Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/vDHBqL0bahnER_adAwyWMcuOGPw.roa
File: vDHBqL0bahnER_adAwyWMcuOGPw.roa (raw, json)
Hash identifier: z/hvs+ozjKYandgkeG3/ZMDyySSK/1xauJ770z0rITE=
Subject key identifier: BC:31:C1:A8:BD:1B:6A:19:C4:47:F6:9D:03:0C:96:31:CB:8E:18:FC
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 018DC74ABAF5C9E9E929BA8F7A9CEB083AE3
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/vDHBqL0bahnER_adAwyWMcuOGPw.roa
Signing time: Tue 20 Feb 2024 16:12:59 +0000
ROA not before: Tue 20 Feb 2024 16:12:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42910
IP address blocks: 46.235.8.0/24 maxlen: 32
46.235.9.0/24 maxlen: 24
46.235.10.0/24 maxlen: 32
46.235.11.0/24 maxlen: 32
178.210.160.0/24 maxlen: 24
178.210.161.0/24 maxlen: 24
178.210.162.0/24 maxlen: 24
178.210.163.0/24 maxlen: 24
178.210.164.0/24 maxlen: 24
178.210.165.0/24 maxlen: 24
178.210.166.0/24 maxlen: 24
178.210.167.0/24 maxlen: 24
178.210.168.0/24 maxlen: 24
178.210.169.0/24 maxlen: 24
178.210.170.0/24 maxlen: 24
178.210.171.0/24 maxlen: 24
178.210.172.0/24 maxlen: 24
178.210.173.0/24 maxlen: 24
178.210.174.0/24 maxlen: 24
178.210.175.0/24 maxlen: 24
178.210.176.0/24 maxlen: 24
178.210.177.0/24 maxlen: 24
178.210.178.0/24 maxlen: 32
178.210.179.0/24 maxlen: 32
178.210.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 08:23:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c7:4a:ba:f5:c9:e9:e9:29:ba:8f:7a:9c:eb:08:3a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Feb 20 16:12:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc31c1a8bd1b6a19c447f69d030c9631cb8e18fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2a:a7:cb:0e:d5:73:13:ec:3b:69:ee:03:8c:
ed:a5:51:b9:82:84:f1:5d:f2:86:7c:04:2e:01:d2:
f7:04:78:85:8f:9f:57:78:9b:59:b6:bb:68:81:33:
e4:46:a3:9a:41:ec:13:3a:0c:6a:73:c8:0f:a6:17:
35:4a:29:72:76:81:c8:23:50:16:0b:4b:7d:2c:bd:
ff:f8:6e:56:fd:72:76:1a:5d:01:1d:29:b1:12:8e:
cf:72:f8:bf:89:ba:c2:4a:07:59:d6:23:32:e7:7f:
9f:87:a4:ab:7f:a3:10:88:37:87:42:ba:68:0f:fc:
43:67:14:a0:36:cc:78:3b:89:70:74:0b:67:4b:a6:
23:d3:be:b1:aa:5b:4e:26:cf:9b:6a:ba:e2:62:d0:
25:52:e5:89:62:e1:eb:2a:51:27:4e:c0:94:98:a9:
5c:da:80:37:63:2a:60:8d:96:87:db:dc:85:e9:63:
b8:ce:e8:9c:32:7c:ec:25:83:60:04:01:6c:70:2c:
d2:af:e2:15:cd:20:e9:ea:9e:b4:4b:2d:c9:0c:2e:
c6:ec:ba:2b:08:f0:9f:cc:8c:9c:bd:ce:bc:0b:94:
33:14:c5:8e:40:06:d5:b3:0c:d1:10:fb:db:8c:ad:
2f:40:57:ca:31:73:d8:af:c3:09:8e:22:48:94:5f:
cb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:31:C1:A8:BD:1B:6A:19:C4:47:F6:9D:03:0C:96:31:CB:8E:18:FC
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/vDHBqL0bahnER_adAwyWMcuOGPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.8.0/22
178.210.160.0-178.210.180.255
Signature Algorithm: sha256WithRSAEncryption
5f:01:1a:90:8f:a3:98:4b:2e:1a:d6:ea:9d:99:31:a4:8a:35:
ce:bf:bc:2a:ab:0d:24:ed:06:24:95:0b:9c:a9:ef:0b:bb:f9:
ff:43:63:3b:62:04:eb:28:c1:16:c1:6d:3d:33:fa:a7:39:fb:
10:41:9a:d4:3e:48:b8:a2:31:9f:58:d9:68:f9:dc:f8:1a:b4:
8f:eb:ba:dd:4a:c9:4c:c2:e5:1b:e6:f0:0d:f7:a3:53:2e:83:
db:ad:7d:40:fc:d7:e3:66:12:b1:46:f6:ae:98:3c:cf:39:51:
7c:1d:e2:ef:8f:1e:73:99:26:c6:10:e5:41:8a:5b:04:73:5e:
5d:3e:e7:68:e1:9c:55:00:a3:74:25:0e:77:82:66:4a:4c:1d:
f9:92:d6:da:0b:0e:cf:f4:61:b3:98:d3:fe:dd:ec:cc:f7:5f:
6d:33:06:dd:4c:30:b6:17:67:9c:2b:cd:32:8e:07:e1:fb:d4:
b6:9d:cf:e3:84:86:25:71:de:02:c0:93:b7:74:f1:6c:65:ff:
0c:84:0d:b8:17:ac:94:3b:13:cd:3b:67:ba:0f:cb:d0:bd:9c:
1d:2b:3c:67:5c:68:cc:e5:84:9f:da:ce:54:c7:c6:e0:bd:11:
7e:bb:71:f6:ba:7c:5b:0b:7e:29:1c:6e:4e:fb:ac:97:8e:7a:
13:a3:a8:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Mar 22 11:01:12 2024 by rpki-client on console-ams.rpki-client.org