Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/EgwK3t-0dPheB0oJoPhN4Mf6Z3Q.roa
File: EgwK3t-0dPheB0oJoPhN4Mf6Z3Q.roa (raw, json)
Hash identifier: fui1U32T8pb8HE/E91W2WxXQr48G8qgAdJYSxwSuG3w=
Subject key identifier: 12:0C:0A:DE:DF:B4:74:F8:5E:07:4A:09:A0:F8:4D:E0:C7:FA:67:74
Certificate issuer: /CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Certificate serial: 018572310FEF51B172261FC15C41CEE1D576
Authority key identifier: 29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/EgwK3t-0dPheB0oJoPhN4Mf6Z3Q.roa
Signing time: Mon 02 Jan 2023 11:14:56 +0000
ROA not before: Mon 02 Jan 2023 11:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207456
IP address blocks: 46.149.104.0/24 maxlen: 24
193.23.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:31:0f:ef:51:b1:72:26:1f:c1:5c:41:ce:e1:d5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Validity
Not Before: Jan 2 11:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=120c0adedfb474f85e074a09a0f84de0c7fa6774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:58:5b:52:ae:a2:89:8f:c2:7c:10:29:a7:26:
b4:bf:4f:a3:f6:5c:10:02:a0:b6:30:b1:05:9c:fc:
64:e3:10:a2:88:fa:1c:2a:0f:7b:31:9f:d1:5e:7b:
dc:ee:5a:77:b3:7b:64:5c:9c:f5:0b:25:1e:4c:e5:
3a:4e:d1:50:ef:15:a5:2b:31:f6:bc:6a:f1:3c:e0:
52:4b:a5:36:a3:16:69:22:92:e9:ca:b8:f6:89:f4:
8d:9d:f7:fa:70:a6:e6:c3:6d:91:03:4d:f7:03:ac:
80:82:20:d5:c3:34:1f:56:aa:72:5f:9f:47:71:b8:
79:28:78:f0:a2:ee:95:68:ef:28:73:63:0c:ee:a9:
80:df:ac:45:23:9d:72:b8:6c:63:19:e5:fa:74:40:
30:ac:72:0d:03:22:a5:5d:62:d8:d2:31:c2:40:a7:
63:19:52:e9:d2:6e:da:fd:e7:f3:24:a7:e0:28:6e:
4d:2d:fa:e2:8b:6b:00:c7:6e:fa:4a:8f:27:89:22:
ff:3b:af:8c:c3:99:11:60:c9:be:d2:08:9c:53:6a:
10:43:35:4c:57:84:9d:dc:6b:19:ff:a6:ec:00:2b:
0b:57:b6:5e:7e:62:43:eb:96:71:ff:2b:14:67:a1:
2a:96:0a:65:ac:72:8f:9e:f1:04:5e:86:1a:5b:c0:
ab:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0C:0A:DE:DF:B4:74:F8:5E:07:4A:09:A0:F8:4D:E0:C7:FA:67:74
X509v3 Authority Key Identifier:
keyid:29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/EgwK3t-0dPheB0oJoPhN4Mf6Z3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.104.0/24
193.23.133.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:10:f2:b1:d9:94:a5:fc:15:30:87:fa:21:d6:a6:40:10:78:
f9:0f:3d:29:55:22:c3:55:9a:98:62:12:09:09:9c:5d:cd:5e:
dd:40:09:eb:9c:d0:ca:8a:7e:02:d1:f3:f0:aa:5d:de:02:87:
f0:68:c1:b9:45:bd:d7:5a:9a:98:3f:68:cb:81:49:b4:02:34:
f2:6f:c5:ca:62:77:37:4c:c0:68:38:77:ef:c6:98:d2:54:34:
ee:ef:cd:4a:1d:e2:ef:13:ae:bf:5e:50:bd:57:95:53:c5:51:
2c:23:d9:48:38:c8:17:51:8d:04:15:58:ad:ba:a6:90:c9:47:
e5:d4:34:e8:69:32:3e:73:7f:ca:99:f6:ac:6c:c7:e6:80:fc:
30:86:d1:cd:e0:d7:80:1a:95:64:a8:00:4d:ce:ff:fe:90:09:
c9:4a:52:ff:84:9d:7f:28:f0:4f:5e:4a:ba:4e:b0:19:75:cc:
b5:b9:19:fe:50:04:1a:0a:78:d4:fb:bc:9e:be:1f:27:02:0a:
2b:e8:44:d4:c5:e0:b3:81:75:fb:ac:5a:d1:24:28:b4:72:9c:
9c:64:66:d7:a9:bf:d6:72:6a:06:a1:79:b2:d8:f4:31:b1:66:
a1:93:38:1c:70:9b:37:19:3b:81:ce:a1:33:b2:3d:0c:b7:b1:
4c:2d:5e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:39 2024 by rpki-client on console-ams.rpki-client.org