Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/Fzbt-5ZKtMNphiDJ0QJC0ZAqYio.roa
File: Fzbt-5ZKtMNphiDJ0QJC0ZAqYio.roa (raw, json)
Hash identifier: X2ZxfuDILyrFsW9IMSsETcLw1V64KdhCYAaD7eH9f/I=
Subject key identifier: 17:36:ED:FB:96:4A:B4:C3:69:86:20:C9:D1:02:42:D1:90:2A:62:2A
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 0191BEC0A8F3D3D5555F0C5E19DC54CEDC99
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/Fzbt-5ZKtMNphiDJ0QJC0ZAqYio.roa
Signing time: Wed 04 Sep 2024 20:36:22 +0000
ROA not before: Wed 04 Sep 2024 20:36:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 46.151.176.0/24 maxlen: 24
46.151.177.0/24 maxlen: 24
46.151.178.0/24 maxlen: 24
46.151.179.0/24 maxlen: 24
46.151.180.0/24 maxlen: 24
46.151.181.0/24 maxlen: 24
46.151.182.0/24 maxlen: 24
46.151.183.0/24 maxlen: 24
83.142.208.0/24 maxlen: 24
83.142.209.0/24 maxlen: 24
83.142.210.0/24 maxlen: 24
83.142.211.0/24 maxlen: 24
83.142.212.0/24 maxlen: 24
83.142.214.0/24 maxlen: 24
83.142.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 20:57:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:be:c0:a8:f3:d3:d5:55:5f:0c:5e:19:dc:54:ce:dc:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Sep 4 20:36:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1736edfb964ab4c3698620c9d10242d1902a622a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:70:e3:87:e2:e4:c6:e1:19:ec:93:60:b6:
84:5a:72:c6:05:5f:65:2b:fc:af:aa:6f:95:32:7b:
dc:a2:93:48:0f:45:e1:bd:3b:d5:00:dc:7e:d5:b8:
47:99:7d:68:ab:48:50:46:fd:c4:6f:c4:bd:23:d0:
fe:58:7a:f2:1b:7c:e3:9b:33:4b:a4:9d:3c:49:71:
31:c7:ea:1a:e4:b9:4a:97:86:d9:44:e9:c4:e7:b6:
8f:8a:40:9b:ef:09:a5:da:2a:4c:3d:b9:29:88:29:
e3:d4:01:70:c4:73:3a:b3:f9:f7:02:78:0e:43:9a:
c0:61:76:da:2b:1b:a1:ea:2a:24:ba:2d:37:2e:90:
84:84:e4:e5:94:8e:bb:4a:db:de:68:c0:c3:02:37:
19:42:fc:bd:63:82:ed:e2:66:08:87:78:f2:61:73:
1c:17:4b:6c:89:44:87:ee:45:32:dc:a2:5a:e0:04:
ed:92:3e:ad:d3:bd:2d:d6:78:83:04:7c:be:02:59:
8d:8d:a2:47:5c:03:1b:98:a7:82:67:f4:9f:11:23:
89:1b:48:da:0b:ca:10:5d:e1:25:de:81:f7:64:e8:
69:b7:b9:43:a8:da:bf:da:b9:6e:7d:f1:53:27:f2:
69:78:32:4b:e1:d5:96:95:ac:87:4f:e5:b7:64:7b:
54:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:36:ED:FB:96:4A:B4:C3:69:86:20:C9:D1:02:42:D1:90:2A:62:2A
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/Fzbt-5ZKtMNphiDJ0QJC0ZAqYio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.176.0/21
83.142.208.0-83.142.212.255
83.142.214.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:cd:b6:7c:c6:6d:f1:7f:6e:9e:b2:71:bc:67:85:a4:60:16:
c3:f2:b9:fe:9e:e8:f4:d1:4d:ef:0e:7a:15:6f:c1:60:16:aa:
5f:5a:c9:c8:3b:03:31:34:79:cf:76:80:5e:9f:ef:6c:b7:22:
22:fc:3a:dc:44:64:cc:69:fc:ee:62:37:fd:df:e8:b0:35:5e:
49:dc:72:fa:25:32:47:9c:fd:e0:22:bf:b0:e7:d7:40:0c:42:
2d:97:20:f8:63:f7:f8:ac:9b:16:0d:c4:b4:8a:69:7c:69:4e:
75:d6:98:cb:48:28:df:ab:2c:6d:ef:48:90:ec:79:57:c2:f1:
b5:b1:ec:cf:2f:7d:2a:6a:35:89:e7:d1:3f:10:c0:78:49:1b:
87:bf:d6:2f:88:9a:11:25:56:3b:7e:46:ba:b7:f3:04:9b:79:
7a:07:f5:e3:1d:b0:a0:cd:05:c0:fd:24:22:76:83:c2:64:d8:
af:7c:c1:aa:8d:9d:f8:98:d5:cc:f1:d9:b2:ae:f6:ee:17:29:
e2:c7:f2:68:6c:67:cd:4e:86:01:1c:06:f3:b8:e7:f4:78:c2:
eb:4b:bb:8d:6f:5c:ea:eb:73:4b:19:7c:65:c9:7b:34:55:33:
d0:7d:13:e7:39:0a:03:d7:9a:73:db:81:b2:e0:02:4a:63:37:
c5:d3:5c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 00:13:35 2024 by rpki-client on console-ams.rpki-client.org