
32:63:c5:41:f6:59:43:00:49:5e:98:fa:84:c7:7c:f0:10:0a:
9d:ab:3f:44:1c:31:fc:e9:a0:e9:8c:d0:0f:fe:52:23:4a:17:
d8:78:be:7b:74:1f:49:6b:1a:60:aa:57:c2:96:29:33:0c:b3:
33:d0:ef:86:1e:0e:06:00:4f:82:36:3a:e3:d0:78:5b:2d:1d:
46:3a:3d:f6:fc:ff:ee:2d:bb:0e:04:c1:71:ac:96:29:d2:67:
52:15:09:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:57 2024 by rpki-client on console-fra.rpki-client.org