Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/X1df12EtR_cC-4CS6VzcJo_X2q4.roa
File: X1df12EtR_cC-4CS6VzcJo_X2q4.roa (raw, json)
Hash identifier: I0qanw1nU71/ZqYggLY1RjmesSuRoo43cF/fkOrX6xE=
Subject key identifier: 5F:57:5F:D7:61:2D:47:F7:02:FB:80:92:E9:5C:DC:26:8F:D7:DA:AE
Certificate issuer: /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Certificate serial: 0191182CF2D969E9ABC5E79B8F63537A7D19
Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/X1df12EtR_cC-4CS6VzcJo_X2q4.roa
Signing time: Sat 03 Aug 2024 12:18:04 +0000
ROA not before: Sat 03 Aug 2024 12:18:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199402
IP address blocks: 46.28.235.0/24 maxlen: 24
185.123.103.0/24 maxlen: 24
185.196.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Nov 2024 14:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:18:2c:f2:d9:69:e9:ab:c5:e7:9b:8f:63:53:7a:7d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Validity
Not Before: Aug 3 12:18:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f575fd7612d47f702fb8092e95cdc268fd7daae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d1:e8:e6:38:b1:32:d8:49:d7:8b:b3:14:a4:
b5:9b:02:c0:d9:91:21:cc:7a:84:96:6e:b4:d7:7b:
5c:d9:b6:2c:34:e0:fd:fe:8f:0a:53:70:db:ec:cc:
54:d5:ef:b5:70:bb:0d:38:c3:d1:f7:b0:19:5b:e1:
94:e2:2a:a3:ec:5a:a5:00:33:77:71:2f:1c:aa:0f:
1a:cf:77:79:4f:5a:9e:6c:91:0a:33:2a:7e:7b:c1:
91:57:61:62:89:da:1b:74:81:0f:1e:25:8c:2a:e2:
f3:d5:d6:41:b0:0d:2c:d5:df:81:f7:92:a8:da:b9:
d1:c7:64:40:34:af:8f:db:b0:ba:6f:9c:19:01:67:
ff:49:18:48:2f:22:59:80:66:cc:e2:31:31:6a:77:
bc:2c:c2:33:8b:28:c7:0b:8d:3d:85:db:35:3c:a8:
dd:f7:9e:d1:18:01:5d:93:24:c1:d1:17:4f:14:cf:
a7:99:5c:16:25:14:db:47:37:13:71:6d:23:da:dd:
67:9d:6b:6f:f2:dc:2b:a4:f6:94:73:ef:af:e1:9e:
d3:10:d0:6c:9e:46:87:c3:56:3d:a9:79:b0:8e:c6:
9e:e0:31:be:3b:ae:bf:00:8f:e6:99:84:bd:93:70:
46:52:97:12:33:cc:d1:e6:cb:ea:be:14:a1:ae:69:
cd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:57:5F:D7:61:2D:47:F7:02:FB:80:92:E9:5C:DC:26:8F:D7:DA:AE
X509v3 Authority Key Identifier:
keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/X1df12EtR_cC-4CS6VzcJo_X2q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.235.0/24
185.123.103.0/24
185.196.75.0/24
Signature Algorithm: sha256WithRSAEncryption
46:f9:bc:d4:64:2a:91:c5:2f:ab:21:86:2c:5b:1f:8c:c5:68:
27:ef:b5:fa:0b:d9:ed:ab:ae:37:95:00:b0:bb:8c:4c:7c:5c:
45:63:1c:8b:bf:7f:c5:85:d3:20:a5:25:4e:db:0e:5c:ab:9c:
fc:bd:61:1a:d0:29:15:6d:c6:36:1a:ce:a2:84:0a:97:2b:ae:
1f:0c:c0:4a:c4:34:79:fa:fb:e2:82:e6:25:6c:21:54:43:5e:
1d:f4:fc:87:90:40:b2:4b:dc:4c:46:17:8d:0c:c3:5e:dd:ba:
87:c5:60:55:ea:41:16:63:c8:6b:59:2e:a5:de:cb:5e:57:dd:
73:8c:36:14:0d:6e:f2:2a:e0:fb:c4:cd:c6:1a:52:3f:4e:09:
83:88:31:da:20:b4:fc:60:b3:77:2e:ea:50:bc:ee:9a:14:84:
1d:b3:ca:ee:e8:fc:9e:97:0d:be:0c:b7:02:2b:33:9b:76:10:
f5:eb:76:73:0a:5d:bb:c8:d8:e1:ad:76:bc:1a:b4:2b:f9:1f:
40:74:4a:af:bd:2c:57:e3:53:6e:f6:01:1f:d9:59:26:1f:50:
59:c5:25:4e:4f:61:3d:08:72:46:a3:e7:d0:5d:4f:8b:e9:72:
ba:25:66:7b:7a:37:d8:aa:63:59:10:57:f9:85:71:b9:5b:1a:
9f:86:17:03
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZEYLPLZaemrxeebj2NTen0ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYzBmOTlkNzk3OTNhNmYwMWU5YWQ2MjdkMWY5NjhiMGMy
ZDBmM2IwHhcNMjQwODAzMTIxODA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjU3NWZkNzYxMmQ0N2Y3MDJmYjgwOTJlOTVjZGMyNjhmZDdkYWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntHo5jixMthJ14uzFKS1mwLA2ZEh
zHqElm6013tc2bYsNOD9/o8KU3Db7MxU1e+1cLsNOMPR97AZW+GU4iqj7FqlADN3
cS8cqg8az3d5T1qebJEKMyp+e8GRV2FiidobdIEPHiWMKuLz1dZBsA0s1d+B95Ko
2rnRx2RANK+P27C6b5wZAWf/SRhILyJZgGbM4jExane8LMIziyjHC409hds1PKjd
957RGAFdkyTB0RdPFM+nmVwWJRTbRzcTcW0j2t1nnWtv8twrpPaUc++v4Z7TENBs
nkaHw1Y9qXmwjsae4DG+O66/AI/mmYS9k3BGUpcSM8zR5svqvhShrmnN9QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFF9XX9dhLUf3AvuAkulc3CaP19quMB8GA1UdIwQY
MBaAFM/A+Z15eTpvAemtYn0flosMLQ87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejhENW5YbDVPbThCNmExaWZSLVdpd3d0RHpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jNWRkM2UtOTM3Yi00MzRmLWJiYjgt
ODBjYzg2ZTUxODIyLzEvWDFkZjEyRXRSX2NDLTRDUzZWemNKb19YMnE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9jNWRkM2UtOTM3Yi00MzRmLWJiYjgtODBjYzg2ZTUxODIy
LzEvejhENW5YbDVPbThCNmExaWZSLVdpd3d0RHpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALhzrAwQA
uXtnAwQAucRLMA0GCSqGSIb3DQEBCwUAA4IBAQBG+bzUZCqRxS+rIYYsWx+MxWgn
77X6C9ntq643lQCwu4xMfFxFYxyLv3/FhdMgpSVO2w5cq5z8vWEa0CkVbcY2Gs6i
hAqXK64fDMBKxDR5+vviguYlbCFUQ14d9PyHkECyS9xMRheNDMNe3bqHxWBV6kEW
Y8hrWS6l3steV91zjDYUDW7yKuD7xM3GGlI/TgmDiDHaILT8YLN3LupQvO6aFIQd
s8ru6Pyelw2+DLcCKzObdhD163ZzCl27yNjhrXa8GrQr+R9AdEqvvSxX41Nu9gEf
2VkmH1BZxSVOT2E9CHJGo+fQXU+L6XK6JWZ7ejfYqmNZEFf5hXG5WxqfhhcD
-----END CERTIFICATE-----
Generated at Fri Nov 1 18:17:07 2024 by rpki-client on console-ams.rpki-client.org