Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/l9j9HjIdfNFCjDR1IMDn-1gin00.roa
File: l9j9HjIdfNFCjDR1IMDn-1gin00.roa (raw, json)
Hash identifier: rCeTQNAREYJwV2fEjK2WWGLzVqbYyNYAZyaKuBuwC6c=
Subject key identifier: 97:D8:FD:1E:32:1D:7C:D1:42:8C:34:75:20:C0:E7:FB:58:22:9F:4D
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 018B85EBAACC35D1FD3BF827E574337BDDF2
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/l9j9HjIdfNFCjDR1IMDn-1gin00.roa
Signing time: Tue 31 Oct 2023 13:28:16 +0000
ROA not before: Tue 31 Oct 2023 13:28:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43581
IP address blocks: 85.159.231.0/24 maxlen: 24
85.159.230.0/24 maxlen: 24
46.29.239.0/24 maxlen: 24
46.29.237.0/24 maxlen: 24
46.29.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:eb:aa:cc:35:d1:fd:3b:f8:27:e5:74:33:7b:dd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Oct 31 13:28:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97d8fd1e321d7cd1428c347520c0e7fb58229f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e9:66:a5:b6:2c:0e:b8:79:cb:d7:7d:02:19:
81:fe:63:5d:75:55:d4:0b:9d:c3:d5:4e:b1:01:f5:
2c:35:64:dd:b0:08:1f:fa:14:9a:8a:e9:d9:14:49:
b3:51:02:f3:84:f1:72:53:94:45:13:73:aa:99:a3:
2e:5e:24:4c:02:b0:d0:19:61:c1:df:03:67:56:ae:
fa:e0:06:2b:08:f0:aa:4a:28:5e:84:b8:30:30:a9:
e9:66:1c:79:56:f2:1f:c5:23:fb:53:50:67:4a:70:
09:59:ca:50:bb:b1:af:2e:4b:9d:e7:43:8d:69:79:
a8:e6:07:3c:16:4e:d3:24:d9:78:cc:9c:ad:07:df:
db:44:28:3e:0f:12:42:32:57:2d:51:5a:d1:09:39:
fb:0c:48:e8:2c:2b:a0:30:b6:a3:4e:8c:ab:d3:00:
90:89:15:fd:92:ab:57:7d:7a:8f:88:b3:1b:41:85:
46:dd:d0:5b:29:27:da:a2:1f:fb:8e:cc:df:6e:fc:
11:b2:05:8a:7b:b0:2e:94:1b:4a:0b:34:cf:df:78:
98:5c:db:a4:0e:c7:a8:1b:2d:b3:31:d0:49:ca:c5:
a1:10:4f:e2:95:59:98:2d:89:3f:55:47:64:ae:24:
75:80:53:4a:f0:08:8a:2c:4d:67:98:44:5f:2d:64:
b8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D8:FD:1E:32:1D:7C:D1:42:8C:34:75:20:C0:E7:FB:58:22:9F:4D
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/l9j9HjIdfNFCjDR1IMDn-1gin00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.236.0/23
46.29.239.0/24
85.159.230.0/23
Signature Algorithm: sha256WithRSAEncryption
87:bd:04:04:3b:bd:75:97:23:98:14:3b:d3:8c:d0:1f:7a:da:
d9:85:1e:10:42:5d:f2:45:27:7c:e1:84:1e:ba:48:74:e8:be:
ea:75:e0:4d:f9:29:68:2a:f5:8c:cc:77:74:e1:84:d3:e8:d4:
e0:85:60:0b:e5:1a:34:d4:ad:20:a3:79:98:b5:0e:17:a9:db:
06:00:ee:41:5f:c8:58:81:94:e3:06:6c:fd:0c:64:27:43:15:
11:8a:05:4d:8c:80:0f:4a:81:75:27:77:ed:66:43:b3:5d:8e:
e4:54:2f:df:96:1c:d6:ad:49:72:b7:ec:06:97:9d:28:b0:e7:
8a:95:23:98:69:b9:dd:3d:c2:6b:ba:5a:f5:0c:47:88:0f:38:
a1:90:37:94:4e:18:04:85:36:3a:d8:2e:22:29:ed:f1:35:0b:
31:43:05:b9:98:45:43:81:8d:24:85:34:3f:86:be:1b:e0:76:
51:51:29:37:f8:5a:e4:b2:91:04:39:38:d3:38:44:60:0b:92:
61:ac:c7:05:ca:38:0e:14:18:e8:99:34:ca:7d:d5:dd:87:58:
ec:0e:e3:86:b4:f4:22:8e:6d:e2:83:ce:cb:07:6a:cd:78:00:
b2:21:81:bc:69:3d:b8:0d:6d:5c:e8:e4:9a:95:75:6a:3b:3f:
73:56:62:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 18:51:15 2023 by rpki-client on console-fra.rpki-client.org