Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/Ebf3xJpi7VppJIyCKUbs09MPt4o.roa
File: Ebf3xJpi7VppJIyCKUbs09MPt4o.roa (raw, json)
Hash identifier: 4OQT6+JGsFLy8B+aLOtHjs6ZQBvq8uzG+D1XHV8WnyA=
Subject key identifier: 11:B7:F7:C4:9A:62:ED:5A:69:24:8C:82:29:46:EC:D3:D3:0F:B7:8A
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 018DF50BCEC8D1ED57CCC312BF29A09A1A31
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/Ebf3xJpi7VppJIyCKUbs09MPt4o.roa
Signing time: Thu 29 Feb 2024 13:26:48 +0000
ROA not before: Thu 29 Feb 2024 13:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8932
IP address blocks: 46.162.220.0/22 maxlen: 24
185.48.240.0/22 maxlen: 24
2a00:cc40:1::/48 maxlen: 48
2a00:cc40:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 03 Mar 2024 16:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f5:0b:ce:c8:d1:ed:57:cc:c3:12:bf:29:a0:9a:1a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Feb 29 13:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11b7f7c49a62ed5a69248c822946ecd3d30fb78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:47:1a:c3:f8:7c:9b:08:95:84:07:39:75:
d6:ff:ff:56:eb:49:06:a8:da:a8:b4:64:bc:c6:9f:
ee:58:c0:13:1b:15:19:da:13:e6:64:4d:0e:f1:99:
03:4b:db:7a:65:20:ae:a4:7d:cb:d8:75:dd:f7:b7:
9f:db:79:43:74:aa:75:17:df:23:fe:9a:62:78:8d:
c4:97:81:f2:61:0d:49:a7:ed:68:73:24:d9:12:40:
7e:c5:11:e2:ac:1b:3d:dc:48:42:b7:f2:a1:18:5e:
dd:b2:3b:d6:ac:38:99:cb:91:4a:76:1b:7f:bb:93:
2a:c2:53:35:15:e6:7d:8a:7f:14:9f:92:b2:ad:c4:
1c:11:5d:fb:c6:a7:05:d5:7b:29:42:cb:3c:69:e4:
88:fa:34:87:37:2d:ee:97:0f:09:35:ea:e1:5f:a3:
28:eb:67:09:c6:a8:62:e6:66:15:1e:79:80:2d:b4:
f6:67:18:77:f6:2a:4b:f7:9e:dd:c5:04:d0:64:29:
39:eb:b2:23:d0:3d:42:75:ec:4b:18:13:db:a2:33:
fc:7d:29:a6:93:02:98:16:dd:34:c3:84:46:f7:da:
86:3b:6d:96:02:7d:b1:f6:0a:75:c1:7a:88:77:66:
99:02:04:cf:a5:d7:06:5c:8e:9f:ff:5a:e9:62:28:
e5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B7:F7:C4:9A:62:ED:5A:69:24:8C:82:29:46:EC:D3:D3:0F:B7:8A
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/Ebf3xJpi7VppJIyCKUbs09MPt4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.220.0/22
185.48.240.0/22
IPv6:
2a00:cc40:1::-2a00:cc40:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
34:0d:3c:4f:1c:85:df:e5:01:51:14:13:17:d8:e1:b6:a4:6f:
20:ac:e7:67:59:d6:e9:b9:fb:b4:60:89:75:8a:84:bb:b6:70:
3f:97:d9:f8:7f:6f:67:51:ca:f8:69:bc:9e:85:66:1e:12:93:
24:10:e5:e8:d4:e8:1c:57:ff:66:d9:75:f6:5e:f6:ff:72:32:
14:ac:36:46:20:75:3f:6f:1d:4c:13:9f:ff:70:74:4a:6c:14:
d1:0b:5d:bc:64:95:33:00:ab:18:9e:58:5a:45:3e:28:e4:54:
63:4e:fb:59:ae:7d:ff:dc:f2:11:13:87:46:b6:aa:7e:85:bd:
b6:b8:0c:bd:0a:54:35:47:56:7f:d2:8b:38:b1:83:1d:81:50:
35:c2:79:06:df:5f:bb:ae:15:a5:2f:9b:0f:c7:b3:5b:87:d4:
9d:a2:1d:bb:b4:e7:e8:ad:46:bd:65:dd:a4:59:7d:17:58:96:
67:03:c2:9b:54:fe:c4:4d:ad:d9:3a:7c:5e:92:b6:c9:4f:90:
a6:cd:8e:b2:65:ed:fe:1f:58:f4:ae:6b:b9:89:e6:a1:45:e1:
d7:6a:cd:b8:99:85:6e:e0:b0:39:4b:24:68:2e:92:dc:55:dc:
3f:ee:a8:0d:4d:c1:34:2e:6d:66:eb:43:f4:9c:da:a1:20:2e:
e6:c5:ba:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:54 2025 by rpki-client