Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/B6GuQZ_5aalPt2TgDTQw2xPk_mI.roa
File: B6GuQZ_5aalPt2TgDTQw2xPk_mI.roa (raw, json)
Hash identifier: I9oK6Gtf0bcS5DGbG3oqgf+C+wqSYBEHkFYfQKdH64o=
Subject key identifier: 07:A1:AE:41:9F:F9:69:A9:4F:B7:64:E0:0D:34:30:DB:13:E4:FE:62
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 018CC6B78294236075A3C2EF875C225AB842
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/B6GuQZ_5aalPt2TgDTQw2xPk_mI.roa
Signing time: Mon 01 Jan 2024 20:29:24 +0000
ROA not before: Mon 01 Jan 2024 20:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51897
IP address blocks: 109.122.248.0/24 maxlen: 24
109.122.251.0/24 maxlen: 24
109.122.249.0/24 maxlen: 24
109.122.250.0/24 maxlen: 24
46.143.192.0/19 maxlen: 19
Validation: Failed, certificate revoked on Sat 13 Jan 2024 10:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:82:94:23:60:75:a3:c2:ef:87:5c:22:5a:b8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 1 20:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07a1ae419ff969a94fb764e00d3430db13e4fe62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:45:2d:ad:07:a7:21:52:41:8e:24:33:55:25:
3e:3e:5b:f3:27:fb:dd:5c:94:14:f9:bb:8f:1e:bc:
f4:df:9d:f9:bc:e5:40:63:24:e3:ff:c9:eb:a8:35:
de:59:5a:64:d7:95:09:dc:f4:af:0b:03:16:5d:d1:
c7:8f:ce:7f:e4:e2:d4:52:af:e1:61:7a:b8:a7:f6:
e0:e5:aa:6b:a9:e8:4f:34:c6:17:3b:b8:86:14:22:
c1:e2:10:db:92:04:d2:f6:98:34:fe:0e:02:9e:fe:
de:d5:9b:2b:80:3d:84:6e:d4:60:cf:19:b5:67:a9:
3e:99:61:36:fe:62:4d:4d:ad:c7:2e:8e:1e:a9:ff:
0b:11:05:b1:7c:6b:f3:55:6a:5e:d3:c8:e5:15:ad:
a2:d8:9d:52:a9:ef:f9:69:5b:c7:50:5a:6a:c0:1e:
6c:b9:b0:a5:85:61:26:ba:6d:5f:cd:09:d5:42:c1:
04:e3:b6:2c:0b:9f:44:08:01:ab:0f:03:b1:da:6e:
2a:05:90:3a:1e:8f:77:7e:e3:b2:dc:9b:73:26:94:
1c:47:ad:0a:4e:1b:17:09:dd:bc:24:8d:1c:fa:de:
d8:da:3b:16:aa:88:f4:bb:ff:ea:7f:33:44:c1:09:
4a:98:c5:95:cb:65:30:5a:fe:73:73:28:0c:fe:34:
ef:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A1:AE:41:9F:F9:69:A9:4F:B7:64:E0:0D:34:30:DB:13:E4:FE:62
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/B6GuQZ_5aalPt2TgDTQw2xPk_mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.192.0/19
109.122.248.0/22
Signature Algorithm: sha256WithRSAEncryption
57:4c:4a:94:de:b8:f0:fb:ca:f0:69:54:49:b0:7f:66:a8:92:
ef:bc:29:5d:0f:cc:23:c3:2a:a6:ba:18:0c:e6:59:50:df:5d:
64:1a:b1:df:3e:80:f2:d6:b1:29:97:62:c6:68:94:ff:0f:2f:
e9:f4:ea:90:ec:31:88:2c:74:f3:3a:d8:d4:f2:6c:d8:dd:33:
aa:95:e2:72:11:09:cb:ae:ea:f4:bd:97:d5:54:24:c3:7e:eb:
dd:2a:c4:7b:f0:65:61:5a:de:8e:dc:4b:7c:aa:79:b7:cd:9e:
48:d8:98:44:9e:09:e2:d9:4c:86:c0:5e:02:45:ce:a4:71:df:
01:2e:c2:92:e3:63:d1:4a:76:fd:91:65:d8:7c:4a:79:d0:28:
5c:4f:8c:bf:1d:80:36:58:f0:01:b6:05:1d:b6:6e:e6:a8:74:
ce:e2:25:36:f0:51:6e:38:ae:41:5c:b3:98:48:1b:af:22:63:
5b:c0:2a:f6:08:ae:cc:c8:42:66:47:ef:b7:6f:71:f4:6e:7e:
93:d0:6d:00:3e:ed:6b:be:18:6f:01:85:82:ee:ad:b2:30:7b:
3a:f7:d4:2b:fa:0f:c0:d9:65:f4:e0:88:3a:94:c5:d0:21:c6:
24:3d:81:68:13:b6:82:ec:41:6d:11:23:7f:a7:e3:66:28:e5:
5f:91:0c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 13 13:18:47 2024 by rpki-client on console-fra.rpki-client.org