Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/10KqdA27iO1z_sjeMmy7cIRfXTE.roa
File: 10KqdA27iO1z_sjeMmy7cIRfXTE.roa (raw, json)
Hash identifier: fjAI2jiNv6NJo8g28cJo/8IBMRpt9p5R1xt36ny4rZY=
Subject key identifier: D7:42:AA:74:0D:BB:88:ED:73:FE:C8:DE:32:6C:BB:70:84:5F:5D:31
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 018CC802456C78EFD778CB155EA317DC4BCA
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/10KqdA27iO1z_sjeMmy7cIRfXTE.roa
Signing time: Tue 02 Jan 2024 02:30:41 +0000
ROA not before: Tue 02 Jan 2024 02:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8932
IP address blocks: 46.162.220.0/22 maxlen: 24
185.48.240.0/22 maxlen: 24
2a00:cc40:2::/48 maxlen: 48
2a00:cc40:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 Feb 2024 08:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:45:6c:78:ef:d7:78:cb:15:5e:a3:17:dc:4b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Jan 2 02:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d742aa740dbb88ed73fec8de326cbb70845f5d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c8:dc:6b:a4:85:c8:11:6f:05:f7:84:60:84:
18:52:92:e2:a9:1a:5c:38:41:ef:08:af:69:a5:5d:
df:8f:d7:78:5f:d1:3d:99:05:48:b8:47:b3:31:36:
61:e5:ce:53:c8:92:3e:7b:ba:44:bd:f3:75:34:fd:
fb:60:38:65:94:56:06:c5:c0:dd:03:48:48:10:40:
a8:e3:06:23:54:0f:de:2a:05:1d:5e:10:3f:f4:67:
b1:b2:c9:29:db:ad:9b:40:fc:5f:22:a4:b0:b8:b6:
16:2d:0d:27:c2:00:c8:67:7e:82:ec:f2:d5:19:a3:
e7:35:2f:b7:d2:f6:69:28:c3:45:a9:73:ae:a0:08:
1b:b5:b2:80:d9:6b:82:11:ef:a9:ea:77:c9:53:89:
d2:53:00:e5:8e:7d:e9:98:f2:da:74:e8:11:9e:87:
c9:96:19:61:b8:e2:f7:3a:d7:f3:f1:20:bd:fe:73:
9f:32:2f:a9:b2:f4:2c:4c:33:64:37:07:67:09:d5:
66:ce:85:b4:29:26:7d:6f:0e:d0:e5:41:ab:42:f0:
92:8c:7e:63:20:7c:66:0b:af:09:7c:7d:60:5a:12:
9f:b9:2b:a6:8b:b2:c5:e7:03:b4:cc:7f:b1:5a:ad:
36:f0:15:29:69:a8:af:7f:45:6d:44:3b:d2:a6:83:
9b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:42:AA:74:0D:BB:88:ED:73:FE:C8:DE:32:6C:BB:70:84:5F:5D:31
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/10KqdA27iO1z_sjeMmy7cIRfXTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.220.0/22
185.48.240.0/22
IPv6:
2a00:cc40:1::-2a00:cc40:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
39:57:4d:78:5b:3b:fb:72:d6:21:9c:11:ab:02:22:ef:32:fc:
5c:2b:a4:84:23:7e:5d:2c:ca:2f:d2:44:ee:34:9b:97:b0:5d:
b7:d1:f8:6d:42:87:29:3f:45:b1:0b:00:d1:6d:81:e3:93:e1:
e6:08:07:4f:a3:37:f6:7c:eb:cc:50:92:1f:64:2a:c1:18:5d:
d3:0b:e6:e5:ab:bc:7b:69:ff:b9:f9:65:12:0c:6e:10:31:53:
9e:2e:c0:16:9f:cb:bb:47:a4:8d:e9:c6:75:b8:94:f0:89:72:
ef:01:db:0e:6d:26:b8:89:1d:a9:b9:a3:3c:71:eb:ff:26:80:
45:46:b5:d9:f4:c4:5f:84:6c:6a:23:75:ef:d6:c3:ca:40:5e:
02:13:32:95:83:54:fa:d3:f0:de:70:19:02:bb:4f:e7:60:17:
b9:dc:40:39:51:be:c0:0c:f5:b4:99:b4:9a:33:11:cb:d9:f2:
ba:c2:fb:b9:0d:5e:ae:ea:51:3c:a1:6a:62:8a:86:79:aa:f3:
8e:e0:fe:ac:47:cf:da:6e:36:65:4e:66:76:e2:2c:c1:8d:6c:
c7:ab:0f:42:c4:e0:6b:24:e1:6a:41:eb:c2:cc:39:dd:45:34:
7b:68:5c:e9:ec:a6:fd:df:15:2c:92:27:80:c6:fd:8a:eb:89:
be:91:37:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 11:29:13 2024 by rpki-client on console-ams.rpki-client.org