Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/R66A5WVUHQqOdUoPMlE3aEbX1jw.roa
File: R66A5WVUHQqOdUoPMlE3aEbX1jw.roa (raw, json)
Hash identifier: cUDvHvVPAl3C/VvVGkvpcvUBy0EsWYv/T48H9fqDYLs=
Subject key identifier: 47:AE:80:E5:65:54:1D:0A:8E:75:4A:0F:32:51:37:68:46:D7:D6:3C
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 0189D5754223255188D0AA22BC41ED704E24
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/R66A5WVUHQqOdUoPMlE3aEbX1jw.roa
Signing time: Tue 08 Aug 2023 14:02:58 +0000
ROA not before: Tue 08 Aug 2023 14:02:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19437
IP address blocks: 46.226.124.0/24 maxlen: 24
185.138.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:75:42:23:25:51:88:d0:aa:22:bc:41:ed:70:4e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Aug 8 14:02:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47ae80e565541d0a8e754a0f3251376846d7d63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:48:13:07:b0:b1:41:99:db:4a:74:03:3b:
18:7b:3f:ec:73:e8:2c:3f:08:8e:c4:47:9a:8b:8d:
2f:ef:68:e0:ba:7d:2e:2c:d2:2e:8a:9d:97:76:e4:
84:fa:9d:74:1c:ed:51:c7:64:db:26:05:db:40:c8:
c0:7a:1d:35:d8:e2:90:f7:0c:2a:e4:b7:bd:04:cc:
98:26:47:f5:5c:33:89:13:62:ff:ca:85:6c:39:d3:
cc:d6:a8:99:1c:01:ba:c3:99:48:4f:ba:74:0c:29:
50:12:1a:7b:33:15:62:b5:e9:a0:73:df:04:b2:02:
e7:3a:da:26:42:e3:6b:c3:f6:79:78:5d:4e:f2:61:
55:49:dc:14:c9:cf:3a:f1:65:45:ee:5d:28:ac:c9:
63:42:f4:a2:31:67:4c:cf:25:66:d9:45:7f:3b:9e:
ef:6e:7a:ac:78:33:07:29:b8:cc:e9:24:01:ac:96:
55:f2:d0:90:86:31:1d:dc:48:53:df:7c:f6:60:5c:
dd:32:08:d3:c4:69:6a:44:6b:a7:db:43:a3:2e:b8:
88:81:40:fa:11:63:bc:af:04:9f:b7:52:8a:ea:f4:
70:a5:92:2c:2a:eb:c9:e4:e8:5a:9e:60:bc:9e:4d:
1e:95:e5:8c:98:31:ad:1e:44:f4:0b:5f:97:18:3d:
fe:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AE:80:E5:65:54:1D:0A:8E:75:4A:0F:32:51:37:68:46:D7:D6:3C
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/R66A5WVUHQqOdUoPMlE3aEbX1jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.124.0/24
185.138.166.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:53:fe:e3:dc:ef:b6:c2:38:e9:87:2f:fc:3d:1d:c9:21:37:
b0:d0:bd:73:06:9c:ec:e2:71:db:84:b3:91:fe:89:c7:9d:a6:
b3:0e:f7:5c:2d:88:75:b9:0e:9d:58:6a:02:fe:db:f3:1b:1e:
57:56:13:56:be:09:1a:0c:63:54:6c:9e:4e:ce:5f:a2:b4:f8:
fd:38:f5:bb:3f:fa:b4:c7:3e:e6:c9:d6:c8:e6:71:81:6e:1b:
63:58:bc:35:f8:ad:b4:05:e1:24:53:16:cd:b4:3f:b3:06:48:
fa:1d:30:a0:c9:a0:e0:c3:79:69:b4:fb:9e:91:ee:99:6f:b5:
e2:44:06:a5:1d:79:5c:bf:7f:03:a2:aa:69:72:7b:9d:f8:33:
2e:7f:4f:9f:e8:3a:11:e8:10:e3:b0:d5:b4:9d:09:f3:cf:2e:
e5:f5:59:54:46:5a:c5:6a:c8:3f:02:b5:c6:64:8a:87:35:bc:
52:65:73:10:8c:06:1f:b3:4c:4f:33:31:16:de:94:fe:b6:fa:
10:e3:6f:87:2d:42:b0:4d:b8:11:91:88:23:e2:2f:53:e7:9b:
2f:b9:c7:07:d2:b3:06:59:bf:d2:8c:9c:b9:60:f3:6d:c4:6e:
b8:04:e2:41:e8:ff:de:00:b6:0a:55:3c:cd:3e:e9:bb:ef:e0:
1e:2d:df:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:54 2024 by rpki-client on console-fra.rpki-client.org