Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/z8-ESXpkVPvrNUQb4rAbAY2XMRw.roa
File: z8-ESXpkVPvrNUQb4rAbAY2XMRw.roa (raw, json)
Hash identifier: gndEDjIVYbCOdp9dvtWAZuqa6zPDGmeXPS/FYZVkzRQ=
Subject key identifier: CF:CF:84:49:7A:64:54:FB:EB:35:44:1B:E2:B0:1B:01:8D:97:31:1C
Certificate issuer: /CN=335e725cacf83c97f457a56762cf846d643117cd
Certificate serial: 01857230EDC40C88F52AB7EC94A82140777C
Authority key identifier: 33:5E:72:5C:AC:F8:3C:97:F4:57:A5:67:62:CF:84:6D:64:31:17:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/z8-ESXpkVPvrNUQb4rAbAY2XMRw.roa
Signing time: Mon 02 Jan 2023 11:14:47 +0000
ROA not before: Mon 02 Jan 2023 11:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 46.231.121.0/24 maxlen: 24
46.231.120.0/24 maxlen: 24
185.192.223.0/24 maxlen: 24
185.192.220.0/24 maxlen: 24
185.192.221.0/24 maxlen: 24
185.192.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:30:ed:c4:0c:88:f5:2a:b7:ec:94:a8:21:40:77:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335e725cacf83c97f457a56762cf846d643117cd
Validity
Not Before: Jan 2 11:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfcf84497a6454fbeb35441be2b01b018d97311c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:fe:db:ba:af:34:f2:78:db:7b:cb:04:de:
61:e5:65:10:90:4b:2e:5f:1b:22:f1:82:df:e9:fe:
a6:f3:94:74:b7:df:31:04:45:83:bc:c2:b6:f9:99:
d4:f5:3a:8d:da:ee:d5:b7:0d:a0:b5:f5:58:38:52:
34:ff:11:bf:3b:c9:69:4c:a8:58:0a:3b:3c:5b:e0:
ba:57:1f:07:2e:96:5b:b2:e8:b3:fe:54:13:53:bd:
d7:00:be:4d:eb:d5:45:0a:2f:63:93:d4:0d:86:63:
b0:db:0b:ed:2e:1a:4d:b1:93:57:5b:45:3b:ac:06:
80:58:c7:84:d7:20:e5:02:a0:2c:71:7e:f4:db:99:
cc:07:31:ab:77:b7:8e:d4:d8:ce:14:cf:26:14:bb:
90:5e:0f:29:59:a9:20:c2:dd:d0:79:01:d2:62:89:
d5:f7:2c:c6:ac:6c:c7:75:47:ef:f3:2c:52:7d:44:
04:45:6f:11:6b:9f:5e:10:41:96:eb:5f:de:fd:1f:
0a:8e:dc:ae:4b:5a:ca:3e:12:e9:8d:8b:3d:a5:2e:
a9:6f:27:49:a9:ce:93:32:7c:d4:07:28:17:e5:c8:
8a:2d:f4:7b:de:1c:bb:ec:a6:2f:32:db:86:4c:e3:
91:13:28:e9:de:67:75:7c:18:c2:0a:19:34:b2:c6:
2f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CF:84:49:7A:64:54:FB:EB:35:44:1B:E2:B0:1B:01:8D:97:31:1C
X509v3 Authority Key Identifier:
keyid:33:5E:72:5C:AC:F8:3C:97:F4:57:A5:67:62:CF:84:6D:64:31:17:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/z8-ESXpkVPvrNUQb4rAbAY2XMRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/M15yXKz4PJf0V6VnYs-EbWQxF80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.120.0/23
185.192.220.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:3e:5c:f4:ef:e4:2e:0c:29:0f:2e:21:15:c9:56:91:34:09:
a0:d0:8a:23:00:1e:06:3d:d8:78:6f:9f:56:fa:66:8f:1c:d2:
07:e2:c3:08:f0:f6:61:07:81:ed:ce:4d:c7:d7:5d:a4:a0:34:
2b:17:60:c0:6a:4b:68:4c:ef:97:75:25:10:41:63:f0:8f:b5:
ee:6b:77:63:63:94:ea:57:ea:4b:91:18:13:49:82:6a:82:1e:
7b:cd:b0:95:29:d3:ae:77:d5:05:c3:21:b1:be:bc:0b:c3:9e:
34:82:50:cd:d9:ec:c0:1f:c7:aa:00:ef:a1:9d:19:cc:6e:ed:
e3:91:43:91:5d:f5:3f:f2:c9:f8:e2:ae:40:2a:7d:9a:b1:62:
90:54:2a:26:6f:ce:3d:59:fd:d5:dd:60:4c:55:40:da:3d:40:
66:09:c1:95:cd:32:25:76:53:20:f8:91:5d:b1:0c:c2:0c:58:
9d:f8:dd:58:2d:9b:d9:0c:af:04:ab:df:29:ed:2a:24:6b:67:
fd:91:ee:b9:54:99:c7:52:67:79:09:3f:d4:e6:9a:99:06:67:
6e:80:c9:f3:a9:f4:dd:1d:3b:2e:6c:1e:02:6e:26:4f:f1:73:
ff:4c:48:5c:97:b4:60:fd:d7:ef:59:8b:15:37:ba:fe:5f:ba:
87:58:fb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:04 2024 by rpki-client on console-ams.rpki-client.org