Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/vqZHbFZAdQepclRmOSSjp2jV8jk.roa
File: vqZHbFZAdQepclRmOSSjp2jV8jk.roa (raw, json)
Hash identifier: l408fi7fmsOjCTS+jdcFcve1qmR9aqk/VFLT7WmpCwY=
Subject key identifier: BE:A6:47:6C:56:40:75:07:A9:72:54:66:39:24:A3:A7:68:D5:F2:39
Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial: 01857182FB11D09D104C1D259620F733382B
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/vqZHbFZAdQepclRmOSSjp2jV8jk.roa
Signing time: Mon 02 Jan 2023 08:04:47 +0000
ROA not before: Mon 02 Jan 2023 08:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34209
IP address blocks: 46.28.243.0/24 maxlen: 24
46.28.240.0/21 maxlen: 21
46.28.244.0/24 maxlen: 24
46.28.241.0/24 maxlen: 24
46.28.245.0/24 maxlen: 24
46.28.246.0/24 maxlen: 24
195.80.237.0/24 maxlen: 24
193.22.169.0/24 maxlen: 24
193.41.210.0/23 maxlen: 23
2a02:2978::/32 maxlen: 32
2a02:2978:a000::/36 maxlen: 36
2a02:2978:f000::/36 maxlen: 36
2a02:2978:c000::/36 maxlen: 36
2a02:2978:e000::/36 maxlen: 36
2a02:2978:b000::/36 maxlen: 36
2a02:2978::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:82:fb:11:d0:9d:10:4c:1d:25:96:20:f7:33:38:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Validity
Not Before: Jan 2 08:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bea6476c56407507a97254663924a3a768d5f239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b5:20:31:26:84:49:55:af:6e:03:20:b5:bd:
c3:38:96:01:fe:30:bc:e2:dd:7f:cc:c2:b0:60:ff:
4f:dd:26:8c:d1:07:2f:04:b0:ab:b0:25:97:17:4f:
57:e1:e3:ac:cf:fb:69:2c:2c:64:49:cc:25:69:50:
5c:7a:2f:9e:b6:81:9e:87:02:4f:82:cc:9b:d5:71:
e0:53:2f:96:b3:57:6c:4d:24:77:09:c9:99:0d:40:
e6:10:25:52:8c:a9:8c:c9:0c:56:3d:bc:1d:f8:32:
1b:3e:72:fa:be:0e:7f:77:e6:b8:2c:a3:a1:ae:a0:
f6:27:21:d8:1c:9c:32:f1:80:43:e2:c0:7f:37:37:
f4:bd:5a:66:1c:51:4b:c8:75:dc:1f:59:ad:10:d4:
3a:d4:87:14:e8:38:e8:06:66:59:75:bd:e6:bc:57:
0e:22:c7:d8:8a:40:5b:49:a2:50:ca:57:8a:ca:61:
99:4f:8f:fe:6d:fe:fb:3d:c3:9a:0f:a4:43:c4:15:
89:c1:62:07:00:ed:bc:e0:4c:3a:be:b5:74:76:33:
1d:c0:9e:e4:dc:86:c0:96:67:2c:ac:33:1f:9f:9e:
43:00:31:1f:e6:3c:1e:69:d7:51:57:e7:af:4f:0c:
c6:89:f5:12:8d:55:5a:5e:df:d6:15:ed:17:6d:61:
67:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A6:47:6C:56:40:75:07:A9:72:54:66:39:24:A3:A7:68:D5:F2:39
X509v3 Authority Key Identifier:
keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/vqZHbFZAdQepclRmOSSjp2jV8jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.240.0/21
193.22.169.0/24
193.41.210.0/23
195.80.237.0/24
IPv6:
2a02:2978::/32
Signature Algorithm: sha256WithRSAEncryption
7d:e7:26:00:dc:72:dd:1e:3e:af:c7:2b:70:9e:4c:d4:83:45:
fb:78:64:47:1f:51:d0:53:3d:29:86:42:cc:eb:c4:3b:a5:06:
f9:23:a0:27:7f:b3:a2:9a:13:89:85:69:0d:15:1e:29:bc:4a:
31:c4:7a:37:83:17:09:54:47:e6:fa:4a:45:96:07:ac:bf:c1:
41:2e:a2:50:02:d8:e8:93:44:fd:43:82:e2:38:ed:89:2b:da:
14:3f:78:d8:d9:02:8a:c7:7d:55:2d:e6:79:ae:c0:1a:22:5a:
f5:ad:07:e9:fc:03:91:79:bc:72:86:c3:71:17:72:0d:81:b2:
5b:9d:b9:e1:13:86:43:52:ec:0b:24:81:83:80:6f:72:71:87:
f1:6e:dd:0b:e9:85:6d:51:61:28:36:5c:e8:6f:04:d6:9f:61:
9e:de:73:bc:f9:14:9e:47:af:48:e2:50:02:cf:c8:82:7c:58:
c5:58:e5:4e:0b:ad:64:99:15:03:b7:35:58:27:9f:6c:70:e7:
5c:07:50:b1:c6:85:a8:53:a3:ef:eb:db:3e:be:16:5e:a6:68:
9a:9a:2f:32:24:da:f0:e7:35:4a:3f:e1:72:51:5b:f5:ac:b5:
a5:c6:7d:95:f2:19:99:94:21:ff:21:a9:5a:b1:65:ab:6a:10:
db:6c:9d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:12 2024 by rpki-client on console-fra.rpki-client.org