Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/bCECztefDqNckRMKhu3EvGKWy-k.roa
File: bCECztefDqNckRMKhu3EvGKWy-k.roa (raw, json)
Hash identifier: PMwWRMNE27K1r5bOq454TeZQFBvA1NF0FT3ceqtT37w=
Subject key identifier: 6C:21:02:CE:D7:9F:0E:A3:5C:91:13:0A:86:ED:C4:BC:62:96:CB:E9
Certificate issuer: /CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Certificate serial: 018CC49244B01AA73DE80A3CAC166214D537
Authority key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/bCECztefDqNckRMKhu3EvGKWy-k.roa
Signing time: Mon 01 Jan 2024 10:29:29 +0000
ROA not before: Mon 01 Jan 2024 10:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50718
IP address blocks: 46.151.202.0/23 maxlen: 23
46.151.206.0/23 maxlen: 23
46.151.205.0/24 maxlen: 24
185.29.89.0/24 maxlen: 24
91.227.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:44:b0:1a:a7:3d:e8:0a:3c:ac:16:62:14:d5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Validity
Not Before: Jan 1 10:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c2102ced79f0ea35c91130a86edc4bc6296cbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:be:5b:9b:4a:1e:70:f2:a5:56:1b:e2:cc:71:
67:9b:4b:d9:93:5e:c5:76:fe:ea:cd:d6:e1:a8:f4:
4a:da:bf:7d:99:f2:5a:7b:f6:0c:3b:8e:e3:a2:c6:
08:a6:9c:81:0a:d0:2b:59:99:e2:a6:5f:ff:7e:c6:
9b:d6:d4:72:b2:f2:8f:c4:bb:2f:9a:a5:37:0b:06:
f7:ac:8a:45:56:f6:37:5b:8a:5a:09:15:5c:f4:c4:
cb:20:8f:75:bd:ad:cd:13:16:a7:ac:f0:22:9e:b6:
8a:8b:9b:e4:79:01:83:b7:89:e3:7b:ac:9b:3a:7e:
d1:a9:68:1b:1a:45:62:13:8c:c6:70:01:04:98:40:
a7:f5:91:d3:3c:63:db:91:49:47:57:5b:1d:c6:32:
1d:b8:8e:b2:20:e0:74:25:4e:ae:da:34:e3:1e:f7:
82:c1:5d:45:bb:ba:98:92:70:d7:b4:1c:3c:60:cd:
03:3c:f9:11:56:12:69:da:76:2f:f9:08:92:66:45:
e7:62:ce:cc:96:e7:af:05:58:65:ad:91:54:69:5b:
68:02:66:96:f0:d5:86:a7:4b:33:1a:37:f3:27:7e:
94:9f:f8:17:d3:af:db:24:6e:82:0a:06:e1:90:bf:
9b:29:59:62:ae:30:89:d5:5e:a9:e9:8b:0f:5b:e5:
c1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:21:02:CE:D7:9F:0E:A3:5C:91:13:0A:86:ED:C4:BC:62:96:CB:E9
X509v3 Authority Key Identifier:
keyid:7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/bCECztefDqNckRMKhu3EvGKWy-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.202.0/23
46.151.205.0-46.151.207.255
91.227.236.0/22
185.29.89.0/24
Signature Algorithm: sha256WithRSAEncryption
15:f4:12:0f:25:ae:2a:f4:15:7d:d7:9c:46:2f:0e:59:76:46:
f3:dc:c4:b8:09:95:fb:14:11:07:05:64:f5:aa:df:ec:66:65:
17:b3:e5:cb:c8:4c:cb:cb:89:fa:e4:10:46:0a:ec:30:ac:b5:
83:52:f0:3b:ed:42:b3:8f:f6:6e:38:97:d0:d4:e0:0e:b3:68:
44:b1:9c:8b:8e:28:38:2e:a8:96:65:c3:06:2b:32:ab:0a:0f:
82:5f:e2:cc:23:ff:33:aa:c5:72:f1:8a:df:dc:ac:8e:67:9f:
5d:8e:0c:01:a6:a7:2c:73:0d:81:6b:fc:89:75:87:1a:6b:1b:
be:d0:21:be:eb:8b:0c:72:73:b4:82:ae:5a:6c:14:64:54:a7:
2b:d2:52:44:78:43:50:9e:56:59:e4:bd:f4:3c:ba:45:89:ea:
06:35:3c:ba:4f:c0:ac:a5:51:56:08:a1:b0:03:a4:c9:17:b2:
ab:59:42:15:91:2a:20:30:d8:54:7b:52:f2:cd:ec:46:e7:cc:
c6:19:f2:f3:2e:48:80:ce:3a:1a:19:98:03:51:48:53:be:df:
60:a1:4e:01:8d:3f:53:58:15:2b:dc:97:fe:e3:3e:62:aa:aa:
c4:9d:64:7a:e1:90:8c:c1:b1:39:06:1b:01:41:81:38:c7:9a:
0a:bf:40:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 10:21:54 2025 by rpki-client