Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/6y1eaOzhEmgg2zRTF7R-A7SWCAU.roa
File: 6y1eaOzhEmgg2zRTF7R-A7SWCAU.roa (raw, json)
Hash identifier: eDgrAmbufctldAwcSk8/DSoBdPS1khrk3RC+f4mmFSI=
Subject key identifier: EB:2D:5E:68:EC:E1:12:68:20:DB:34:53:17:B4:7E:03:B4:96:08:05
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018D69E428CFEDCD9675253FF547DF89CEE4
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/6y1eaOzhEmgg2zRTF7R-A7SWCAU.roa
Signing time: Fri 02 Feb 2024 12:56:16 +0000
ROA not before: Fri 02 Feb 2024 12:56:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8038
IP address blocks: 46.229.255.0/24 maxlen: 24
91.190.107.0/24 maxlen: 24
185.150.0.0/24 maxlen: 24
185.165.44.0/24 maxlen: 24
185.217.118.0/24 maxlen: 24
193.26.114.0/24 maxlen: 24
194.5.84.0/24 maxlen: 24
194.76.134.0/24 maxlen: 24
194.242.3.0/24 maxlen: 24
203.25.124.0/24 maxlen: 24
203.159.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 16:32:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:69:e4:28:cf:ed:cd:96:75:25:3f:f5:47:df:89:ce:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 2 12:56:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb2d5e68ece1126820db345317b47e03b4960805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:96:f6:b5:df:ff:f0:e1:88:ba:c9:7b:b9:a9:
79:28:f9:82:cf:b7:ce:76:76:1b:c6:d0:4c:16:24:
38:5c:62:de:54:b1:3c:f2:56:13:9f:70:92:37:69:
90:a0:c6:e5:01:ce:f7:44:60:58:ed:dc:9f:bd:48:
24:e9:1a:76:ca:10:b6:f0:f3:07:14:e8:b5:ac:ea:
17:43:f0:4c:a9:6d:cf:36:6a:6c:c0:21:bc:2a:d2:
ea:92:91:08:fa:16:59:c8:86:32:15:b2:dd:de:73:
9b:69:bb:8e:b5:75:ed:46:2b:bf:d7:fb:8d:05:57:
d7:01:89:f2:d9:24:15:18:44:db:53:12:29:db:bf:
f8:73:a7:2d:bb:85:57:9b:b5:9b:f2:39:7f:f2:17:
67:37:41:14:69:5d:49:16:1b:00:92:2e:cc:21:2d:
8a:5b:ea:b6:08:ff:97:a4:9f:a3:c6:0d:c9:4d:f6:
96:59:af:87:00:80:6d:76:39:0e:08:57:9e:6f:bf:
6c:cd:5e:ac:b7:17:6d:df:a6:3d:1d:fb:e4:85:5b:
95:6b:b4:90:d5:95:7d:20:d3:40:4c:74:b8:ba:40:
f9:1c:a2:3a:99:47:46:50:4e:6d:46:0f:98:54:99:
dd:14:f6:6a:ce:55:a7:65:5b:c6:8f:2f:a7:79:55:
05:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2D:5E:68:EC:E1:12:68:20:DB:34:53:17:B4:7E:03:B4:96:08:05
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/6y1eaOzhEmgg2zRTF7R-A7SWCAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.255.0/24
91.190.107.0/24
185.150.0.0/24
185.165.44.0/24
185.217.118.0/24
193.26.114.0/24
194.5.84.0/24
194.76.134.0/24
194.242.3.0/24
203.25.124.0/24
203.159.82.0/24
Signature Algorithm: sha256WithRSAEncryption
29:7d:8a:9a:ae:a0:1a:a2:80:64:4b:17:05:b6:87:80:98:3a:
12:2b:de:14:60:65:3e:f9:49:45:8c:86:fb:62:e3:81:dd:44:
9a:3d:c5:be:0f:12:f1:a1:32:05:43:1c:98:54:31:a1:ae:0c:
22:b4:b6:08:4d:81:ed:8d:02:41:fa:2f:7b:06:40:fa:07:2a:
2e:cb:50:96:02:87:be:ae:51:6f:c3:0c:9e:83:4e:71:46:fd:
83:0b:0b:94:ad:a2:6d:a7:b2:7e:b0:7c:c8:b5:df:33:ab:76:
56:a7:c1:e4:6a:a7:10:5c:fb:b2:f3:9d:bd:24:b4:08:f5:72:
fa:0f:f5:ea:7f:21:e7:c8:f0:75:19:ee:35:af:4b:db:11:20:
ce:18:05:9a:44:f3:71:c8:94:29:2a:fc:4f:82:50:c9:b6:4e:
53:fb:db:8f:ce:c8:fd:87:1a:db:f1:74:71:2b:9b:22:a2:8a:
79:11:52:91:87:82:d5:d9:23:a2:07:87:15:b4:01:f1:53:df:
76:06:f0:f2:f7:ec:12:a6:48:e0:1d:6e:aa:51:ee:f0:92:b2:
65:ef:b6:72:6c:83:a0:96:a3:cd:b1:66:1d:52:cd:c2:05:53:
b3:6f:41:22:12:4d:24:5e:9d:b8:87:77:3b:b1:e1:76:48:d2:
c2:b2:41:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 21:18:02 2024 by rpki-client on console-fra.rpki-client.org