Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/bo6Z79iBZ5VjUEK4XdGlLtQUn7Y.roa
File: bo6Z79iBZ5VjUEK4XdGlLtQUn7Y.roa (raw, json)
Hash identifier: Ox4KyGY/Lvh2r9Vm6IBmmrQ19/oQlfxtLcYPANfDCag=
Subject key identifier: 6E:8E:99:EF:D8:81:67:95:63:50:42:B8:5D:D1:A5:2E:D4:14:9F:B6
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 0188BA4461081A390F86EE0D9C28F4DAD69B
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/bo6Z79iBZ5VjUEK4XdGlLtQUn7Y.roa
Signing time: Wed 14 Jun 2023 14:17:03 +0000
ROA not before: Wed 14 Jun 2023 14:17:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 46.228.131.0/24 maxlen: 24
46.228.136.0/23 maxlen: 24
46.228.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Sep 2023 06:38:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ba:44:61:08:1a:39:0f:86:ee:0d:9c:28:f4:da:d6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jun 14 14:17:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e8e99efd8816795635042b85dd1a52ed4149fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:aa:93:9e:33:07:d7:a7:32:89:73:dc:fd:
70:14:f1:b5:a1:b8:13:39:c2:d5:cf:7d:ca:53:de:
56:b7:ef:e1:1c:fb:7d:5d:1d:17:b1:06:95:73:e6:
02:bf:5c:ae:0f:1b:7a:78:3f:70:a9:f6:72:f3:af:
af:e7:be:7c:49:07:12:bb:19:18:8e:06:9e:6e:12:
e2:7a:cf:cf:ca:0f:38:90:b2:7a:b8:21:ab:5f:f0:
15:64:fb:07:3c:19:32:07:aa:9b:25:ba:9a:03:9f:
d3:f4:a8:4a:fc:d6:87:27:07:76:a4:e7:6d:c3:78:
05:fa:d6:1c:d6:71:3f:a5:ac:14:cc:0c:01:ca:bd:
2e:cb:ce:8f:0e:86:88:55:c9:71:6c:a1:21:75:cc:
e5:a2:2c:88:a7:bd:49:34:35:9e:56:21:65:7a:d3:
da:72:1b:d5:aa:7d:8f:ff:77:9d:2d:ae:e1:3c:1d:
a2:4a:42:5e:d9:b6:74:64:d0:65:a6:36:17:2f:4e:
11:c3:7b:82:c6:05:24:21:97:dc:92:50:1f:ed:b7:
1d:6d:d3:1b:15:ea:86:22:ff:21:e2:cc:f2:ae:95:
71:f0:2f:88:ce:8b:cc:4c:1e:ee:5a:59:df:81:3c:
44:5e:28:4b:20:2b:b0:54:b6:6b:9f:12:23:7e:80:
e6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8E:99:EF:D8:81:67:95:63:50:42:B8:5D:D1:A5:2E:D4:14:9F:B6
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/bo6Z79iBZ5VjUEK4XdGlLtQUn7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.131.0/24
46.228.135.0-46.228.137.255
Signature Algorithm: sha256WithRSAEncryption
87:3d:01:57:bd:7d:d3:aa:ff:1f:b0:6d:f4:19:a9:f7:47:94:
4f:4d:58:79:11:2b:0a:38:a6:55:c1:f8:24:11:35:55:39:4a:
e3:db:bb:21:25:7d:3e:58:90:ae:d3:99:56:ff:c6:ca:c8:b8:
51:0a:45:a2:92:37:cd:c5:f5:0f:c4:c0:de:a8:61:5b:18:61:
3f:9f:3f:17:ed:85:b6:bc:1e:48:4a:2b:e8:d2:f4:f4:a3:25:
f4:27:7a:3e:53:75:e3:bb:cc:b3:cb:cf:e8:76:e7:c3:20:ed:
2a:89:8d:a7:60:0f:93:c9:6d:03:8f:3c:96:89:64:ee:e2:45:
eb:81:bc:9f:8e:9d:fe:62:5e:77:1c:98:9b:14:fc:52:a5:d7:
bf:ea:a9:ea:0a:e7:73:48:e7:af:3f:85:b3:dd:35:e6:57:2a:
a6:d2:f1:32:4f:f2:95:3a:a4:4e:2f:93:d8:56:4c:57:93:8b:
79:21:15:87:ef:64:43:2f:63:6f:1d:2f:7e:c3:48:15:ea:7e:
c9:ff:9f:16:b0:04:69:bd:6d:ad:2e:a2:43:27:09:6f:fb:43:
41:e5:d5:a1:94:17:29:7e:64:5b:21:37:e2:1d:d3:2a:37:e9:
95:c4:f0:77:6a:a6:53:54:71:0f:f7:7b:f3:16:cc:09:0f:cf:
a6:0f:aa:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:08 2024 by rpki-client on console-fra.rpki-client.org