Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/aiXThIUuOoVhIlhzSdXY3RXbC-s.roa
File: aiXThIUuOoVhIlhzSdXY3RXbC-s.roa (raw, json)
Hash identifier: dtIrfP1CZdOBvGgWbWEyr5namW9kgLANfrsQ+PQYAh8=
Subject key identifier: 6A:25:D3:84:85:2E:3A:85:61:22:58:73:49:D5:D8:DD:15:DB:0B:EB
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 019136451D0CDF1C5D592E5E6EB20B4F53CB
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/aiXThIUuOoVhIlhzSdXY3RXbC-s.roa
Signing time: Fri 09 Aug 2024 08:33:04 +0000
ROA not before: Fri 09 Aug 2024 08:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56971
IP address blocks: 46.8.228.0/24 maxlen: 24
46.8.229.0/24 maxlen: 24
46.8.230.0/24 maxlen: 24
46.8.231.0/24 maxlen: 24
46.8.236.0/24 maxlen: 24
46.8.237.0/24 maxlen: 24
46.8.238.0/24 maxlen: 32
188.130.154.0/24 maxlen: 24
188.130.206.0/24 maxlen: 32
188.130.207.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 22 Aug 2024 07:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:36:45:1d:0c:df:1c:5d:59:2e:5e:6e:b2:0b:4f:53:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Aug 9 08:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a25d384852e3a856122587349d5d8dd15db0beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:37:2b:b3:0d:b7:4f:56:30:65:6b:2f:5c:52:
c2:ed:ad:f4:92:7a:80:89:d6:d2:09:73:1c:e8:83:
9c:8c:94:11:e4:ff:97:0e:80:0e:ed:78:b1:e2:56:
5f:f0:25:df:16:9b:3c:0d:5c:3f:8f:10:90:14:55:
2b:8c:1d:69:26:3c:b6:9e:4f:4c:2d:f3:36:49:7c:
63:a7:c4:56:70:45:01:62:59:17:18:90:da:35:ae:
f6:ea:f9:76:39:93:ef:88:e3:ed:e1:d3:25:45:c4:
ad:a0:85:a2:12:02:e2:12:9b:d5:cf:e1:c6:bc:ad:
b6:09:ae:8d:ee:e7:51:68:67:dc:d2:ce:b6:c5:ad:
f4:70:4b:70:78:2c:d8:31:67:75:d8:d4:a7:87:fd:
ce:ef:67:c5:86:ca:2b:b9:20:76:d5:b9:3c:a4:3d:
bd:aa:35:96:9a:8d:fb:d0:3e:5f:29:7f:11:99:a6:
2a:48:3b:3f:82:59:0d:16:06:1b:0a:78:a8:91:09:
a6:3f:43:c2:07:2d:68:97:e3:95:88:52:b4:cf:f7:
97:f9:2d:bb:8b:91:73:de:cc:4f:0d:d3:90:77:c5:
70:b4:59:88:72:15:e0:19:69:b4:a0:0f:65:7b:2c:
5b:ed:18:4e:e7:36:ea:d6:69:a7:80:56:f8:cc:71:
f1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:25:D3:84:85:2E:3A:85:61:22:58:73:49:D5:D8:DD:15:DB:0B:EB
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/aiXThIUuOoVhIlhzSdXY3RXbC-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.228.0/22
46.8.236.0-46.8.238.255
188.130.154.0/24
188.130.206.0/23
Signature Algorithm: sha256WithRSAEncryption
85:13:fd:9d:9a:41:df:37:c5:6f:9d:57:75:96:4f:9b:5f:fa:
0f:32:09:84:e7:33:48:7d:cf:1f:de:d0:cd:ff:f9:35:41:f0:
98:fe:c0:4f:ac:46:89:49:c0:32:49:72:62:b8:f6:ea:e8:64:
bb:8c:0a:52:90:cc:8d:06:cb:e1:8f:08:92:81:48:39:60:61:
76:ae:fc:89:a3:9a:f0:ee:23:f1:67:0f:f6:7b:c3:65:50:41:
0a:d3:e6:8a:0d:34:eb:fa:f8:16:07:7c:05:a0:b4:de:ed:65:
aa:58:20:de:02:c1:ea:d8:69:f1:0b:9a:2c:dd:df:eb:ff:7c:
8d:67:64:60:69:08:eb:79:c0:1d:96:6b:6c:57:cf:65:f0:66:
20:bd:3d:00:64:5d:f3:df:5e:52:a2:61:11:a1:43:62:44:b6:
30:3b:b7:ec:87:74:1b:1f:37:22:a0:79:a3:62:3c:f1:50:90:
cd:22:f5:2d:39:75:fd:88:2c:79:0e:2e:20:6b:e1:4d:62:e3:
94:19:7b:84:96:05:93:d4:86:81:15:a6:07:e9:ed:cc:05:a4:
bc:75:c3:d5:57:59:57:0c:fd:23:1d:0d:fa:d2:e9:70:69:64:
49:fe:d7:ed:ed:49:50:32:b8:96:e5:8c:d4:2d:b4:a5:8e:0a:
f5:8a:1c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 09:45:30 2024 by rpki-client on console-ams.rpki-client.org