Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/ebmfXKBzbCeGIFQBrO2QGr7p8hc.roa
File: ebmfXKBzbCeGIFQBrO2QGr7p8hc.roa (raw, json)
Hash identifier: MT2PKrwv2TkwO/QRy2Nq83AN+cfboJw2R7h2fRahl+4=
Subject key identifier: 79:B9:9F:5C:A0:73:6C:27:86:20:54:01:AC:ED:90:1A:BE:E9:F2:17
Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial: 018572FA7E6377E43B61AE7A5A4E054C9A16
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/ebmfXKBzbCeGIFQBrO2QGr7p8hc.roa
Signing time: Mon 02 Jan 2023 14:54:56 +0000
ROA not before: Mon 02 Jan 2023 14:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57908
IP address blocks: 46.243.16.0/24 maxlen: 24
46.243.17.0/24 maxlen: 24
46.243.19.0/24 maxlen: 24
46.243.20.0/24 maxlen: 24
46.243.21.0/24 maxlen: 24
46.243.22.0/24 maxlen: 24
46.243.23.0/24 maxlen: 24
46.243.18.0/24 maxlen: 24
2a03:6dc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:7e:63:77:e4:3b:61:ae:7a:5a:4e:05:4c:9a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Validity
Not Before: Jan 2 14:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79b99f5ca0736c2786205401aced901abee9f217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:c9:71:c6:50:fc:c6:a9:12:55:29:1f:a5:
9b:ff:c3:8e:11:cf:87:34:c8:3d:9d:04:10:d4:6b:
7c:ac:f7:7f:7d:62:49:d6:47:5e:4e:b3:25:6b:df:
8d:98:64:ce:1b:57:bf:78:40:76:91:c2:01:84:f5:
ad:e3:03:c6:cb:30:34:00:69:cb:97:aa:48:c8:1c:
27:58:fa:3f:97:44:b6:33:e0:22:18:66:12:d8:95:
97:42:e7:ae:fe:f2:91:18:60:20:d3:c7:ab:ad:59:
61:a3:7e:0c:19:8b:1c:2a:a7:57:c1:49:ed:65:c7:
e8:4d:ac:8b:b4:b6:a6:a2:70:66:46:6a:74:6c:27:
20:18:42:9d:1e:b9:5d:a3:86:c1:53:50:8f:6d:e8:
c8:6e:ea:c2:b0:b9:56:5f:ec:36:00:e0:ed:96:46:
ae:21:0a:ca:17:88:16:20:5b:ea:cc:30:11:2f:c7:
30:9e:3f:94:62:85:c0:96:06:ac:1c:0e:cf:7e:b4:
f2:fe:1b:8f:68:eb:9d:10:1e:83:96:32:c0:47:0a:
8d:1a:a9:03:16:6d:8e:f9:b0:0e:90:fe:79:70:b2:
87:1b:2d:5b:2c:ba:0b:17:3f:75:d3:ba:78:e5:7d:
70:b9:4f:38:fd:99:aa:08:33:3a:13:23:d2:4e:07:
ad:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B9:9F:5C:A0:73:6C:27:86:20:54:01:AC:ED:90:1A:BE:E9:F2:17
X509v3 Authority Key Identifier:
keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/ebmfXKBzbCeGIFQBrO2QGr7p8hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.16.0/21
IPv6:
2a03:6dc0::/32
Signature Algorithm: sha256WithRSAEncryption
2f:8c:48:73:ac:20:90:57:99:b0:d7:77:16:ee:8a:7f:0b:f3:
62:a9:52:58:a2:f5:54:4d:af:1b:a7:f1:d0:46:86:9d:7d:39:
fc:df:05:49:d5:28:0f:b2:60:64:f4:36:bb:0b:e5:8a:40:dc:
b8:d2:9a:ef:d7:1a:f1:01:3d:e0:fe:94:5d:79:bf:90:91:79:
84:90:a0:ca:79:f9:2a:7f:1d:b7:42:a7:80:91:db:b2:a1:37:
9f:6e:23:c8:cf:ad:af:c4:99:bc:a5:a5:05:ce:c9:20:c0:e5:
ec:7a:6c:80:87:c0:5c:ae:ec:c0:c3:e9:a7:46:1d:af:f5:e9:
32:43:ee:fe:c5:b6:89:82:c2:75:f9:c1:87:20:13:ea:d8:da:
bb:33:2e:fc:1b:46:f1:db:58:04:74:18:ec:a3:fd:9e:6c:97:
97:5b:3e:c9:83:bd:fb:ec:33:90:66:64:54:03:43:b2:54:5e:
23:27:38:24:a0:2f:65:5f:5f:c1:bc:b9:09:8d:5f:0b:69:5d:
eb:60:a7:36:d2:27:38:38:0c:ff:45:c0:d3:12:90:96:e5:48:
9b:c1:4a:b0:a8:57:3a:a3:cf:32:ef:fe:78:b7:f2:5f:03:50:
46:54:9c:6c:25:ed:c8:db:2a:7c:82:73:06:d5:f8:d4:f2:94:
90:15:22:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:22 2024 by rpki-client on console-ams.rpki-client.org