Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/L6ZKW3H4b-epMzMT1jJAwCTegwg.roa
File: L6ZKW3H4b-epMzMT1jJAwCTegwg.roa (raw, json)
Hash identifier: rK7HwpnOPQx6I+bVfMRMumIPR9voWhwFI8rqjwMmrl8=
Subject key identifier: 2F:A6:4A:5B:71:F8:6F:E7:A9:33:33:13:D6:32:40:C0:24:DE:83:08
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018572BA577388A54D3B589E81A579B79649
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/L6ZKW3H4b-epMzMT1jJAwCTegwg.roa
Signing time: Mon 02 Jan 2023 13:44:52 +0000
ROA not before: Mon 02 Jan 2023 13:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211399
IP address blocks: 46.8.140.0/24 maxlen: 24
46.8.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:57:73:88:a5:4d:3b:58:9e:81:a5:79:b7:96:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fa64a5b71f86fe7a9333313d63240c024de8308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f1:82:6c:29:aa:f0:2c:f2:2f:8c:53:47:0b:
8c:8f:e6:75:81:1e:86:1e:6f:02:6f:0c:a9:6e:3b:
c3:79:2e:25:1a:1d:b4:18:bc:cc:36:55:44:e1:95:
e7:6b:a2:25:c9:40:0d:ff:3e:da:ec:33:91:b0:d3:
e2:ed:2d:ef:57:9c:c7:0c:01:f9:59:82:d1:ca:89:
5b:31:76:f2:7d:a8:47:e3:6a:89:1d:69:06:4d:70:
b9:8b:5a:2b:3e:92:a4:a4:4c:19:66:5f:e4:7f:42:
4b:a8:5a:8d:53:4f:14:e8:26:05:95:72:06:2c:46:
c6:89:f8:fd:d6:4d:9a:dd:89:85:b2:7b:16:42:a2:
f9:f0:c6:fe:6c:59:e0:b6:4b:a0:e6:4c:e8:e3:aa:
d1:07:62:68:c5:06:5f:19:da:69:bd:ce:c9:2e:ac:
5f:89:b7:1d:fc:7d:f8:0a:24:05:89:2b:33:ac:bb:
15:5a:70:2e:ce:02:f0:bf:53:05:34:b3:15:6f:a7:
43:ff:a1:46:1d:28:aa:b0:a7:8d:b1:6e:5d:56:84:
dd:a2:e4:85:47:c1:05:ab:e6:1d:01:af:68:0c:16:
10:96:b0:d1:e2:73:f7:b4:1d:5c:4d:d7:70:57:11:
26:1f:90:ac:7b:91:c1:cf:e8:84:99:75:71:63:3b:
86:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A6:4A:5B:71:F8:6F:E7:A9:33:33:13:D6:32:40:C0:24:DE:83:08
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/L6ZKW3H4b-epMzMT1jJAwCTegwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.140.0/24
46.8.148.0/24
Signature Algorithm: sha256WithRSAEncryption
18:0a:b0:5d:ec:c6:f2:cc:b6:94:29:59:ce:e1:1a:c3:21:a5:
9b:af:75:65:6b:dd:6f:ee:33:fe:2b:61:b7:1b:eb:d4:bf:0b:
82:4e:34:6e:59:c9:08:fa:21:b5:7b:00:ae:9c:d4:ec:f1:66:
13:f4:92:04:5a:8f:4d:d6:fc:1d:c9:69:ea:7a:8b:97:e0:c2:
95:1a:01:9f:a0:86:b5:8c:8f:ca:f8:05:15:fb:76:5a:07:f2:
6c:c3:a7:b7:eb:50:ed:42:f7:5a:06:c8:4c:64:bf:63:23:51:
97:74:28:d0:f4:89:04:6c:4d:da:8d:e8:0a:ba:d1:b2:a2:44:
c8:ea:a2:d3:43:c8:4e:7e:e3:42:fc:e5:34:02:71:77:5a:48:
c2:c0:53:ef:ca:d8:2a:16:f5:a8:b8:13:7a:83:78:c7:72:a4:
ec:35:14:83:ce:81:67:29:5f:30:3e:89:31:38:15:5c:86:04:
ef:59:87:13:88:e4:f4:f2:37:1e:ec:97:48:11:92:2e:65:c6:
6f:0b:23:e0:e6:9a:9e:4e:61:28:7e:00:0c:25:82:55:bd:c0:
be:4c:f4:fe:f9:8f:a3:48:93:93:c3:d0:6b:1e:6b:08:a5:94:
4a:d3:a6:39:33:ec:15:ac:2b:bf:83:fc:20:45:3f:1f:da:18:
9d:61:7b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:57 2024 by rpki-client on console-fra.rpki-client.org