Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/fsX730kLCtGTNPlxCZTR745Lros.roa
File: fsX730kLCtGTNPlxCZTR745Lros.roa (raw, json)
Hash identifier: a7hxpTggKcX8wRtGleRekHAH6GOzOfj2GRS5sZZ978c=
Subject key identifier: 7E:C5:FB:DF:49:0B:0A:D1:93:34:F9:71:09:94:D1:EF:8E:4B:AE:8B
Certificate issuer: /CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Certificate serial: 019266BC723BBB9832A9B67D9F5C9F2CF09C
Authority key identifier: A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/fsX730kLCtGTNPlxCZTR745Lros.roa
Signing time: Mon 07 Oct 2024 11:27:58 +0000
ROA not before: Mon 07 Oct 2024 11:27:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50414
IP address blocks: 212.46.55.0/24 maxlen: 24
2a12:bc0::/48 maxlen: 48
2a12:bc0:1::/48 maxlen: 48
2a12:bc0:2::/48 maxlen: 48
2a12:bc0:3::/48 maxlen: 48
2a12:bc0:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 07 Oct 2024 17:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:66:bc:72:3b:bb:98:32:a9:b6:7d:9f:5c:9f:2c:f0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Validity
Not Before: Oct 7 11:27:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ec5fbdf490b0ad19334f9710994d1ef8e4bae8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6a:ae:58:44:f9:74:f1:e8:c3:d9:6c:a7:c9:
5e:e0:27:3e:8a:46:3a:ce:90:b8:d0:dd:30:08:c2:
26:b1:d9:12:7e:28:18:b3:dd:91:b7:c2:51:5f:3f:
88:68:dc:d4:39:b1:31:07:a3:b7:de:d8:70:0f:67:
25:50:3c:68:be:16:67:45:e2:a2:34:85:15:fc:8a:
78:c3:f9:bf:25:c4:2c:0d:e8:1e:98:12:14:40:21:
bc:8a:0f:85:32:fb:0e:55:02:03:da:dd:23:b7:4f:
36:97:0f:6d:0b:7e:a0:d1:89:cd:9a:52:d4:90:07:
dc:b0:d4:ff:1d:12:e0:e9:56:6e:a6:59:be:c2:4d:
6a:b3:da:c5:80:15:cf:59:38:58:b4:67:f8:3b:cf:
cd:5e:26:18:0c:5e:cf:76:61:d5:25:57:c9:89:5c:
5b:63:61:63:3f:71:6c:13:48:09:b9:67:19:51:ce:
f9:18:1e:69:dd:58:3a:fc:14:dd:12:04:bd:f3:01:
6b:ab:57:0b:3e:25:11:58:ee:d7:b8:aa:af:42:be:
d2:5b:37:c6:82:e7:c8:de:63:83:1f:45:2d:39:37:
0b:18:41:22:b9:a2:9b:50:ac:9d:fe:24:e8:28:72:
4e:2c:62:ef:fd:a1:b7:c5:f6:76:55:12:e5:1a:44:
52:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C5:FB:DF:49:0B:0A:D1:93:34:F9:71:09:94:D1:EF:8E:4B:AE:8B
X509v3 Authority Key Identifier:
keyid:A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/fsX730kLCtGTNPlxCZTR745Lros.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.55.0/24
IPv6:
2a12:bc0::-2a12:bc0:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
19:cd:17:89:0f:a1:7d:7e:03:e3:95:ce:d0:c9:1f:25:43:49:
20:f5:df:d2:0a:c4:d1:47:91:a2:7a:13:2f:9d:72:b4:78:33:
1d:06:12:d0:c8:31:c8:24:c9:ab:eb:60:48:a9:d1:99:48:f7:
3d:af:b0:f9:fa:90:a6:8a:50:f2:a4:9b:9c:de:50:e8:56:7a:
a5:46:50:1f:48:7c:fc:dd:6d:32:d8:20:fc:cb:c1:f4:95:7a:
af:ee:a8:65:bd:5d:12:62:43:99:69:66:72:47:26:0d:9c:19:
ea:79:c5:5f:10:47:59:84:ec:a4:a8:2c:7c:65:69:3f:eb:de:
1d:bb:f0:64:59:1f:f0:62:c4:0c:0e:1b:91:e5:6a:c7:89:03:
84:1d:10:70:5e:c3:13:b8:4b:10:4b:6a:60:5a:63:b3:37:98:
e6:52:fb:91:56:ee:41:60:86:6a:df:82:0b:33:2a:ae:ce:cb:
69:39:b2:56:46:93:e6:0a:39:bc:1f:bf:a7:66:f1:8d:82:1e:
b5:13:5a:ff:a1:d5:e1:5a:83:29:7b:cb:04:e8:3d:8a:42:75:
24:1a:9a:fd:8e:fc:a9:88:44:b7:fb:18:56:b4:f2:aa:c8:bf:
64:c7:c0:b8:30:5d:f5:ae:cf:7f:55:4d:c6:ff:2b:91:0e:fc:
1e:a8:93:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 23:07:56 2024 by rpki-client on console-ams.rpki-client.org