Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/X1JXmzUtMdHB1jzrC3hBg-WlMm4.roa
File: X1JXmzUtMdHB1jzrC3hBg-WlMm4.roa (raw, json)
Hash identifier: 8pAycKy1ISrsXv5QUpGiElS74TdekBLGfHOSLpksmCs=
Subject key identifier: 5F:52:57:9B:35:2D:31:D1:C1:D6:3C:EB:0B:78:41:83:E5:A5:32:6E
Certificate issuer: /CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Certificate serial: 0188B0FD80FA22575541007A4219FA58A6C7
Authority key identifier: AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/X1JXmzUtMdHB1jzrC3hBg-WlMm4.roa
Signing time: Mon 12 Jun 2023 19:03:03 +0000
ROA not before: Mon 12 Jun 2023 19:03:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6712
IP address blocks: 46.160.64.0/20 maxlen: 24
91.250.0.0/19 maxlen: 24
46.160.80.0/21 maxlen: 24
46.160.96.0/19 maxlen: 24
82.117.240.0/24 maxlen: 24
91.250.32.0/19 maxlen: 24
82.117.246.0/24 maxlen: 24
2a00:1210:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b0:fd:80:fa:22:57:55:41:00:7a:42:19:fa:58:a6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Validity
Not Before: Jun 12 19:03:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f52579b352d31d1c1d63ceb0b784183e5a5326e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:03:f0:19:33:b6:7b:2b:d2:f5:84:87:08:
27:6e:4b:80:f3:7f:08:bf:a4:eb:e1:39:87:a4:d0:
57:fc:20:26:e0:31:a5:08:8b:5f:16:1e:31:d0:ad:
ce:35:4e:58:0f:08:89:23:82:f0:b1:71:e2:c5:f8:
46:f7:cd:4f:8a:c9:8c:e1:d2:94:5e:f0:c7:b2:3f:
fa:b2:09:bb:c0:e4:54:db:16:d3:2c:ee:92:c2:d3:
a4:c2:a1:30:ec:6b:4e:2e:ae:25:30:0a:cf:ae:91:
7b:11:e5:26:dc:6e:bd:c6:2d:6c:aa:87:33:fa:1f:
b8:8d:07:64:87:92:db:ca:e4:c6:61:2d:d3:69:36:
94:f0:fa:0f:dd:aa:61:d5:1e:02:ad:97:e5:60:c1:
ec:50:d5:ea:16:a0:a2:68:cb:96:61:de:c9:b9:25:
7b:0d:6f:82:76:6a:41:82:ae:29:e3:fb:cb:fa:00:
20:20:50:1a:b1:18:e7:8c:11:c2:d3:84:c9:16:4b:
98:08:db:88:f3:a9:ba:f1:42:0f:de:17:d2:fe:21:
57:24:7a:88:da:69:b7:0a:bd:ad:ab:3a:00:61:c1:
98:07:93:17:f7:85:31:66:06:fc:ea:7c:7e:fc:06:
96:b2:bb:c4:92:88:a4:ab:2a:95:55:78:6d:95:d0:
13:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:52:57:9B:35:2D:31:D1:C1:D6:3C:EB:0B:78:41:83:E5:A5:32:6E
X509v3 Authority Key Identifier:
keyid:AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/X1JXmzUtMdHB1jzrC3hBg-WlMm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.160.64.0-46.160.87.255
46.160.96.0/19
82.117.240.0/24
82.117.246.0/24
91.250.0.0/18
IPv6:
2a00:1210:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
da:2d:34:a2:01:4f:9d:1e:15:b1:93:0c:ed:bf:0f:7a:1f:22:
4e:c9:66:c3:8c:5b:0e:eb:20:a3:c0:d6:b4:31:03:7b:60:c0:
dd:90:08:af:fc:d2:1e:24:59:0e:40:c2:95:98:ba:96:63:64:
60:3b:b0:2a:34:9f:c0:ee:5d:2c:24:04:91:1f:04:c2:07:0b:
19:e7:51:c1:40:29:59:60:9f:e5:72:00:75:8f:30:7d:c4:4f:
3c:42:d8:ef:f0:33:36:6f:93:18:2d:f7:1c:2f:51:f5:09:66:
14:df:ab:d0:24:92:e2:82:38:9b:bc:54:26:42:fb:66:d7:1f:
50:af:09:e5:98:e5:74:d0:77:af:67:10:57:e6:63:2a:b0:30:
c2:08:3f:f1:33:f3:6d:ef:a7:33:53:e5:35:7a:ca:e3:24:d2:
e2:fc:af:0d:40:c4:d5:8b:ac:da:df:f7:6f:06:8f:92:42:7b:
cf:36:ed:a0:bd:b6:26:e8:42:82:cf:72:7a:43:19:4e:d8:c3:
10:cd:f8:a3:ed:be:bc:b0:7c:31:3c:de:a5:03:33:fa:91:1b:
00:f3:c0:a5:d0:81:b1:bb:16:fd:dd:ed:c6:ce:05:04:1d:d0:
6f:69:09:bb:10:f6:e6:22:ab:af:6d:a1:77:90:f5:e2:a5:9d:
dd:69:8c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:49 2024 by rpki-client on console-fra.rpki-client.org