Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/bA4XiQo5TpSWunKnSAY0V21RGGY.roa
File: bA4XiQo5TpSWunKnSAY0V21RGGY.roa (raw, json)
Hash identifier: TQU7UKcT84BDrO7o5O9hlkMeeh3xkHkYPPCzVkQ2wrk=
Subject key identifier: 6C:0E:17:89:0A:39:4E:94:96:BA:72:A7:48:06:34:57:6D:51:18:66
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 018DF3E5ECAB03AC41EDAC719200169EC53A
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/bA4XiQo5TpSWunKnSAY0V21RGGY.roa
Signing time: Thu 29 Feb 2024 08:05:48 +0000
ROA not before: Thu 29 Feb 2024 08:05:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8932
IP address blocks: 46.162.220.0/22 maxlen: 24
178.78.184.0/21 maxlen: 24
185.48.240.0/22 maxlen: 24
2a00:cc40:1::/48 maxlen: 48
2a00:cc40:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 Feb 2024 13:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f3:e5:ec:ab:03:ac:41:ed:ac:71:92:00:16:9e:c5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Feb 29 08:05:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c0e17890a394e9496ba72a7480634576d511866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6e:f9:6a:3a:3e:7e:4e:f0:82:13:37:0b:65:
22:d5:99:2e:d3:bc:1a:ea:c0:a5:cd:3d:d2:72:6d:
eb:37:b5:6a:df:2e:0c:94:af:cd:ca:47:7d:d1:41:
f6:05:f4:26:2c:b1:8b:08:dc:5f:c3:83:a3:28:b3:
39:c7:f0:d7:ec:39:76:ed:60:bf:71:6d:57:1f:69:
a3:e5:1f:c9:d2:4d:98:e4:1f:04:85:4b:87:d7:f2:
db:1e:ba:b3:cb:da:e4:16:76:e9:17:35:fc:00:00:
bf:ae:37:ff:f1:23:87:9d:ed:e1:70:25:2c:0c:45:
5a:63:89:7c:2a:53:e4:1d:e4:43:9a:a6:99:9e:51:
f6:79:08:e6:b7:39:d4:22:d4:ec:10:e5:9e:62:75:
3a:13:6f:fa:15:96:1b:09:f7:8c:87:bf:87:3d:a8:
d6:f9:2d:2a:60:f1:b8:89:aa:2f:68:10:7d:aa:b8:
2f:00:55:d3:03:99:40:95:44:00:f0:16:0c:d9:7e:
6e:34:01:13:4a:58:72:58:1e:94:20:81:0b:2a:5e:
f3:8e:38:9f:93:dc:ba:1a:9f:b6:88:08:d9:d4:4a:
fb:4a:36:2e:cf:39:67:72:65:30:41:fe:d7:89:75:
df:49:7e:85:a5:af:43:9f:a8:4f:c9:f7:da:3e:3e:
21:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0E:17:89:0A:39:4E:94:96:BA:72:A7:48:06:34:57:6D:51:18:66
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/bA4XiQo5TpSWunKnSAY0V21RGGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.220.0/22
178.78.184.0/21
185.48.240.0/22
IPv6:
2a00:cc40:1::-2a00:cc40:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3e:28:97:03:09:42:d3:4a:b7:30:f0:df:25:5a:84:8e:8e:98:
52:1d:f9:82:2c:f5:01:d9:2d:76:94:dc:e6:c2:13:87:5d:e2:
93:56:6e:ed:03:87:5a:6a:5d:6f:45:6d:22:25:75:d0:d4:80:
78:4f:ad:46:8f:ff:ed:f0:3e:04:0a:70:49:42:ad:69:48:ca:
fc:10:5c:11:46:c3:04:32:27:53:c2:13:53:38:d0:a9:0c:e7:
06:9f:b2:af:a1:7a:f5:e3:da:01:dc:83:fc:6a:b3:15:cb:13:
e5:3e:a7:77:3d:c0:20:e5:63:c2:01:42:0a:8d:cc:62:2f:63:
0c:8b:37:67:d2:42:b2:43:06:0b:ff:1f:c6:c2:56:e9:69:68:
6c:fc:e2:b6:50:03:1b:69:d0:16:01:dd:1d:bc:a9:f0:2d:f2:
8a:5f:7c:4a:c1:b4:f5:af:55:2f:a6:48:2b:86:f7:3c:08:f6:
31:db:be:90:0a:b5:52:ec:b7:34:2d:83:b8:51:87:54:fd:b9:
b7:b2:45:bc:7e:53:cd:96:1c:29:27:91:c0:29:a5:dc:f6:6a:
90:71:2a:38:93:5f:87:a3:85:df:ca:f9:d1:ea:b9:e0:2b:4c:
3a:db:bd:0f:3c:6d:7e:91:ed:68:45:2e:2a:4c:f0:4c:71:70:
e8:59:90:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 16:39:03 2024 by rpki-client on console-ams.rpki-client.org