Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/mTmShTwheXzCwTlX5b8w5TfQ2T0.roa
File: mTmShTwheXzCwTlX5b8w5TfQ2T0.roa (raw, json)
Hash identifier: ZhgHOak6vBNH6Q1sgmv1mA7TKVtXsa131JfasworvRA=
Subject key identifier: 99:39:92:85:3C:21:79:7C:C2:C1:39:57:E5:BF:30:E5:37:D0:D9:3D
Certificate issuer: /CN=27321078f359d7990276dabb0f8c30070e685963
Certificate serial: 01856FF03F15AE6C2C08880553345776FFE0
Authority key identifier: 27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/mTmShTwheXzCwTlX5b8w5TfQ2T0.roa
Signing time: Mon 02 Jan 2023 00:44:53 +0000
ROA not before: Mon 02 Jan 2023 00:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13121
IP address blocks: 46.231.224.0/21 maxlen: 21
213.169.64.0/19 maxlen: 19
213.169.88.0/21 maxlen: 21
2a01:6880:0:1::/64 maxlen: 64
2a01:6880::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:3f:15:ae:6c:2c:08:88:05:53:34:57:76:ff:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27321078f359d7990276dabb0f8c30070e685963
Validity
Not Before: Jan 2 00:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=993992853c21797cc2c13957e5bf30e537d0d93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b2:44:bf:03:5a:e2:a8:14:bb:55:e7:84:ba:
de:5e:5f:0d:cf:e2:af:42:e4:1f:6d:fd:92:59:99:
5f:65:9f:67:5c:12:2f:9c:03:a3:a3:cc:c8:bf:a3:
8e:eb:c8:57:5a:b1:23:63:5b:14:fb:ca:ac:9c:43:
78:07:0f:ef:87:f2:de:01:88:04:2d:1c:87:40:fc:
65:4d:27:c5:e8:bd:ee:ce:b2:bd:5a:31:ae:f2:7c:
5c:f0:f8:f3:66:01:32:a6:c1:23:90:ce:7d:8b:34:
6a:d4:6b:f5:84:b1:cc:53:b1:7a:a9:6f:be:05:22:
1a:6c:74:66:6d:e3:e6:e3:36:5d:96:06:04:5f:a7:
21:22:36:1b:63:94:b9:54:13:27:3d:de:5a:40:1c:
74:98:da:a0:95:a9:39:a2:2f:ad:8b:7b:f4:62:21:
1d:0d:75:e3:5f:87:e0:78:71:d5:d1:1e:98:34:8d:
c2:3f:8d:db:76:e8:e6:f3:8e:a8:8b:13:3c:8c:01:
cc:d6:ea:33:a8:b8:4a:07:3d:35:81:78:be:45:cb:
cb:55:16:b0:7d:6a:e9:27:3e:6d:e6:e1:ff:dc:24:
66:82:ab:8b:dc:d9:83:6d:77:43:a2:db:8b:2f:b4:
85:c7:60:55:06:aa:e8:d0:97:c5:f1:d5:0b:20:23:
23:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:39:92:85:3C:21:79:7C:C2:C1:39:57:E5:BF:30:E5:37:D0:D9:3D
X509v3 Authority Key Identifier:
keyid:27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/mTmShTwheXzCwTlX5b8w5TfQ2T0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.224.0/21
213.169.64.0/19
IPv6:
2a01:6880::/32
Signature Algorithm: sha256WithRSAEncryption
ca:93:4e:9c:fa:17:80:04:ca:59:1e:ae:f4:48:cb:17:ee:7d:
27:18:80:ca:78:6c:1c:f3:4d:ea:90:dc:0a:5a:9c:3b:56:1e:
18:13:56:7e:0c:cd:9b:53:dc:ff:1a:1b:60:28:c7:69:9d:c8:
1c:25:7a:80:67:32:e4:5c:2f:59:21:1d:c8:6c:84:78:bf:8d:
37:a8:73:0c:1a:b9:23:8e:66:b6:4b:e5:42:93:93:97:0e:31:
3a:ba:3a:c2:1b:5e:dc:ad:b8:e5:ec:b2:d6:f0:df:a9:89:fd:
85:cd:73:13:89:33:d9:fb:be:af:0f:4a:59:15:a1:5c:d2:11:
ec:ba:fe:a6:d7:f2:27:e1:ee:76:ae:7f:38:d7:69:06:d0:1a:
98:6e:11:b5:ce:bc:12:6e:c9:92:2c:b0:ce:9d:b3:2e:86:9d:
c9:2d:92:a6:1f:42:fe:59:d4:e4:79:2f:ed:ec:60:e3:68:2d:
e1:99:39:2c:27:2e:0d:19:e7:ce:46:ec:6a:5a:bf:8d:e8:96:
fa:16:da:7d:b5:24:0b:42:a0:14:ce:e5:57:5c:21:8f:28:74:
da:49:99:97:d5:ea:7b:dc:51:26:58:16:e8:ab:bd:aa:18:53:
2a:ad:7c:a5:75:a9:fa:5f:c9:74:8e:e0:ed:20:9e:5d:97:31:
aa:3d:83:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:17 2024 by rpki-client on console-ams.rpki-client.org