Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/k46eB597b74LWH9-edGKs5yaKtU.roa
File: k46eB597b74LWH9-edGKs5yaKtU.roa (raw, json)
Hash identifier: TJoUyzMsTYe4TpZ4ied3pEk5rw1BIaICPnx2CVzWkpE=
Subject key identifier: 93:8E:9E:07:9F:7B:6F:BE:0B:58:7F:7E:79:D1:8A:B3:9C:9A:2A:D5
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018B38317211659BD5989822621EBD4B1DD8
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/k46eB597b74LWH9-edGKs5yaKtU.roa
Signing time: Mon 16 Oct 2023 11:14:06 +0000
ROA not before: Mon 16 Oct 2023 11:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3058
IP address blocks: 83.149.192.0/18 maxlen: 18
194.149.64.0/21 maxlen: 21
2a00:db8::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 17 Oct 2023 10:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:31:72:11:65:9b:d5:98:98:22:62:1e:bd:4b:1d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Oct 16 11:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=938e9e079f7b6fbe0b587f7e79d18ab39c9a2ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cb:c3:ec:8a:cb:c7:53:e2:aa:c8:47:21:cc:
6c:87:9e:e1:1f:62:a8:4c:5b:ab:54:a1:85:eb:7b:
a8:5d:32:fb:de:74:70:bf:4e:13:08:1e:be:f1:bb:
71:b4:6c:c6:fb:af:cd:ae:eb:a2:dd:8b:39:af:38:
f0:c3:83:1c:35:80:15:7f:be:e1:2a:82:f2:e3:15:
17:e2:d3:27:ec:19:c8:b5:6e:35:66:9f:4e:d1:f1:
4b:5c:49:89:18:26:fb:85:cb:3d:4d:3b:60:51:55:
f7:ad:99:76:d5:1f:b7:e6:82:9b:95:94:7a:76:32:
81:96:40:43:cf:ee:49:ea:15:6b:19:02:6c:f9:58:
de:56:37:f3:01:80:73:28:b3:70:51:87:fe:80:f6:
ad:ec:96:0b:43:e3:4d:5e:c2:48:56:00:4d:91:95:
92:84:f9:a1:4b:44:6e:03:8c:c9:71:12:9f:31:0b:
33:8e:60:75:9c:77:f9:bb:00:3f:be:f9:0a:0e:12:
a1:6f:1a:07:9b:6a:69:45:5c:84:96:32:1b:81:55:
10:b2:ab:33:9b:fa:66:70:8d:bd:cb:b2:0c:ca:f4:
28:ba:e0:20:a1:bc:96:21:fb:65:cd:b5:98:a5:a5:
65:38:b3:fc:82:d9:1e:e5:3f:a1:29:42:a9:d5:d3:
af:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8E:9E:07:9F:7B:6F:BE:0B:58:7F:7E:79:D1:8A:B3:9C:9A:2A:D5
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/k46eB597b74LWH9-edGKs5yaKtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.149.192.0/18
194.149.64.0/21
IPv6:
2a00:db8::/32
Signature Algorithm: sha256WithRSAEncryption
16:5a:73:29:4c:d8:8d:7c:58:57:2f:1a:52:12:27:eb:03:11:
fc:cd:95:94:be:e1:a0:7d:df:c7:dc:43:a9:bc:59:99:d9:3f:
52:5e:77:48:4b:07:f7:0b:de:5a:7d:ab:02:1a:26:9e:21:9b:
e1:3b:a9:99:4c:a5:89:7e:40:ad:c4:44:cb:d0:dc:0a:70:5d:
34:39:e1:46:32:cd:82:7e:fb:2f:95:89:9d:26:18:ae:d5:77:
af:ab:05:16:e7:4b:81:7c:63:17:a2:2b:0f:7d:89:6a:44:83:
c1:0b:f2:fc:d1:8c:25:3d:0e:d4:ea:b7:fa:67:a8:3f:9e:72:
1d:43:98:67:80:6a:cd:44:8b:df:76:ae:c1:a9:56:81:f2:6e:
f1:13:3d:74:6f:a2:72:2d:73:d8:53:05:4f:21:d7:bd:e2:17:
60:1d:cb:21:25:76:37:19:aa:25:d2:e6:db:c6:51:21:a4:09:
69:98:a6:1c:a3:d0:45:8a:85:a5:f2:0b:e3:a0:af:6c:b6:ff:
1a:dc:80:5a:9c:4f:b4:0a:d4:9c:75:db:0b:d0:87:d2:bd:c5:
47:18:a0:98:15:01:f6:7c:5f:0d:6c:5b:43:a0:df:93:c6:6c:
23:2d:05:97:af:28:ba:80:f2:f6:98:7c:9d:77:ee:52:4e:af:
53:a1:ec:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org