Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/tZPDNdKzSwhyOvnCyWlINa7Gydg.roa
File: tZPDNdKzSwhyOvnCyWlINa7Gydg.roa (raw, json)
Hash identifier: ZmjlR/xORa0f9XZpbjwDRkRZ5mCH+LIamiz3Xfi7N4E=
Subject key identifier: B5:93:C3:35:D2:B3:4B:08:72:3A:F9:C2:C9:69:48:35:AE:C6:C9:D8
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018DD43745FFB24BE0308920406319AFF376
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/tZPDNdKzSwhyOvnCyWlINa7Gydg.roa
Signing time: Fri 23 Feb 2024 04:26:48 +0000
ROA not before: Fri 23 Feb 2024 04:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47750
IP address blocks: 46.249.108.0/23 maxlen: 24
91.247.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 00:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d4:37:45:ff:b2:4b:e0:30:89:20:40:63:19:af:f3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 23 04:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b593c335d2b34b08723af9c2c9694835aec6c9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:85:8a:f4:88:31:dc:6c:34:e8:40:c1:4c:e7:
10:c4:4f:81:d7:ed:05:fb:8b:b3:0e:9f:0b:85:2b:
aa:55:e8:74:37:f8:cb:04:6c:45:16:d4:77:b3:be:
47:c8:12:d3:d1:48:79:d7:79:a1:60:7a:0d:95:19:
64:1b:7a:54:cc:e2:e1:b8:03:0a:02:b8:e3:ab:cc:
49:3d:72:9a:26:6a:a1:d4:f9:29:15:35:86:cd:3f:
7a:ab:be:a8:8f:14:c7:c7:ef:9b:46:67:fd:0b:a1:
eb:7f:fd:74:cd:2e:29:ab:a0:52:06:37:1a:43:32:
67:02:19:2b:ca:f1:5b:6c:36:03:b0:21:0b:c3:02:
9d:ef:59:86:51:07:f2:f4:58:f0:e6:b1:b9:e5:93:
52:d6:64:d7:20:1c:5a:64:7c:c7:6a:0d:18:be:c7:
c1:b2:d2:b9:19:63:9f:78:23:d5:c0:31:0a:0b:5d:
10:5c:16:2e:38:b3:85:38:34:a5:4e:06:39:4f:17:
0d:ae:ec:16:63:02:1e:11:6d:96:01:8a:77:78:99:
fc:b4:31:f5:70:64:d1:ab:03:65:9c:ea:56:35:50:
d4:18:fe:cb:6b:7a:58:97:67:20:c9:af:64:eb:ba:
1f:d8:9e:e8:02:a8:fd:27:5a:fb:f9:ba:d0:06:08:
54:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:93:C3:35:D2:B3:4B:08:72:3A:F9:C2:C9:69:48:35:AE:C6:C9:D8
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/tZPDNdKzSwhyOvnCyWlINa7Gydg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.108.0/23
91.247.177.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:36:94:fc:df:eb:d7:c8:68:9d:0b:ad:d9:55:93:fe:7d:32:
00:7e:5a:4b:96:98:f6:e5:a1:31:47:37:9e:fe:6a:6c:b4:c9:
4b:c4:a1:af:1b:91:cd:a3:9f:c1:a3:48:d4:3d:f6:3f:6b:1a:
72:5f:c6:53:00:28:de:9b:47:20:72:c9:90:dc:5c:98:e1:ee:
2d:82:3b:22:6a:eb:24:70:5b:77:e5:94:5a:91:79:72:7c:66:
2a:16:4c:d5:e6:72:9a:56:3b:b9:80:9b:d7:8d:fc:e4:be:a7:
b1:f9:ba:7e:63:16:fd:64:02:b3:cb:1f:9a:ea:34:76:53:1f:
9b:e9:f9:0f:70:e1:8c:c1:24:38:e4:ad:14:b8:a3:23:3e:47:
d1:5e:96:74:d7:fa:4b:b2:44:c0:0c:a8:36:07:a0:dc:d4:89:
09:d4:95:2b:2f:0f:f6:1a:26:2c:01:99:60:a7:4d:2c:14:63:
30:2f:40:d7:2b:d5:48:0a:00:3e:06:bd:cf:61:5b:26:19:fa:
a2:45:77:9d:73:89:bd:9b:a5:4e:1a:b1:0c:2d:da:ea:22:e4:
65:81:3d:85:c2:5f:b9:eb:53:1c:a5:2f:15:86:d1:7a:c1:e9:
ca:3e:70:8c:d7:72:06:d2:c1:a7:07:7a:2c:1e:9f:1b:70:59:
be:37:c8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 02:18:32 2024 by rpki-client on console-ams.rpki-client.org