Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/lD-iFWGi8dZ27PmmAgiIubVTEm4.roa
File: lD-iFWGi8dZ27PmmAgiIubVTEm4.roa (raw, json)
Hash identifier: 0z4bOlqQ8JfDAwDibY0iSYVRdE1yuAaUJZxpxxsmiVQ=
Subject key identifier: 94:3F:A2:15:61:A2:F1:D6:76:EC:F9:A6:02:08:88:B9:B5:53:12:6E
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A441639D92679FC60358AB258F345
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/lD-iFWGi8dZ27PmmAgiIubVTEm4.roa
Signing time: Sun 01 Jan 2023 03:05:07 +0000
ROA not before: Sun 01 Jan 2023 03:05:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207676
IP address blocks: 46.243.179.0/24 maxlen: 24
178.170.251.0/24 maxlen: 24
141.101.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Mar 2023 15:05:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:44:16:39:d9:26:79:fc:60:35:8a:b2:58:f3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:05:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=943fa21561a2f1d676ecf9a6020888b9b553126e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:68:de:07:b6:b1:c7:ed:27:b9:6b:7b:0b:e3:
01:dc:c7:4d:57:5d:37:ae:16:10:a8:01:bb:f6:e6:
51:e0:99:8f:ac:f9:3b:64:92:75:76:fa:23:68:bc:
d4:35:83:ee:80:da:81:cf:ed:6e:a8:0c:2c:78:ff:
c1:83:73:2c:00:e1:07:47:71:37:28:5f:06:7a:75:
2c:71:b8:f8:18:29:a5:c3:79:34:f4:45:ec:91:10:
87:96:a3:f9:95:9b:50:cb:5f:9b:cb:ec:79:cb:3d:
46:8f:0e:c3:d0:18:c4:9c:09:0e:a1:e3:bd:bc:4b:
a3:14:32:86:13:e4:8a:b0:32:5a:f8:99:29:69:36:
1d:ae:27:dd:e6:f8:ae:40:27:89:a3:38:8c:e7:af:
77:19:c3:fa:ca:77:8e:da:d6:ba:01:cf:4c:09:dc:
91:cc:27:6f:a6:fa:af:e2:3f:6c:16:0f:e6:0e:04:
bb:73:20:7a:3f:bc:32:35:99:62:a2:ec:b0:18:d0:
1d:96:e2:20:94:35:4a:46:af:95:27:22:2d:12:17:
7c:e4:37:45:67:ea:df:99:3f:59:73:a7:d0:85:2d:
22:fa:8f:93:e3:66:82:8b:3c:08:12:6b:5b:df:58:
41:c8:17:ef:94:84:d9:c7:6b:7d:e0:90:4b:46:d1:
76:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3F:A2:15:61:A2:F1:D6:76:EC:F9:A6:02:08:88:B9:B5:53:12:6E
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/lD-iFWGi8dZ27PmmAgiIubVTEm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.179.0/24
141.101.249.0/24
178.170.251.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:7e:49:48:fb:80:cb:82:6e:d8:22:79:01:9e:d1:9c:b3:5f:
63:10:57:be:c8:97:78:d5:5c:47:09:09:d3:95:61:8b:98:91:
38:f6:e2:a1:b5:90:40:53:bf:18:76:31:d8:25:3e:85:d3:f8:
0f:e8:ad:a3:f9:dc:d6:68:ab:ee:fd:28:67:9c:69:67:8e:7c:
ea:7d:c5:bc:38:5d:35:c2:41:db:dc:5a:4a:eb:8b:f1:cd:7e:
04:3b:20:41:c9:8f:9c:71:0f:80:76:69:b9:b1:0b:65:09:dc:
03:f1:15:1e:b3:76:af:6e:22:76:d3:ea:f7:18:d8:be:0e:70:
44:4f:bb:cf:ac:53:d5:b8:95:f6:4d:56:14:bf:7e:00:18:67:
af:9a:f0:44:01:15:53:71:62:d7:92:9f:68:92:1c:af:2c:32:
1b:c8:81:fb:47:7c:95:7d:d4:22:32:8a:92:1a:98:2f:f8:e9:
12:7b:2b:62:3d:c9:02:77:7e:98:8a:15:f3:af:1b:e8:31:32:
a9:b0:82:3f:c8:d0:e9:5f:b3:89:95:2d:a8:fa:51:f7:a4:68:
cd:5d:b9:c0:80:4a:70:5d:6f:5f:90:02:3c:e5:e1:aa:78:b7:
6b:80:a5:31:7e:e0:15:24:15:90:bb:c0:e9:27:10:ba:68:87:
9b:ba:8d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org