Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ARpSjbFrhcICsveREmMSUR4RPGk.roa
File: ARpSjbFrhcICsveREmMSUR4RPGk.roa (raw, json)
Hash identifier: VOHpm6SqNEZ3WYZQ6ZqoGbVO2GNlyLFW4fX+pq3VldI=
Subject key identifier: 01:1A:52:8D:B1:6B:85:C2:02:B2:F7:91:12:63:12:51:1E:11:3C:69
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CCA2A6CA5592B9679F5D3C6452A0E9351
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ARpSjbFrhcICsveREmMSUR4RPGk.roa
Signing time: Tue 02 Jan 2024 12:33:47 +0000
ROA not before: Tue 02 Jan 2024 12:33:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49304
IP address blocks: 188.253.0.0/23 maxlen: 24
82.115.8.0/23 maxlen: 24
46.249.108.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 13:14:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:6c:a5:59:2b:96:79:f5:d3:c6:45:2a:0e:93:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:33:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=011a528db16b85c202b2f791126312511e113c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:31:77:db:20:d1:3a:d3:3a:89:c0:d8:57:b7:
4b:d1:06:88:14:ad:39:4d:6c:93:f2:72:b0:3d:c1:
f1:70:96:81:de:f6:df:56:19:08:b7:39:cb:58:9d:
86:f6:dd:1a:68:6a:c0:a8:8b:c2:d5:f5:8f:75:df:
bd:4c:5c:f0:b2:43:c0:6a:61:55:27:07:b8:81:dc:
8f:dd:c9:ec:db:66:f2:5b:39:9f:ab:73:bb:c8:60:
41:f9:6c:6f:ee:ac:c3:dc:83:35:46:a9:06:15:97:
2e:32:10:4c:9e:35:ee:11:89:3a:3b:b8:1d:93:8a:
21:f5:7d:9a:92:94:46:70:1b:83:c5:68:ec:11:16:
e5:d1:84:c3:1b:08:27:11:58:7d:1e:db:18:43:c1:
f8:da:95:e3:79:84:81:83:16:b6:86:c1:91:55:cc:
9c:03:8d:8f:8f:65:d0:62:4e:68:3a:d6:5b:a9:b5:
83:36:68:f2:cc:38:88:f9:24:3c:46:0e:38:9a:5f:
6f:c1:29:34:32:6a:f4:8c:69:29:e5:8e:b0:73:79:
ea:d1:c8:ce:60:3e:84:5e:c7:47:8d:9b:a6:ff:9f:
fd:b9:6b:b7:48:32:38:c9:c4:ad:05:2a:86:c2:e9:
2c:10:be:05:27:d0:2f:4d:49:8c:f6:21:56:c6:21:
8f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1A:52:8D:B1:6B:85:C2:02:B2:F7:91:12:63:12:51:1E:11:3C:69
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ARpSjbFrhcICsveREmMSUR4RPGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.108.0/23
82.115.8.0/23
188.253.0.0/23
Signature Algorithm: sha256WithRSAEncryption
47:a8:c4:8a:7c:52:bc:17:93:aa:96:0e:2c:8c:89:ed:3c:40:
69:1b:f1:4b:f3:9a:59:27:18:c2:4e:b2:cd:7d:2b:a7:00:70:
a2:40:87:03:c3:28:08:06:39:48:f3:37:13:5c:e3:62:35:95:
8b:f3:e2:3f:1f:f2:90:b0:97:a3:74:90:2a:1c:2e:72:e5:c5:
ab:84:04:44:b7:b6:59:17:15:31:9c:71:35:18:67:1f:46:e4:
ca:7c:68:c0:00:f3:68:4d:e4:62:4b:cc:cf:da:fd:a0:95:1d:
c9:80:c1:7c:3d:41:3f:81:37:d3:ce:8c:94:4a:c7:20:7b:66:
4c:a1:10:83:1d:55:f7:31:64:8c:c8:21:a8:d5:ff:49:a5:a9:
19:9c:b3:c3:88:35:15:16:05:60:83:5b:ca:f9:a0:8c:2b:a7:
46:05:ea:77:ec:fb:21:88:13:33:a5:bd:61:37:52:09:00:d5:
49:10:98:bb:f9:26:25:13:90:4a:63:4a:93:3a:37:23:75:f8:
06:4c:aa:15:62:e0:f3:44:30:3a:b3:c8:98:d9:ea:aa:ef:00:
57:65:0b:3e:ab:df:91:af:8c:f4:32:40:a8:bb:6a:21:45:5e:
96:9a:8d:84:25:37:22:13:32:6d:b2:ad:89:4f:b8:78:20:56:
cb:e3:0e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 16:58:37 2024 by rpki-client on console-fra.rpki-client.org