Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/tNlcBBF6MLT2TISZODbiE86YRHc.roa
File: tNlcBBF6MLT2TISZODbiE86YRHc.roa (raw, json)
Hash identifier: e0r7mTum+z+fVpUdkJHoBK/BNjlMGGDgL9vOgXyjRLw=
Subject key identifier: B4:D9:5C:04:11:7A:30:B4:F6:4C:84:99:38:36:E2:13:CE:98:44:77
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018572BA4BDED094268334A59D064B305311
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/tNlcBBF6MLT2TISZODbiE86YRHc.roa
Signing time: Mon 02 Jan 2023 13:44:49 +0000
ROA not before: Mon 02 Jan 2023 13:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42007
IP address blocks: 46.8.132.0/22 maxlen: 24
46.8.130.0/23 maxlen: 24
46.8.136.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:4b:de:d0:94:26:83:34:a5:9d:06:4b:30:53:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4d95c04117a30b4f64c84993836e213ce984477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ed:84:2b:9f:6e:e8:17:64:c6:e2:09:99:55:
a0:4d:f4:8b:32:5c:db:b7:5a:35:e7:05:fa:d6:fc:
26:66:b8:3d:d8:8a:80:28:a5:43:c4:ae:0c:1d:61:
27:8a:a4:94:9f:6b:ba:f1:cf:55:45:10:b0:29:4b:
de:75:f0:1e:47:8e:53:08:6c:fa:f4:e5:84:f4:8b:
9c:34:97:33:60:59:52:a7:66:50:2c:12:5b:a5:92:
90:d1:64:6f:fc:3a:84:88:e9:38:ec:68:40:bc:62:
b6:8c:a8:37:27:14:b0:65:3a:1b:3b:65:14:29:1b:
c3:ba:87:2b:0c:1c:7f:d3:02:1f:6f:45:40:dc:d1:
23:1c:42:39:3e:9f:a1:58:97:b1:f9:f6:5d:48:32:
49:55:57:e5:dd:bc:37:35:43:d6:19:82:9a:2d:58:
5c:33:fe:68:cd:67:ad:24:ec:55:9f:b8:17:78:0f:
c0:06:5f:b0:b7:89:d0:c7:3d:cc:49:b7:a7:68:7e:
bb:c9:8e:bd:2c:59:9b:32:e3:87:ca:59:1e:ac:80:
63:c8:0f:2a:51:18:4e:95:1f:8e:00:89:27:41:a8:
8a:f2:5d:11:90:75:64:cb:14:5e:0c:07:24:51:66:
c7:89:f0:c1:75:3f:10:9c:64:38:d9:23:2e:f1:dd:
7c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D9:5C:04:11:7A:30:B4:F6:4C:84:99:38:36:E2:13:CE:98:44:77
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/tNlcBBF6MLT2TISZODbiE86YRHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.130.0-46.8.139.255
Signature Algorithm: sha256WithRSAEncryption
7b:63:a8:ac:08:74:f2:22:fa:98:e4:4f:06:3a:49:10:fd:7d:
2b:29:8f:28:68:d0:ec:95:63:8f:f2:af:ff:6b:cf:32:e0:0d:
cd:40:c3:33:9f:c2:7a:71:1e:ce:73:e7:0b:5e:e9:b4:4d:12:
2c:23:f9:a3:ca:74:42:f2:13:73:66:b2:f1:60:11:4c:c4:00:
3e:16:30:de:18:2f:b9:57:2e:e4:d0:0c:bb:e4:c7:0f:6c:ae:
76:0d:89:e0:28:0c:fb:87:9c:c9:3f:87:df:88:35:23:29:22:
6a:94:47:36:dc:be:53:47:c5:1a:3f:a8:2b:52:d3:51:39:a0:
a3:04:74:2b:8c:8b:54:8f:a6:ac:60:45:18:c8:0e:3c:a4:c1:
af:a7:d8:53:0b:75:de:2a:48:0a:b4:22:0a:84:f1:3e:9e:59:
7d:59:9e:28:59:c0:a2:e4:3d:c6:bb:08:75:4c:3c:cc:f7:a9:
22:7c:5d:f0:ab:f4:b0:8c:26:8e:71:14:60:bf:4c:25:2d:58:
3b:d1:ed:c8:d2:bc:8e:90:c1:3b:76:d0:d4:ef:6a:fd:53:60:
75:78:4d:24:35:3d:47:af:3f:8c:39:bb:3a:a4:8d:03:83:5f:
83:92:4e:ef:bb:8e:66:52:9c:a8:08:03:78:fe:9b:59:75:5c:
d1:ea:4a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:57 2024 by rpki-client on console-fra.rpki-client.org