Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/MAjFwMSqHn0JpcQ_pldJWZDfy24.roa
File: MAjFwMSqHn0JpcQ_pldJWZDfy24.roa (raw, json)
Hash identifier: Zni40nVegNe2Or0q2SggVJgOCdSkslxFPIIsNonLrnc=
Subject key identifier: 30:08:C5:C0:C4:AA:1E:7D:09:A5:C4:3F:A6:57:49:59:90:DF:CB:6E
Certificate issuer: /CN=601ddc60799263ffb9bd0e5eeb0872843dee6a72
Certificate serial: 018CCFFA2C643AF2A7B0AAF51D5B98A4AE67
Authority key identifier: 60:1D:DC:60:79:92:63:FF:B9:BD:0E:5E:EB:08:72:84:3D:EE:6A:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB3cYHmSY_-5vQ5e6whyhD3uanI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/MAjFwMSqHn0JpcQ_pldJWZDfy24.roa
Signing time: Wed 03 Jan 2024 15:38:48 +0000
ROA not before: Wed 03 Jan 2024 15:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15924
IP address blocks: 46.235.15.0/24 maxlen: 32
2a14:2b80::/29 maxlen: 128
2a14:5c80::/29 maxlen: 128
Validation: Failed, certificate revoked on Wed 10 Jan 2024 09:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cf:fa:2c:64:3a:f2:a7:b0:aa:f5:1d:5b:98:a4:ae:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601ddc60799263ffb9bd0e5eeb0872843dee6a72
Validity
Not Before: Jan 3 15:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3008c5c0c4aa1e7d09a5c43fa657495990dfcb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c7:e3:83:a3:9b:ac:f2:fd:a3:a9:75:df:9e:
a2:4a:c7:91:d0:32:2c:08:8b:20:8b:ea:01:a9:05:
eb:05:99:b0:4f:8c:b8:71:3b:70:76:21:53:46:b7:
3d:37:fc:07:d2:3e:57:9c:79:e0:5f:c3:01:56:df:
89:00:a9:6a:d2:6b:26:74:dd:ad:0f:07:25:f3:7f:
a6:65:c8:0d:b0:c5:80:54:1b:11:1b:2b:65:3b:e7:
13:22:04:60:7d:33:5d:30:4f:f3:c7:f2:a9:53:26:
60:e6:a2:9d:38:a8:f9:6f:40:7a:94:20:9a:af:ec:
f1:ec:22:eb:ce:ef:b8:2a:ae:97:fc:5e:98:f3:bf:
a9:e6:83:7c:9d:ee:44:fe:a9:79:5a:17:bd:1a:96:
67:d9:68:90:1c:ef:57:c2:6d:42:01:62:45:e7:62:
f6:ae:08:77:76:c8:9f:e3:18:49:6d:3b:56:b6:3f:
a3:4f:75:6d:cd:1a:a7:d8:d4:7d:90:4f:db:75:ce:
d5:16:fa:79:e8:c7:78:05:17:51:6d:7b:23:9d:87:
79:6b:4d:50:95:7a:e0:76:27:6e:c1:18:47:c8:8a:
dd:9a:31:ab:93:b1:ce:fe:b9:36:7e:99:36:df:4c:
da:af:ed:e5:76:10:47:28:25:d4:0d:3c:39:6b:54:
66:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:08:C5:C0:C4:AA:1E:7D:09:A5:C4:3F:A6:57:49:59:90:DF:CB:6E
X509v3 Authority Key Identifier:
keyid:60:1D:DC:60:79:92:63:FF:B9:BD:0E:5E:EB:08:72:84:3D:EE:6A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB3cYHmSY_-5vQ5e6whyhD3uanI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/MAjFwMSqHn0JpcQ_pldJWZDfy24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/YB3cYHmSY_-5vQ5e6whyhD3uanI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.15.0/24
IPv6:
2a14:2b80::/29
2a14:5c80::/29
Signature Algorithm: sha256WithRSAEncryption
38:f4:b4:12:c5:5e:fa:e2:83:0f:6e:3b:8b:72:65:b6:39:d4:
40:67:7b:4d:0c:75:3d:38:fd:60:61:45:ee:93:05:51:e6:3a:
c6:e5:3c:06:f2:1b:9c:4a:74:44:39:71:bc:7d:3a:a4:64:11:
0e:9e:f6:dd:9e:2e:16:2c:01:ba:08:94:ec:35:91:38:19:c4:
f3:fc:29:45:43:9f:50:02:31:fc:c0:f4:a0:80:f5:f6:53:3d:
c4:d1:69:36:46:76:75:8b:38:32:35:e3:04:21:b4:49:17:65:
40:03:d7:ed:80:33:f9:1d:a2:69:4d:7c:81:52:9a:c2:fe:d5:
b8:3c:61:d5:e5:8d:bb:0e:79:78:db:05:8d:83:11:ce:a6:5c:
4b:11:b3:bc:26:d5:9e:c4:e5:5d:c1:d0:5f:4d:19:c1:9d:87:
08:ec:54:da:a9:45:a8:e7:ee:6f:db:7e:20:13:ce:14:9b:92:
0d:79:0e:d9:68:6f:69:7d:5e:8b:de:00:16:ec:51:d6:3f:33:
50:ec:2e:7f:06:aa:ab:b0:88:44:3d:b9:ce:57:7f:15:c5:0e:
91:2e:7d:0e:4d:26:57:64:fc:7e:1f:44:cd:6d:50:ec:41:38:
6c:0d:ea:82:c4:fb:ee:89:1c:37:3d:1e:9b:93:fa:b6:4e:f7:
fc:54:fb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 10 13:54:58 2024 by rpki-client on console-ams.rpki-client.org