Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/u5AkNRo1pS6HHmXOjy_bLq9YyZs.roa
File: u5AkNRo1pS6HHmXOjy_bLq9YyZs.roa (raw, json)
Hash identifier: k/4UkTxNnW1sHoi4EemC2jVUby1/o/RagQFBz7DJXzs=
Subject key identifier: BB:90:24:35:1A:35:A5:2E:87:1E:65:CE:8F:2F:DB:2E:AF:58:C9:9B
Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial: 018A5FA726D90A4C6AF610E4DB92A6609CA6
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/u5AkNRo1pS6HHmXOjy_bLq9YyZs.roa
Signing time: Mon 04 Sep 2023 10:05:04 +0000
ROA not before: Mon 04 Sep 2023 10:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52145
IP address blocks: 46.253.90.0/24 maxlen: 24
46.253.90.0/25 maxlen: 25
46.253.90.128/25 maxlen: 25
46.253.91.0/24 maxlen: 24
46.253.88.0/21 maxlen: 21
46.253.92.0/24 maxlen: 24
46.253.93.0/24 maxlen: 24
46.253.94.0/24 maxlen: 24
46.253.95.0/24 maxlen: 24
2a04:19c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:a7:26:d9:0a:4c:6a:f6:10:e4:db:92:a6:60:9c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Validity
Not Before: Sep 4 10:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb9024351a35a52e871e65ce8f2fdb2eaf58c99b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dc:b4:5b:1a:70:7a:e5:63:66:13:86:ac:cf:
76:b0:53:11:1c:51:99:d2:4a:6d:35:ea:86:11:f7:
70:04:1e:63:2b:4a:64:f0:e5:00:a2:65:30:23:11:
4c:f7:90:7e:f7:ee:c8:bd:d6:eb:e7:24:ee:ea:88:
14:1b:3b:9c:4b:62:9d:45:0e:28:1e:2d:11:45:71:
e6:5f:11:0b:8a:ac:3c:ee:df:06:2c:2e:cd:93:24:
33:da:61:5a:f5:c3:94:b3:9a:f6:6a:6f:d8:d9:d6:
5a:c8:cd:a2:b2:a9:e3:a2:7f:a5:55:3d:6a:51:fb:
86:24:55:c8:90:d8:38:19:02:f5:c9:05:ff:44:96:
e3:fc:11:a0:4d:59:50:ca:7d:18:b3:32:5c:54:76:
d2:6e:4f:d0:93:63:20:40:90:44:07:aa:0a:75:99:
34:4b:67:e5:c0:06:d0:fa:10:4c:72:1e:1e:b2:4e:
9c:1b:22:d7:ff:09:c2:dd:0e:69:a2:bb:6b:dc:bf:
4f:71:34:48:8f:b3:7e:3d:de:f2:45:ba:f8:39:79:
fe:9f:1d:2e:1b:b6:72:0c:98:20:7f:a0:52:fc:eb:
79:ee:d8:e6:fc:cf:98:c1:bc:46:aa:ef:2d:9b:f3:
e7:16:b3:60:6c:fb:10:76:bc:e2:45:cb:e2:99:b9:
43:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:90:24:35:1A:35:A5:2E:87:1E:65:CE:8F:2F:DB:2E:AF:58:C9:9B
X509v3 Authority Key Identifier:
keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/u5AkNRo1pS6HHmXOjy_bLq9YyZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.88.0/21
IPv6:
2a04:19c0::/29
Signature Algorithm: sha256WithRSAEncryption
85:e6:c5:e3:4f:42:1d:ae:08:f4:c6:e8:7b:41:04:51:bd:f5:
73:3c:09:5d:93:75:35:ab:d5:13:b2:f6:d2:cf:d1:80:2e:a0:
6d:83:7e:c9:c9:f1:95:6a:16:60:15:e1:0b:0e:bb:7f:56:4f:
1f:0c:54:80:d3:93:f7:fa:1c:d3:67:a0:39:5c:74:e2:89:d2:
72:c9:ab:f3:31:54:38:56:f5:56:7a:fc:cc:98:0d:ad:aa:36:
9e:32:17:5f:53:37:e1:76:b5:bc:89:6d:fc:89:44:51:8a:38:
f6:aa:c4:92:fe:4f:d2:8e:7d:f9:82:1d:90:a9:b5:cb:c9:ca:
e1:2a:29:a3:b8:a3:4e:90:a3:90:14:6a:ec:57:c2:fd:81:69:
0b:1d:db:9f:22:bc:76:9c:a6:dc:19:33:ca:cf:59:ea:c0:ce:
9a:c8:3b:5f:f5:aa:65:60:cf:35:7a:e4:23:ba:fb:2b:bc:8e:
e4:9b:fb:ab:49:31:99:df:6b:e6:09:a7:59:d3:78:ac:46:54:
c7:53:ff:58:b1:11:64:bd:9e:5e:ab:bd:ac:1e:58:54:f9:22:
ae:91:df:9c:01:92:6a:6a:88:ec:69:28:2c:c8:f9:70:28:f5:
10:18:aa:bc:2c:c3:df:c8:ee:dd:61:c5:13:e4:60:b0:e7:a9:
4d:92:a8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 07:33:22 2023 by rpki-client on console-ams.rpki-client.org