Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/aefDlg13ytxaiq_l9FmCyPcGpx4.roa
File: aefDlg13ytxaiq_l9FmCyPcGpx4.roa (raw, json)
Hash identifier: WGIHRPGFvQKKW8RCiLbCULBWMjWLvbSlSrCtVksKrmA=
Subject key identifier: 69:E7:C3:96:0D:77:CA:DC:5A:8A:AF:E5:F4:59:82:C8:F7:06:A7:1E
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246D77FB6D920171C28994D0D0E027D
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/aefDlg13ytxaiq_l9FmCyPcGpx4.roa
Signing time: Mon 02 Jan 2023 11:38:43 +0000
ROA not before: Mon 02 Jan 2023 11:38:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47374
IP address blocks: 46.254.129.0/24 maxlen: 24
46.254.128.0/24 maxlen: 24
46.254.131.0/24 maxlen: 24
46.254.130.0/24 maxlen: 24
46.254.128.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:d7:7f:b6:d9:20:17:1c:28:99:4d:0d:0e:02:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69e7c3960d77cadc5a8aafe5f45982c8f706a71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:40:79:a7:1e:d2:38:d2:a6:fa:94:42:05:
07:5c:a4:17:0f:c5:61:b1:e2:bb:36:f1:98:13:61:
97:5d:90:fc:a5:fd:0c:7b:30:38:8f:35:05:6e:4d:
bf:03:ae:09:73:d9:ee:4b:ba:25:47:9f:9e:2f:70:
08:f9:91:30:79:2a:ce:44:0d:55:7f:f0:8a:20:3c:
2b:0c:8c:a9:c9:61:79:59:1e:40:5c:ca:48:b1:6b:
5b:1b:50:f2:e5:ef:1b:5d:24:97:54:43:a6:d7:3f:
ed:f6:f7:21:12:d5:ae:e7:8f:52:71:b9:0e:53:6b:
67:76:2d:37:76:36:77:0e:c8:26:53:9e:d5:d3:b1:
c5:62:9c:67:cf:68:2b:90:95:98:30:e3:71:f4:71:
a2:53:bf:10:b0:97:df:ad:cd:ca:cf:8f:96:50:10:
11:39:a3:a7:34:bf:55:04:a9:1d:fa:7a:79:02:d1:
52:e9:6b:84:27:ab:fb:34:93:2c:83:31:15:db:f4:
fc:ba:6d:db:bd:e1:ee:1a:9e:c8:78:5e:f5:0c:c8:
f6:ed:6d:4b:49:95:cb:a2:f9:db:16:9a:48:ed:ea:
33:6e:8d:b2:50:2e:bd:b3:65:73:68:57:ac:07:21:
4b:f3:41:8c:56:a5:8d:cb:57:76:f3:3a:84:03:b0:
d0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E7:C3:96:0D:77:CA:DC:5A:8A:AF:E5:F4:59:82:C8:F7:06:A7:1E
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/aefDlg13ytxaiq_l9FmCyPcGpx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.128.0/22
Signature Algorithm: sha256WithRSAEncryption
db:3e:01:69:d0:62:f9:5e:ef:82:f7:72:ae:8d:04:64:45:74:
a4:ea:ad:3c:59:85:ba:d3:e2:70:38:21:3f:f1:6f:0e:c6:20:
1a:0b:16:09:6e:fc:8a:d4:75:a8:91:5f:1c:5a:0a:17:37:0e:
92:a6:ff:58:4d:f4:d6:33:8e:6d:e1:48:9b:87:55:c2:1f:5a:
4b:95:73:50:19:3c:a7:85:c2:5e:2c:8c:9a:49:85:74:e3:0a:
37:94:ae:44:45:db:26:8a:8a:c4:d9:84:c5:0e:35:54:54:ec:
7a:d9:41:bd:34:04:ce:7a:68:1a:f7:8c:1e:32:56:0d:bf:3e:
20:c4:5b:bc:5e:b4:a0:b7:c2:ac:11:b4:91:80:d1:aa:d8:f2:
07:89:b5:1c:a2:bb:f2:20:94:fd:cb:c1:19:97:d7:5d:bf:16:
c9:70:23:4d:38:9d:9a:4e:92:c7:1d:aa:e3:e2:f6:ff:c1:d9:
b5:0e:70:71:b9:07:4f:9f:4e:9f:a9:89:e0:f9:0e:11:aa:e3:
41:50:b3:81:59:a7:ef:8a:0b:e2:22:96:bc:8e:d5:03:fe:3a:
25:e7:10:21:c9:f0:26:eb:90:c3:b0:a9:82:b2:16:19:87:19:
52:64:a6:2d:e4:42:db:ca:04:d7:29:65:77:08:8b:17:42:43:
87:7e:09:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org