Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/QBkv3O3SIbWjjRsXHhw_-VuQJYU.roa
File: QBkv3O3SIbWjjRsXHhw_-VuQJYU.roa (raw, json)
Hash identifier: GTYFR/Kfn4FJ+96QeGrya/7LKPhDegvXA2TRsTFdaiA=
Subject key identifier: 40:19:2F:DC:ED:D2:21:B5:A3:8D:1B:17:1E:1C:3F:F9:5B:90:25:85
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 018F286B294E34FEE630108E511F9BDED5C2
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/QBkv3O3SIbWjjRsXHhw_-VuQJYU.roa
Signing time: Mon 29 Apr 2024 05:54:22 +0000
ROA not before: Mon 29 Apr 2024 05:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15704
IP address blocks: 46.6.16.0/21 maxlen: 21
46.6.24.0/21 maxlen: 21
46.6.32.0/21 maxlen: 21
46.6.40.0/21 maxlen: 21
46.6.48.0/21 maxlen: 21
46.6.56.0/21 maxlen: 21
178.237.224.0/21 maxlen: 21
178.237.232.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 06 May 2024 05:51:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:28:6b:29:4e:34:fe:e6:30:10:8e:51:1f:9b:de:d5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Apr 29 05:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40192fdcedd221b5a38d1b171e1c3ff95b902585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:60:51:1b:cf:df:27:79:d6:6b:5f:84:6a:23:
a0:fb:a0:ca:8e:89:50:fb:82:6d:56:88:f4:26:dc:
08:63:8c:78:e7:10:a8:bc:29:4e:10:c1:7b:16:e2:
ad:f9:88:96:d7:26:fa:dd:df:48:7e:bc:6a:72:6a:
87:d8:22:13:33:92:b7:58:3d:fb:3c:95:d0:e0:e1:
89:74:4f:3f:b0:c4:b2:fd:f1:1d:c5:e0:16:18:22:
1e:3d:50:d4:be:3a:11:63:44:99:a0:e1:04:57:8f:
8a:fe:f9:54:3e:ca:34:b3:4e:c6:74:e3:f5:a3:d8:
31:08:9d:9b:7c:1c:3f:45:4c:98:b3:c2:53:14:38:
45:b5:70:d8:9e:ea:ec:7f:a2:00:22:a8:e5:26:72:
02:e9:61:a1:a7:e4:4e:55:e2:87:1e:87:ab:9a:dd:
30:73:4e:5f:99:7a:13:59:ff:14:f3:19:b0:67:2b:
8d:df:4f:ff:94:76:de:49:43:70:e6:06:3e:5f:7c:
b6:0a:14:95:e7:fe:a1:3d:00:3f:dc:f4:71:8c:34:
5a:21:b7:af:dc:fc:f5:b3:b8:25:b0:b0:8a:64:82:
80:5e:a5:2b:95:e7:bf:94:5f:00:a8:bb:12:16:75:
b5:00:eb:92:0f:d1:06:e8:87:fc:74:a7:d8:98:81:
58:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:19:2F:DC:ED:D2:21:B5:A3:8D:1B:17:1E:1C:3F:F9:5B:90:25:85
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/QBkv3O3SIbWjjRsXHhw_-VuQJYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.6.16.0-46.6.63.255
178.237.224.0/20
Signature Algorithm: sha256WithRSAEncryption
9e:a3:65:a8:62:ad:aa:f9:2b:17:67:b5:13:10:2b:7e:f8:c2:
6b:a5:35:b9:0d:3b:03:07:97:2d:f1:9a:07:e3:70:c3:f5:1e:
1b:40:53:ff:7a:ff:da:6a:51:2d:99:36:9f:27:78:f1:e5:59:
2a:83:6a:be:c0:15:f9:b1:15:e9:e1:c5:7f:a8:2a:e1:c9:47:
62:ef:8d:7a:8e:30:bc:d3:ba:81:86:d2:30:8c:6e:fb:04:05:
ea:73:5b:96:b2:44:71:c4:68:7d:2d:49:0c:a5:23:89:1f:dc:
9f:77:de:e0:e8:42:19:13:49:3c:c3:22:98:2c:f4:94:61:69:
38:da:48:63:6c:a8:ae:1c:42:4d:52:a1:13:2a:2a:e7:20:2c:
26:73:fb:34:16:da:57:f9:27:87:50:3c:5b:e6:8f:19:f4:a7:
85:e3:65:af:d2:c9:33:ca:cb:12:f2:35:17:2e:e9:89:21:59:
37:7a:4f:c8:84:ac:61:13:6d:ff:9b:e2:27:eb:ed:04:cb:ae:
f3:d7:17:24:04:ab:f7:67:ab:d6:7d:7b:0f:0b:41:01:39:f8:
cd:fd:c2:80:93:e4:7c:02:3e:6d:e2:7a:22:c4:b8:c5:a3:72:
f8:f4:8f:9e:11:de:81:b8:44:83:48:f3:0b:71:e8:ca:47:2e:
09:4b:fc:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:08 2024 by rpki-client on console-fra.rpki-client.org