Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/CUUDDfyhUAj4gffaNkmf5Pau7Ro.roa
File: CUUDDfyhUAj4gffaNkmf5Pau7Ro.roa (raw, json)
Hash identifier: Fc9F4lo0VFpQ1yf2OEASvRxADKrcCy8OCE3M5CBMXeM=
Subject key identifier: 09:45:03:0D:FC:A1:50:08:F8:81:F7:DA:36:49:9F:E4:F6:AE:ED:1A
Certificate issuer: /CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Certificate serial: 018571309507EDFFBEF6291D9D430C5F70C5
Authority key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/CUUDDfyhUAj4gffaNkmf5Pau7Ro.roa
Signing time: Mon 02 Jan 2023 06:34:47 +0000
ROA not before: Mon 02 Jan 2023 06:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60587
IP address blocks: 46.151.200.0/24 maxlen: 24
185.29.88.0/24 maxlen: 24
91.227.230.0/24 maxlen: 24
2a00:a6a0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 04 May 2023 09:11:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:95:07:ed:ff:be:f6:29:1d:9d:43:0c:5f:70:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Validity
Not Before: Jan 2 06:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0945030dfca15008f881f7da36499fe4f6aeed1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5a:2d:ff:16:c8:88:c2:99:e1:be:f0:16:99:
54:d8:1c:3d:b1:1f:ed:8b:a7:5c:6a:51:27:5a:24:
77:13:c9:1f:30:cd:ba:09:12:49:ba:f1:08:e8:05:
c8:2f:71:1b:5d:2b:53:88:1c:1d:6e:59:64:d5:e5:
34:5f:c9:a8:c6:f1:39:35:9c:66:be:f4:15:df:de:
b6:73:10:95:85:62:03:96:59:6a:72:2b:6b:c1:9b:
0f:e1:d1:b4:f5:cf:ee:75:9a:7c:6e:65:05:97:5f:
c0:e1:b1:78:ae:d5:c9:ae:82:59:b8:79:90:02:09:
4f:c1:b7:ae:15:ea:fc:95:28:91:bb:75:bb:50:23:
4f:70:e0:b4:69:3d:44:db:f6:8f:6f:7f:a6:0c:9e:
01:7c:4b:f7:67:64:53:98:6d:2a:89:24:d1:db:37:
a1:8d:38:0e:99:71:22:69:49:4f:37:60:56:15:18:
91:23:b8:4f:d0:be:45:3e:9f:d5:c6:0a:29:80:48:
67:f1:e5:fb:51:2e:b5:7c:55:52:60:db:be:5b:31:
25:ec:72:d9:f2:89:db:b8:27:35:0d:b6:ad:75:86:
f5:a4:e9:c8:9b:8b:49:82:75:69:a4:f0:dc:6b:aa:
69:47:4b:e7:04:77:87:5e:99:6f:41:c7:b3:a0:02:
aa:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:45:03:0D:FC:A1:50:08:F8:81:F7:DA:36:49:9F:E4:F6:AE:ED:1A
X509v3 Authority Key Identifier:
keyid:7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/CUUDDfyhUAj4gffaNkmf5Pau7Ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.200.0/24
91.227.230.0/24
185.29.88.0/24
IPv6:
2a00:a6a0:1::/48
Signature Algorithm: sha256WithRSAEncryption
0a:46:f1:6a:84:26:e2:42:f2:6b:38:bc:00:74:25:81:cb:2b:
7d:42:27:f1:94:e8:1a:d5:bf:74:b5:2f:db:ff:e9:77:22:b2:
9a:12:49:68:61:ee:a2:ce:41:db:a0:92:ea:5e:07:96:90:31:
f4:5e:7b:c7:17:9f:8c:29:a0:48:15:af:ea:1c:6b:fb:73:ff:
20:23:a9:3c:0d:01:c5:72:d5:22:f0:3d:45:a6:08:d1:f5:d7:
f6:13:de:1b:34:a2:ca:24:e6:9f:be:08:fc:5b:75:5e:53:d6:
98:5a:be:ab:05:b7:07:ca:72:12:d2:64:5a:f6:bf:9d:ab:a6:
ec:24:9b:f3:b8:7d:3f:6d:97:42:d7:27:ee:47:18:e0:8c:c6:
94:f5:1b:b3:40:93:40:7d:d3:65:1c:9d:fb:f8:cc:f1:a3:19:
7e:98:ae:91:7e:cb:f6:67:5c:bb:2e:46:eb:f3:ff:1a:3a:40:
cb:46:e9:e3:dc:34:0b:7d:96:8f:a7:13:32:a1:6c:29:40:34:
0e:51:83:84:5f:4c:a5:b3:34:4f:57:ec:79:6b:28:4b:5b:15:
e3:72:d9:d5:2b:33:ce:aa:7c:cb:c9:8a:1d:71:68:fb:cd:fe:
05:ad:b7:f5:1e:0e:84:b8:00:60:1e:d3:95:f8:6b:e0:6c:d2:
36:8c:ff:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:37 2024 by rpki-client on console-fra.rpki-client.org