Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/r1zxj88lIDvACrjMSu_j77-T31A.roa
File: r1zxj88lIDvACrjMSu_j77-T31A.roa (raw, json)
Hash identifier: jn54JZbLzlyugbyrTPYavuLYc91Y/qEPTERFaCvFyN0=
Subject key identifier: AF:5C:F1:8F:CF:25:20:3B:C0:0A:B8:CC:4A:EF:E3:EF:BF:93:DF:50
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 01856E0B1015665ED42C622EF09A6D9D8171
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/r1zxj88lIDvACrjMSu_j77-T31A.roa
Signing time: Sun 01 Jan 2023 15:54:56 +0000
ROA not before: Sun 01 Jan 2023 15:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50437
IP address blocks: 46.151.224.0/22 maxlen: 22
176.116.132.0/22 maxlen: 22
176.116.131.0/24 maxlen: 24
176.116.128.0/24 maxlen: 24
176.116.130.0/24 maxlen: 24
176.116.129.0/24 maxlen: 24
46.151.228.0/22 maxlen: 22
91.228.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Dec 2023 14:18:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0b:10:15:66:5e:d4:2c:62:2e:f0:9a:6d:9d:81:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 1 15:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af5cf18fcf25203bc00ab8cc4aefe3efbf93df50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b4:80:7d:b4:e2:ee:b3:bb:d0:09:2d:92:f8:
aa:a6:b5:a6:54:0f:42:6f:6f:fe:77:74:24:8e:8a:
de:75:e6:f2:86:b5:51:d6:64:6f:57:ef:a3:5d:2e:
ed:17:9f:14:fc:0c:a8:dc:16:44:6c:c2:c5:d9:65:
a8:49:5a:39:c1:37:68:18:18:6e:98:6b:f9:eb:1a:
13:06:45:95:45:80:6e:20:6f:01:1f:08:49:05:15:
fa:5d:d3:dc:4c:25:05:00:32:f4:47:29:9f:7d:d4:
43:1e:05:e6:86:1f:08:36:69:29:c2:af:fa:3a:7e:
3a:f9:57:78:f8:2c:7f:7a:b5:e5:ba:07:97:c0:59:
3c:0b:af:9f:ca:84:18:ac:41:ff:6e:2c:39:e4:09:
59:38:a6:ca:af:6b:95:41:e1:56:15:af:48:6e:72:
27:f2:1c:69:cd:21:ba:85:7c:19:be:c4:2d:98:91:
df:0d:31:8b:18:a0:65:ab:a2:e0:5a:9e:07:b4:56:
e2:3c:4b:92:1e:63:83:da:3e:03:94:6b:44:9f:4c:
82:57:4d:ba:21:6d:b1:56:be:6c:b5:cf:dc:13:40:
34:2c:4d:28:fd:a1:ea:60:60:11:9f:26:f6:83:94:
1b:4a:b8:f2:c9:70:df:1f:ee:70:57:f3:76:79:95:
a2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5C:F1:8F:CF:25:20:3B:C0:0A:B8:CC:4A:EF:E3:EF:BF:93:DF:50
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/r1zxj88lIDvACrjMSu_j77-T31A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.224.0/21
91.228.145.0/24
176.116.128.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:58:08:cc:f8:bc:20:45:88:6c:61:d3:a8:e7:a5:16:01:c4:
66:cc:5f:ef:89:20:ad:b6:30:9a:d7:9b:d0:15:4e:7b:87:71:
fe:e1:a2:9f:2b:40:0e:78:c2:12:48:66:44:d8:bd:0c:b9:66:
10:14:a8:99:cc:9a:f1:3f:fd:83:d6:73:9a:54:6a:cc:ff:ee:
dc:04:0a:90:82:6c:33:86:68:f6:5f:f1:fe:01:25:42:a1:9e:
68:f4:62:c0:3f:ad:39:45:9e:da:b7:65:20:d4:30:57:45:f7:
e0:f1:52:4b:4e:a1:30:6f:fc:1f:fd:cc:30:c6:f3:34:b8:e1:
4f:30:65:d2:ee:3e:b8:1d:90:7a:4a:7f:7d:f2:d4:a4:54:e3:
10:2f:c7:e9:c6:33:7e:1c:54:db:73:33:70:cf:61:73:c0:71:
ec:79:83:08:60:ba:b4:ad:f1:01:ee:df:74:82:01:91:c5:ba:
7a:2a:45:b9:7b:75:93:ec:a5:e7:b6:c5:10:59:df:54:60:20:
4e:44:c6:dc:da:5f:59:8e:a7:92:58:99:ab:cd:ee:dd:48:41:
5a:7f:86:94:e6:68:d3:23:fb:e6:21:6f:60:0a:9c:f9:f4:37:
d2:d6:af:b9:25:f0:63:b5:6c:de:8f:7a:6a:4c:67:f2:82:bb:
0f:ae:4e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:29 2024 by rpki-client on console-ams.rpki-client.org