Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/4JHj93QUF8ApaoTEXesW7IJAbDs.roa
File: 4JHj93QUF8ApaoTEXesW7IJAbDs.roa (raw, json)
Hash identifier: TxT1iicRNNw+6ZS7uYz2TlNBfYss++RcrzlyEV2RVpA=
Subject key identifier: E0:91:E3:F7:74:14:17:C0:29:6A:84:C4:5D:EB:16:EC:82:40:6C:3B
Certificate issuer: /CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0
Certificate serial: 018571A7B177789391AC669F1862A477A11F
Authority key identifier: 9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/4JHj93QUF8ApaoTEXesW7IJAbDs.roa
Signing time: Mon 02 Jan 2023 08:44:53 +0000
ROA not before: Mon 02 Jan 2023 08:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51825
IP address blocks: 46.31.96.0/24 maxlen: 24
46.31.97.0/24 maxlen: 24
46.31.98.0/24 maxlen: 24
46.31.98.0/23 maxlen: 23
46.31.96.0/21 maxlen: 21
46.31.96.0/23 maxlen: 23
46.31.102.0/23 maxlen: 23
46.31.103.0/24 maxlen: 24
46.31.100.0/23 maxlen: 23
46.31.99.0/24 maxlen: 24
46.31.100.0/24 maxlen: 24
46.31.101.0/24 maxlen: 24
46.31.102.0/24 maxlen: 24
185.24.204.0/22 maxlen: 22
185.24.204.0/23 maxlen: 23
185.24.205.0/24 maxlen: 24
185.24.206.0/24 maxlen: 24
185.24.206.0/23 maxlen: 23
185.24.204.0/24 maxlen: 24
185.24.207.0/24 maxlen: 24
2a02:5080::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 22 Jan 2023 12:51:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:b1:77:78:93:91:ac:66:9f:18:62:a4:77:a1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0
Validity
Not Before: Jan 2 08:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e091e3f7741417c0296a84c45deb16ec82406c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:2d:61:a4:ef:7e:28:84:cb:04:a4:05:14:
de:e0:d1:61:03:38:ed:84:9e:4e:17:31:e6:0d:3d:
3c:d2:f7:bc:80:b8:af:e7:00:90:da:42:bf:75:0f:
08:c7:17:56:18:22:1b:bc:8c:a1:9d:b6:81:e5:d8:
48:c5:e9:d5:1e:ec:c8:e9:63:54:88:e6:cb:5b:72:
e1:6f:23:77:e5:01:19:32:29:b8:67:29:99:6b:85:
e8:ef:53:ef:a0:cb:c7:73:11:dc:03:0a:7f:97:c4:
30:8f:07:b8:61:62:e6:d5:1c:a2:3a:fc:0a:3e:0c:
b5:c5:b0:62:91:ca:45:ad:47:b8:1a:93:b4:1f:5f:
4b:ae:58:88:3c:84:bc:4b:a8:45:36:7e:7d:af:b3:
97:b9:34:80:c2:d7:ea:62:50:4e:3c:ed:aa:30:e9:
71:bf:68:f6:03:71:d4:ab:a6:d8:e2:1b:11:f3:ae:
c4:a9:e9:46:aa:48:f7:aa:24:64:c0:6f:f0:ea:c0:
22:f1:fb:a6:94:cb:45:ab:03:38:63:3e:5d:29:6a:
be:f1:06:7c:57:d3:d6:12:e6:96:60:17:6c:23:77:
1b:6b:7a:61:f4:86:71:4a:26:87:da:5f:e5:f2:6b:
a4:e3:a5:e4:75:75:46:7c:04:ef:97:e4:11:9d:37:
a3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:91:E3:F7:74:14:17:C0:29:6A:84:C4:5D:EB:16:EC:82:40:6C:3B
X509v3 Authority Key Identifier:
keyid:9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/4JHj93QUF8ApaoTEXesW7IJAbDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.96.0/21
185.24.204.0/22
IPv6:
2a02:5080::/32
Signature Algorithm: sha256WithRSAEncryption
26:a3:f2:a2:8e:9a:f4:68:18:e8:10:54:06:51:cb:da:10:00:
02:36:ea:76:76:29:dc:86:c3:46:fe:ff:b8:f4:20:fa:e3:8c:
01:75:1b:cc:46:fd:3a:37:f4:5c:14:eb:e6:41:04:b6:df:b1:
65:ef:55:a1:47:73:06:49:dd:6e:2f:28:5b:e7:e1:3d:29:1c:
e5:07:20:0f:96:ce:ec:d6:78:41:34:b0:97:ce:ce:a9:ef:03:
aa:35:db:11:bc:f7:97:fe:1c:ea:43:52:83:22:e7:a8:19:85:
18:e9:32:ec:6b:5c:f3:7b:91:61:a9:a7:fb:c2:ab:b4:a3:04:
42:38:e7:ec:38:75:58:82:65:01:b9:a9:89:1d:11:10:68:f5:
36:da:3b:d1:89:c4:f8:e3:bc:46:3e:06:90:da:63:51:8f:5a:
a0:4e:d7:1d:ea:a2:af:a4:5a:b3:0e:67:bb:80:ba:ca:f4:e2:
32:01:c2:e6:2b:aa:0d:46:3c:1d:20:42:36:ec:a8:7f:cc:a3:
a8:4f:a6:02:68:2f:f1:01:fe:33:62:5a:ae:84:0d:5a:e1:9a:
11:39:40:58:12:f0:21:5c:30:a7:97:fa:c9:4c:0e:72:f5:58:
2a:bd:05:b2:e9:2a:96:82:68:fd:b4:56:f2:e2:4f:fb:a8:3a:
55:d9:16:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:04 2024 by rpki-client on console-fra.rpki-client.org