Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/feeef5-c96f-4652-94e0-ed38f649e39f/1/_X8ruAmISxi588Q2b0SUjRGQ16g.roa
File: _X8ruAmISxi588Q2b0SUjRGQ16g.roa (raw, json)
Hash identifier: orZW57KGLb8/2ErLQVPkYNLARqbjo9zFrDmHWKMGj1M=
Subject key identifier: FD:7F:2B:B8:09:88:4B:18:B9:F3:C4:36:6F:44:94:8D:11:90:D7:A8
Certificate issuer: /CN=dbc8f2ff98f610fe83830d18918f4c9037272411
Certificate serial: 018B3E2138ECA7FBE50D0C333F22E8AC3D44
Authority key identifier: DB:C8:F2:FF:98:F6:10:FE:83:83:0D:18:91:8F:4C:90:37:27:24:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28jy_5j2EP6Dgw0YkY9MkDcnJBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/feeef5-c96f-4652-94e0-ed38f649e39f/1/_X8ruAmISxi588Q2b0SUjRGQ16g.roa
Signing time: Tue 17 Oct 2023 14:54:06 +0000
ROA not before: Tue 17 Oct 2023 14:54:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216139
IP address blocks: 46.30.42.0/24 maxlen: 24
46.30.43.0/24 maxlen: 24
46.30.40.0/24 maxlen: 24
46.30.41.0/24 maxlen: 24
46.30.44.0/24 maxlen: 24
46.30.47.0/24 maxlen: 24
46.30.45.0/24 maxlen: 24
46.30.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3e:21:38:ec:a7:fb:e5:0d:0c:33:3f:22:e8:ac:3d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc8f2ff98f610fe83830d18918f4c9037272411
Validity
Not Before: Oct 17 14:54:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd7f2bb809884b18b9f3c4366f44948d1190d7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8e:e4:66:43:e4:49:ab:b6:88:5f:e7:e9:0b:
37:12:e0:0d:0b:3d:16:3c:f7:e5:28:fc:63:fc:09:
f7:91:8b:57:e1:fd:85:17:bd:16:26:35:b5:95:43:
ac:5f:c4:65:ff:37:72:d6:72:14:25:33:e8:b8:6d:
4d:62:cd:29:5b:8d:a7:dc:7d:25:0a:d1:28:70:f0:
f4:b0:48:71:b5:e1:b8:90:53:98:21:e2:08:69:f7:
32:16:be:4e:02:95:11:84:f8:23:57:fe:36:74:83:
91:c0:e4:5a:3e:01:9e:e8:e9:be:65:19:d9:bb:5f:
a0:cd:48:dd:1c:48:81:b5:85:a3:ac:aa:58:04:4d:
cf:5e:3b:56:48:c2:55:53:8c:21:e2:f9:af:a9:25:
6b:d8:45:89:39:63:8e:fc:11:db:99:ce:0e:b0:1f:
a8:25:d5:65:b1:18:93:0e:ba:5d:c1:11:ec:d8:0a:
d1:5a:68:c9:91:f7:7c:c2:5b:2c:3c:25:d7:6a:99:
d1:b5:bc:03:82:3a:64:83:db:85:53:96:a8:61:77:
98:79:34:21:fa:15:90:7b:86:08:1e:d6:cb:b9:64:
57:9c:d7:a5:7a:f6:cf:55:ae:f1:2d:b6:3a:60:15:
7c:af:4b:7a:ba:03:90:51:a2:3b:f1:25:f9:7a:8a:
41:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7F:2B:B8:09:88:4B:18:B9:F3:C4:36:6F:44:94:8D:11:90:D7:A8
X509v3 Authority Key Identifier:
keyid:DB:C8:F2:FF:98:F6:10:FE:83:83:0D:18:91:8F:4C:90:37:27:24:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28jy_5j2EP6Dgw0YkY9MkDcnJBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/feeef5-c96f-4652-94e0-ed38f649e39f/1/_X8ruAmISxi588Q2b0SUjRGQ16g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/feeef5-c96f-4652-94e0-ed38f649e39f/1/28jy_5j2EP6Dgw0YkY9MkDcnJBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.40.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:d2:55:f8:87:25:06:cd:db:fb:91:75:57:e4:eb:f3:2b:d3:
a7:cc:bc:c4:ad:2e:ca:6f:25:7f:a1:e9:21:5e:19:4c:b9:1e:
da:cf:8a:bc:37:3c:3f:dd:8d:5a:2b:ab:aa:e4:93:e8:fb:2e:
5b:d8:79:d5:58:33:d8:3f:ca:1d:64:ff:b0:bf:eb:e2:9d:88:
77:c2:2f:a6:20:d5:7b:5d:ab:f4:c5:0c:a9:ed:b1:96:70:37:
34:9b:33:2b:72:08:29:95:de:b5:16:49:a4:92:b6:55:a9:90:
7a:cb:12:09:ec:bf:63:fa:94:70:2e:27:33:94:d6:0c:38:99:
7b:e9:dd:f2:a5:74:ef:e9:cb:c3:4c:ea:2d:ad:3e:ed:e0:c0:
e8:3a:f6:90:d4:7e:ff:b3:15:03:d9:8f:88:00:85:54:e7:f0:
12:9e:87:90:fa:c1:97:b0:a6:64:59:35:1f:11:65:25:8e:3e:
58:a9:9a:f4:09:6a:3f:0f:6e:b6:ac:09:a3:ac:47:7a:9d:0b:
b3:21:f3:fe:4c:62:1c:cf:f2:f5:ae:82:83:80:df:27:bb:71:
96:ae:6d:5a:4d:c3:e0:9f:0e:c4:ba:54:2f:2d:a6:38:58:f4:
5d:c6:5b:9e:02:c9:16:09:db:99:de:f3:91:78:9e:13:3b:7f:
ea:ed:6c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:03 2024 by rpki-client on console-fra.rpki-client.org