Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/GgXImdfWPYmd9RSFyD4PWmoJ--E.roa
File: GgXImdfWPYmd9RSFyD4PWmoJ--E.roa (raw, json)
Hash identifier: ahSosuy7ofQaHJvIxJpGTACMVB35cYOiPSOBJW3lDxE=
Subject key identifier: 1A:05:C8:99:D7:D6:3D:89:9D:F5:14:85:C8:3E:0F:5A:6A:09:FB:E1
Certificate issuer: /CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Certificate serial: 0187E56C27C0C152EC49F2E2A5827E829C7B
Authority key identifier: 8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/GgXImdfWPYmd9RSFyD4PWmoJ--E.roa
Signing time: Thu 04 May 2023 06:21:23 +0000
ROA not before: Thu 04 May 2023 06:21:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211560
IP address blocks: 46.174.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e5:6c:27:c0:c1:52:ec:49:f2:e2:a5:82:7e:82:9c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Validity
Not Before: May 4 06:21:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a05c899d7d63d899df51485c83e0f5a6a09fbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:08:7c:e6:ea:4e:8f:c9:2f:a9:d7:30:a1:ac:
0f:ef:dd:ef:ae:21:1a:9f:4e:c0:d6:68:13:f2:a6:
16:2a:5d:4b:c2:1c:13:eb:67:d3:15:17:e0:99:ee:
52:8c:42:e7:d9:f4:b1:0b:f4:f8:3d:83:be:df:6c:
b2:43:11:6e:a1:9c:2f:35:43:31:a8:39:59:bc:2b:
05:9a:3b:d8:66:3f:c0:40:aa:2f:20:f1:c9:9b:c1:
ea:5b:7e:73:5b:76:db:9c:24:cc:f9:3e:c7:af:ac:
c8:3b:2c:b7:78:e1:a9:2f:1f:b7:cb:6f:40:4e:d8:
17:2b:11:c6:ed:1c:0d:f9:0a:61:c2:5a:85:ea:44:
94:ab:e6:3c:8d:4c:d4:34:b8:7a:b1:83:0c:a9:cd:
01:67:6c:1c:79:d6:15:29:28:e2:16:4f:ab:e0:c2:
ff:40:3c:31:fd:d8:45:f9:69:a5:39:37:a0:48:fe:
fc:ed:9d:b2:8d:3a:47:f7:c5:1d:20:c8:c9:4b:cc:
ad:17:3a:44:e3:fe:a6:ef:0d:7d:bb:b6:03:6f:c6:
72:6b:c3:7b:10:18:67:36:7a:44:ab:5e:26:d9:43:
a8:2c:dd:0a:e4:56:8d:09:d2:1b:1d:e1:9f:21:1c:
c3:33:3f:23:4b:06:c7:84:69:35:fb:0b:83:70:78:
6f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:05:C8:99:D7:D6:3D:89:9D:F5:14:85:C8:3E:0F:5A:6A:09:FB:E1
X509v3 Authority Key Identifier:
keyid:8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/GgXImdfWPYmd9RSFyD4PWmoJ--E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.139.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ff:4a:c0:40:f0:8d:95:30:89:1c:c9:a0:ad:0c:28:23:db:
09:d1:62:c5:dd:2f:2e:24:66:69:8d:2a:0c:90:07:88:2b:92:
6f:1f:49:81:51:d8:e7:ab:2a:18:70:5f:35:52:61:01:13:58:
ed:bd:54:6a:01:ca:41:ec:9b:af:db:71:c3:d6:b3:fe:0a:95:
8f:15:80:ba:93:d4:b9:b5:0a:46:30:ec:7e:d2:be:c2:57:77:
da:cb:84:8e:d5:8d:8a:99:30:2c:e3:08:97:80:fd:09:2a:10:
99:c4:3b:48:53:1e:71:1e:a5:76:f9:bb:4e:44:99:df:c5:d2:
61:ea:3b:63:24:d2:f5:bf:2d:4d:ef:8a:1f:35:36:14:14:c1:
c4:c9:06:5a:2a:23:c1:f0:af:3f:23:d5:3a:b1:64:5c:33:83:
fd:10:98:3e:67:6a:84:5b:3d:a4:f2:83:1f:ed:67:19:3b:29:
64:39:c0:af:57:89:c9:11:7f:21:7a:e8:13:d7:ed:fe:38:f7:
6b:ea:2c:97:56:23:2d:b1:c3:2d:42:8f:d7:97:12:5d:51:2b:
93:f5:75:5b:f0:a8:7e:52:01:15:cd:9e:ef:70:ad:87:6c:bc:
17:03:d0:c5:e1:e8:0a:9b:78:3b:84:c3:7d:26:5b:08:a1:2e:
2f:f3:c3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:36 2024 by rpki-client on console-fra.rpki-client.org