Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/UarfYOKCDkDgdNNFISGWOpIhv3E.roa
File: UarfYOKCDkDgdNNFISGWOpIhv3E.roa (raw, json)
Hash identifier: 6xL5lfq6zlQl7fYVmJKUDbemKr2ky/MYRNeebhNr/oU=
Subject key identifier: 51:AA:DF:60:E2:82:0E:40:E0:74:D3:45:21:21:96:3A:92:21:BF:71
Certificate issuer: /CN=601ddc60799263ffb9bd0e5eeb0872843dee6a72
Certificate serial: 018CF2CF4B66E3FF34F981A2348BC9D3A72A
Authority key identifier: 60:1D:DC:60:79:92:63:FF:B9:BD:0E:5E:EB:08:72:84:3D:EE:6A:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB3cYHmSY_-5vQ5e6whyhD3uanI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/UarfYOKCDkDgdNNFISGWOpIhv3E.roa
Signing time: Wed 10 Jan 2024 09:58:40 +0000
ROA not before: Wed 10 Jan 2024 09:58:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15924
IP address blocks: 46.235.15.0/24 maxlen: 32
2a14:2b80::/29 maxlen: 128
2a14:6580::/29 maxlen: 128
2a14:5c80::/29 maxlen: 128
Validation: Failed, certificate revoked on Mon 15 Jan 2024 15:47:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f2:cf:4b:66:e3:ff:34:f9:81:a2:34:8b:c9:d3:a7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601ddc60799263ffb9bd0e5eeb0872843dee6a72
Validity
Not Before: Jan 10 09:58:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51aadf60e2820e40e074d3452121963a9221bf71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d7:98:78:3c:d7:d8:68:53:52:34:f1:ae:64:
63:c3:ef:37:9c:96:75:c0:ec:05:4c:33:e1:c2:76:
f9:56:66:f1:b5:ce:69:09:c1:09:f7:fc:c9:e5:7d:
51:8d:86:19:ef:72:6a:63:36:f5:48:67:c4:46:19:
91:c7:1b:ff:72:67:d6:06:87:9f:5d:90:50:e1:b0:
43:a1:00:03:fe:b6:2a:86:41:5d:da:7b:36:b8:bd:
b3:ec:cb:c8:11:ed:cd:a9:91:9a:60:d3:71:dc:a9:
ef:c1:95:8b:bd:11:1c:f6:bb:48:4b:a3:bd:ea:42:
d5:95:bf:4e:5d:0d:2a:fe:b3:f2:c0:c7:e3:c9:ac:
f2:13:d1:ad:2e:51:64:74:06:d5:0d:e6:22:6c:33:
a1:4f:39:f5:d0:67:06:76:78:e7:98:aa:dd:60:44:
bb:53:60:02:c6:b8:e0:97:21:75:72:8e:ca:c1:35:
41:66:fb:9c:c9:48:17:2e:60:81:1a:05:22:8c:c1:
fc:14:62:a1:b6:ed:cd:92:ea:cc:d0:b5:72:b0:e5:
48:01:8b:57:32:01:49:f8:58:af:34:6e:cc:6f:ef:
48:69:fc:5e:ff:99:e4:36:cb:44:57:97:d2:7a:a8:
aa:fe:8d:72:b4:ce:5a:d5:1d:82:44:cd:31:bb:81:
b0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AA:DF:60:E2:82:0E:40:E0:74:D3:45:21:21:96:3A:92:21:BF:71
X509v3 Authority Key Identifier:
keyid:60:1D:DC:60:79:92:63:FF:B9:BD:0E:5E:EB:08:72:84:3D:EE:6A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB3cYHmSY_-5vQ5e6whyhD3uanI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/UarfYOKCDkDgdNNFISGWOpIhv3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/YB3cYHmSY_-5vQ5e6whyhD3uanI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.15.0/24
IPv6:
2a14:2b80::/29
2a14:5c80::/29
2a14:6580::/29
Signature Algorithm: sha256WithRSAEncryption
7d:05:fa:10:49:cf:1e:5e:4e:6c:13:c8:67:1f:4d:01:03:fa:
8c:88:02:10:87:2d:30:31:9a:be:d2:1c:ee:69:07:cf:55:93:
df:80:c6:4c:0e:85:2d:a0:26:dc:b0:25:95:2a:c0:76:26:54:
9a:18:d5:42:a7:33:77:8b:64:a4:06:14:6d:73:15:ba:99:e8:
7e:21:5f:e6:5d:31:ad:1b:3d:a5:ef:7a:1d:74:f6:3e:d5:73:
86:0e:8f:a0:6e:d3:92:8e:c4:8f:be:f5:23:25:d7:63:48:79:
c9:3a:09:70:44:c9:96:88:91:c7:82:1c:04:16:28:4a:e0:70:
e2:c3:ae:d4:c1:5a:af:6d:0e:38:72:9a:80:74:f5:14:bf:86:
9d:08:e9:18:76:72:bb:c8:b5:d2:c7:01:13:21:4c:e1:f9:93:
cb:08:6b:9e:87:41:16:e6:75:01:02:3f:12:c2:ba:b4:dd:77:
34:bc:05:ab:6a:53:0b:de:9e:bf:d2:b4:d1:9e:8b:33:ed:2a:
1e:64:66:38:11:ca:e6:0a:cd:ca:78:a5:9c:b6:77:b5:2f:f3:
0e:b2:8e:fb:a5:69:79:28:d8:9d:63:15:dc:85:73:b8:57:11:
6a:05:88:8d:7e:a2:20:5b:ce:19:26:f8:86:dd:c3:fc:de:1b:
1e:9a:e3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 20:07:28 2024 by rpki-client on console-fra.rpki-client.org