Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/arcVhYBs7f1XAlKa2bT6r0dvqQ4.roa
File: arcVhYBs7f1XAlKa2bT6r0dvqQ4.roa (raw, json)
Hash identifier: 2Jcut7EwTipGBRlVA70VBLeJLBACxsMbxt0uo3kQPQ0=
Subject key identifier: 6A:B7:15:85:80:6C:ED:FD:57:02:52:9A:D9:B4:FA:AF:47:6F:A9:0E
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 018DCD6CAF2A838842427DE32DAC7757AADF
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/arcVhYBs7f1XAlKa2bT6r0dvqQ4.roa
Signing time: Wed 21 Feb 2024 20:47:48 +0000
ROA not before: Wed 21 Feb 2024 20:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 46.175.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 05:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cd:6c:af:2a:83:88:42:42:7d:e3:2d:ac:77:57:aa:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Feb 21 20:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ab71585806cedfd5702529ad9b4faaf476fa90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3a:1a:ee:cd:79:1d:3a:c9:b6:a5:c7:59:41:
4b:72:d5:0f:46:11:6d:46:d9:ea:27:be:55:f0:c6:
ef:b7:ab:b1:c7:a9:a5:12:96:2e:23:41:87:98:72:
5b:2f:73:44:c1:56:28:4b:d8:59:82:a3:a9:76:46:
a1:09:22:24:7c:00:9b:e0:a3:a3:0b:7e:d4:71:a3:
62:76:b6:37:e4:08:6c:78:40:cc:8f:00:01:33:c4:
90:b5:e0:a8:d3:5a:fc:bd:18:7c:66:e7:6d:8c:ee:
43:29:a6:a0:13:5e:3a:f5:f1:87:28:48:ac:93:4d:
63:e1:c3:9d:34:ea:a3:cf:d3:28:ec:1d:3b:11:00:
ba:24:10:2f:60:02:d5:60:5b:d6:ec:60:67:ea:cf:
a9:07:81:8f:f0:88:48:07:61:99:15:7c:06:89:5e:
90:7f:2d:66:86:d6:b5:a9:12:ac:51:8a:da:d3:8d:
f8:48:8b:07:01:16:08:1a:a1:7a:f8:d8:48:77:11:
74:b4:54:88:83:e4:a7:1c:33:02:fa:f6:67:b0:e9:
13:61:2c:9e:40:c3:c2:fd:c6:c6:58:5e:b3:3c:fd:
8f:43:9a:18:72:2b:58:d3:0d:d5:1e:b0:29:97:3d:
c7:81:0e:86:df:72:1d:a4:f1:60:2f:0c:7e:54:8e:
12:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B7:15:85:80:6C:ED:FD:57:02:52:9A:D9:B4:FA:AF:47:6F:A9:0E
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/arcVhYBs7f1XAlKa2bT6r0dvqQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.130.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:84:53:5d:3e:a0:04:36:f6:16:39:85:50:35:52:2b:d5:fc:
31:21:f6:3d:be:79:6c:6f:f8:39:ea:80:be:3c:49:18:81:b0:
2d:ba:6b:48:17:0c:fb:a5:72:52:7d:e3:6c:1c:e8:30:0a:c0:
ea:c6:62:22:91:d2:3f:03:c8:f0:4b:f6:6d:12:46:b6:ac:89:
fb:d2:45:28:4d:0a:08:17:96:d7:d6:16:83:8f:6f:61:a1:34:
bf:5a:0d:98:d5:09:29:32:5e:01:a5:ac:3b:48:91:fe:e9:52:
54:72:3a:c7:5a:fd:15:2a:c6:f9:41:27:2d:d1:d9:47:84:8f:
cd:8e:a4:65:66:35:37:f9:96:4c:0c:1e:68:02:aa:c1:a3:f5:
4f:04:76:8a:99:34:90:34:a1:06:13:4c:17:78:30:48:af:33:
f4:8e:3e:9b:b7:ff:4a:c2:76:ed:26:83:c6:11:74:e7:9f:58:
f4:28:f6:d6:7e:10:5b:1d:40:6a:6f:37:d1:b7:60:21:ca:28:
25:c4:c1:b3:35:00:ff:b5:71:ec:64:89:9f:d2:7e:21:f8:24:
63:97:86:fb:6a:a2:7b:e6:55:a2:f5:d3:37:61:88:65:36:2f:
63:65:a3:54:f7:a1:4e:88:05:3b:66:df:dd:be:e3:b1:60:c2:
95:8e:28:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 08:33:55 2024 by rpki-client on console-ams.rpki-client.org