Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/ZkcK0iFSrvOKDDJsLWjPi0qLuqI.roa
File: ZkcK0iFSrvOKDDJsLWjPi0qLuqI.roa (raw, json)
Hash identifier: H2YG0KzhVJ6W4x57KWIzADfWSSktg0pdOq0lVQQmzoE=
Subject key identifier: 66:47:0A:D2:21:52:AE:F3:8A:0C:32:6C:2D:68:CF:8B:4A:8B:BA:A2
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 018A3C539518C2AD340483459F2CD847FA2D
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/ZkcK0iFSrvOKDDJsLWjPi0qLuqI.roa
Signing time: Mon 28 Aug 2023 13:27:05 +0000
ROA not before: Mon 28 Aug 2023 13:27:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 46.8.195.0/24 maxlen: 24
46.8.198.0/24 maxlen: 24
188.130.224.0/22 maxlen: 24
46.8.203.0/24 maxlen: 24
46.8.100.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3c:53:95:18:c2:ad:34:04:83:45:9f:2c:d8:47:fa:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Aug 28 13:27:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66470ad22152aef38a0c326c2d68cf8b4a8bbaa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:b3:8f:33:97:28:d1:f2:54:fd:4a:01:32:
78:3e:fb:df:dc:17:85:d8:bb:91:ec:61:ec:52:4f:
7f:ec:a5:06:8c:aa:2a:22:82:eb:dd:1a:59:2b:14:
83:d6:6c:1a:b9:4b:6e:ab:12:fb:92:cc:bc:39:98:
85:49:d4:e8:58:65:b1:a1:95:f4:4c:50:1f:d2:6f:
cb:26:8c:a7:c4:26:d8:bd:9f:5f:86:2e:4c:90:a0:
0f:c5:d6:4a:cc:55:e4:a4:cb:32:4e:e5:35:68:47:
45:ea:49:4e:c8:72:1e:4a:c6:69:cc:2f:48:60:ac:
9b:88:7d:bd:2b:6a:85:15:c5:db:31:80:bd:0f:28:
2d:a1:c5:a3:7e:68:2f:cb:41:77:c3:1e:b9:6c:7b:
f6:1e:98:85:81:06:dc:90:01:dc:49:99:c6:cc:5a:
f5:33:38:a9:ec:fb:6c:c0:61:a4:d3:c2:26:b5:d9:
56:4a:1b:b0:14:28:99:01:62:33:79:0e:02:61:23:
3c:a4:88:4d:71:90:f1:cc:39:ed:cd:78:f9:d5:aa:
22:ee:be:fc:87:f1:76:a7:db:c6:96:16:0a:8e:a9:
7d:b4:20:ff:cd:72:c5:be:39:07:76:aa:c4:02:55:
9d:3c:a6:f7:81:f5:88:0b:ee:f1:2e:ae:89:f9:b3:
7c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:47:0A:D2:21:52:AE:F3:8A:0C:32:6C:2D:68:CF:8B:4A:8B:BA:A2
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/ZkcK0iFSrvOKDDJsLWjPi0qLuqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.100.0/22
46.8.195.0/24
46.8.198.0/24
46.8.203.0/24
188.130.224.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:b5:73:66:e1:43:d5:c4:6f:8e:57:ba:82:04:5c:6e:b3:f3:
5e:e6:e1:1d:96:5a:80:4a:d8:dc:18:9a:04:3f:c9:b8:e5:61:
63:5d:c5:d7:98:92:e8:9b:fb:21:80:ca:df:1c:75:75:1c:2c:
d3:8e:4e:30:dc:0a:bb:7a:68:99:83:3e:91:87:fc:3b:61:d7:
b3:93:38:5d:b9:da:d2:25:1b:50:83:6b:74:68:8c:58:07:69:
eb:4d:2a:a0:28:5e:b7:be:72:0a:e5:3c:85:fd:7b:07:92:d7:
cf:13:36:a3:a2:7b:95:34:60:81:e6:1d:23:f2:a6:05:4f:0e:
25:2a:a1:ee:52:e3:dd:23:e0:8e:2b:9e:57:4c:bc:70:80:32:
da:f8:e8:14:d8:47:f7:40:51:da:da:62:52:d8:ad:2a:00:4f:
e1:03:3d:cd:96:f5:0b:65:e1:74:61:e3:d8:b1:f4:45:9c:75:
38:4b:29:e5:1f:bb:42:fb:6a:9d:c8:4b:ad:3b:b7:88:d8:2a:
bd:e7:c0:c6:bb:00:3e:48:21:ad:ee:e1:3d:ac:0a:3b:a6:02:
c1:e9:f3:2a:bb:e8:21:a3:94:4b:6f:dc:4c:55:b9:d7:b4:20:
0a:fa:0c:68:15:e8:7a:c2:9f:ab:4d:f9:48:88:82:3e:28:e3:
79:ba:e7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:38 2024 by rpki-client on console-ams.rpki-client.org