Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/p4yHOkOQjRdTFiHUwpq8gRzL1dU.roa
File: p4yHOkOQjRdTFiHUwpq8gRzL1dU.roa (raw, json)
Hash identifier: BdjApFBrbedN1RpMFIDBECW4krz1DiYc2TyAvmhcGXk=
Subject key identifier: A7:8C:87:3A:43:90:8D:17:53:16:21:D4:C2:9A:BC:81:1C:CB:D5:D5
Certificate issuer: /CN=601ddc60799263ffb9bd0e5eeb0872843dee6a72
Certificate serial: 018D3B369DEFE10EED038EB26A6DCB7E938B
Authority key identifier: 60:1D:DC:60:79:92:63:FF:B9:BD:0E:5E:EB:08:72:84:3D:EE:6A:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB3cYHmSY_-5vQ5e6whyhD3uanI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/p4yHOkOQjRdTFiHUwpq8gRzL1dU.roa
Signing time: Wed 24 Jan 2024 11:24:11 +0000
ROA not before: Wed 24 Jan 2024 11:24:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 46.235.15.0/24 maxlen: 32
2a00:9940::/29 maxlen: 128
2a04:e880::/29 maxlen: 128
2a06:8540::/29 maxlen: 128
2a09:2340::/29 maxlen: 128
2a14:2b80::/29 maxlen: 128
2a14:5c80::/29 maxlen: 128
2a14:6580::/29 maxlen: 128
2a14:7080::/29 maxlen: 128
Validation: Failed, certificate revoked on Fri 26 Jan 2024 12:07:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3b:36:9d:ef:e1:0e:ed:03:8e:b2:6a:6d:cb:7e:93:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601ddc60799263ffb9bd0e5eeb0872843dee6a72
Validity
Not Before: Jan 24 11:24:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a78c873a43908d17531621d4c29abc811ccbd5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3b:c6:03:0d:08:ca:aa:f8:f2:30:2c:64:fd:
b5:47:98:5b:47:0b:de:e4:e7:c4:63:32:b4:af:5c:
ac:ac:5c:34:26:70:97:43:48:b7:53:e2:ef:c3:bf:
8c:19:fb:52:fb:c7:aa:9f:1a:81:d5:3e:53:4c:b3:
6a:7a:41:65:a2:61:85:31:9a:14:29:d9:fb:98:0e:
0f:20:b2:a1:96:72:df:b3:f4:2d:dc:ea:21:23:c3:
11:69:71:17:45:fd:08:53:49:92:f1:44:2f:f0:52:
c5:5b:63:b2:35:8f:b6:78:80:55:f6:e9:58:25:5f:
2d:d7:38:08:72:6e:af:46:97:58:e1:fd:53:de:37:
b0:a6:f8:0d:df:06:95:75:ec:ca:ba:76:49:b7:81:
c8:ab:57:5c:12:d1:d0:33:4d:a7:6e:9d:be:82:53:
9c:b4:e6:e7:4e:48:6e:cb:fa:d8:38:8d:b6:6a:72:
53:dd:0e:56:50:a8:5a:02:ef:f6:00:1e:ba:a8:17:
70:40:8b:95:f0:24:50:38:24:de:51:1b:2d:44:7f:
2d:22:40:57:b6:93:78:81:66:ee:ed:de:50:ea:67:
61:f6:7b:f5:95:8d:96:c1:92:0e:86:48:06:9b:f2:
d6:1e:7d:2d:03:94:eb:52:5a:05:14:94:c8:70:d3:
94:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8C:87:3A:43:90:8D:17:53:16:21:D4:C2:9A:BC:81:1C:CB:D5:D5
X509v3 Authority Key Identifier:
keyid:60:1D:DC:60:79:92:63:FF:B9:BD:0E:5E:EB:08:72:84:3D:EE:6A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB3cYHmSY_-5vQ5e6whyhD3uanI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/p4yHOkOQjRdTFiHUwpq8gRzL1dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/YB3cYHmSY_-5vQ5e6whyhD3uanI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.15.0/24
IPv6:
2a00:9940::/29
2a04:e880::/29
2a06:8540::/29
2a09:2340::/29
2a14:2b80::/29
2a14:5c80::/29
2a14:6580::/29
2a14:7080::/29
Signature Algorithm: sha256WithRSAEncryption
65:a7:94:34:6d:78:da:cf:fd:92:08:c5:3e:ea:4a:3c:cf:15:
3d:b8:3a:1f:c3:2d:c7:c1:94:1b:f8:ca:04:b8:91:bf:52:e3:
b6:b1:1b:2e:d2:1d:e2:ba:56:b6:57:9b:da:38:6d:e0:ce:c1:
6a:4c:5c:a4:c4:f6:76:02:b9:d1:05:28:a1:c2:24:be:e8:75:
af:dc:41:9a:75:5a:7a:c8:fc:a1:26:22:37:dd:dd:1b:5d:48:
f8:5e:48:2d:d3:35:a6:f3:75:6e:33:b5:fa:43:90:c5:77:ca:
2c:4e:93:62:5b:a4:6d:9a:4b:4c:c6:20:97:c1:1a:68:d5:93:
9b:08:ac:7a:06:6d:94:f1:39:ea:f7:f7:61:dc:47:af:d1:da:
09:29:96:ef:4c:86:38:e4:6d:80:bc:29:32:7d:2a:b3:c9:73:
65:a2:61:ad:b9:d0:37:53:bc:b7:a0:5e:31:99:e1:c9:d9:69:
06:cb:f8:7e:71:d6:57:89:86:ec:a2:d9:4a:cc:f7:14:e3:5b:
d7:d1:b1:86:11:a5:33:29:70:6d:65:33:b3:45:c9:a9:3a:77:
2a:de:7c:58:09:eb:ef:7f:90:49:9a:98:93:c7:13:b2:11:c2:
2c:1d:8a:45:1f:ca:53:60:f4:c9:e2:17:71:11:f0:f4:b9:4f:
e1:9f:54:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:23 2024 by rpki-client on console-ams.rpki-client.org