Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/n30NEqvImL-FylDeJ9KjMWdZwSE.roa
File: n30NEqvImL-FylDeJ9KjMWdZwSE.roa (raw, json)
Hash identifier: Kr4b21rxEgCPgeisZdJax4L9zxnEMFZNn5nCcdVP9Mo=
Subject key identifier: 9F:7D:0D:12:AB:C8:98:BF:85:CA:50:DE:27:D2:A3:31:67:59:C1:21
Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial: 018C5BECAB0FAABF3C7F4D58821554398713
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/n30NEqvImL-FylDeJ9KjMWdZwSE.roa
Signing time: Tue 12 Dec 2023 02:48:06 +0000
ROA not before: Tue 12 Dec 2023 02:48:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211309
IP address blocks: 46.227.152.0/21 maxlen: 21
185.190.36.0/24 maxlen: 24
185.176.245.0/24 maxlen: 24
185.176.244.0/23 maxlen: 23
2a0a:2780::/31 maxlen: 31
2a0a:2781::/32 maxlen: 32
2a0a:2780::/32 maxlen: 32
2a10:d640::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5b:ec:ab:0f:aa:bf:3c:7f:4d:58:82:15:54:39:87:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Validity
Not Before: Dec 12 02:48:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f7d0d12abc898bf85ca50de27d2a3316759c121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5d:2e:72:52:f8:4f:4c:7e:bf:8c:68:00:6a:
af:88:1e:41:c3:a5:39:78:e1:9b:b6:dd:0d:6b:26:
bb:a7:8f:09:de:36:0c:28:cf:4f:6e:14:85:95:fd:
ca:85:95:2d:e4:a2:b7:ff:3d:fc:ad:91:56:44:e8:
c6:97:37:5f:61:8f:3d:a7:96:46:bd:68:ef:43:37:
30:09:d7:a8:4d:f2:fe:e8:02:e4:c6:ef:1d:1a:dd:
6c:bc:8a:d9:ce:48:2a:0a:00:ba:66:bc:2e:34:29:
3f:ca:bb:9a:d0:b6:2b:fa:c5:3c:1a:cf:53:ac:9e:
ff:47:5c:e2:c8:30:de:ac:37:fe:17:47:d9:cd:fe:
19:fe:83:80:cb:4f:88:23:57:26:04:f4:1d:e7:1e:
c4:6c:fb:cd:81:e0:2c:e0:8b:ac:d6:49:34:a0:0d:
da:39:62:88:ef:e2:23:fd:8e:c9:7a:77:1f:9e:04:
3f:2d:e5:b6:57:05:ff:a7:ce:02:43:07:7f:42:1b:
9c:9a:c4:b6:6c:b5:4c:5e:84:e1:90:c7:73:0d:6f:
0c:54:4c:c4:d5:a8:fe:02:36:73:06:61:38:c8:20:
72:83:eb:f9:06:64:ad:e2:42:87:20:b2:3c:d8:d9:
c4:9a:27:ab:71:a1:8e:cc:72:5c:3c:19:d6:1a:d8:
a9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7D:0D:12:AB:C8:98:BF:85:CA:50:DE:27:D2:A3:31:67:59:C1:21
X509v3 Authority Key Identifier:
keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/n30NEqvImL-FylDeJ9KjMWdZwSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.152.0/21
185.176.244.0/23
185.190.36.0/24
IPv6:
2a0a:2780::/31
2a10:d640::/29
Signature Algorithm: sha256WithRSAEncryption
5b:a4:3c:9f:98:2d:37:56:a6:76:39:55:77:ef:bb:e3:fc:5d:
05:2a:36:57:85:89:dd:af:94:27:17:16:1a:a6:b6:aa:6b:17:
b3:27:96:c2:b7:85:52:2a:fc:02:be:ff:26:fd:0a:38:c3:a2:
28:d7:37:f6:89:0d:e2:81:97:e4:f9:ab:33:31:e5:4a:92:2b:
0a:0d:2d:ab:fe:cd:5b:99:e3:5d:75:94:63:ff:36:30:bf:71:
12:6f:5b:f9:75:70:0f:6c:f5:a2:8f:a4:fc:d4:e3:64:8d:dc:
54:9d:58:af:31:f2:89:22:23:2d:78:ba:58:25:7a:3d:36:c5:
9d:9c:02:40:c7:b0:24:1e:6a:b0:91:47:19:f5:1e:ed:69:61:
ef:91:36:99:e7:6b:76:b5:08:7e:cc:f6:10:07:78:2e:0f:5d:
de:81:23:87:f4:8d:89:4f:93:c0:64:0f:03:31:90:43:50:0d:
99:af:69:f6:b6:86:28:dc:af:c6:36:49:a8:f8:d0:bb:56:22:
b5:c4:cd:ec:dc:8a:1b:c9:3e:10:ef:f8:46:90:61:87:40:8c:
2d:07:96:23:d1:02:f6:22:2e:d8:a0:76:94:60:0e:3d:3a:bc:
e5:df:55:2b:31:83:eb:22:76:00:d8:b7:23:6b:82:e3:6d:fa:
c1:93:87:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:09 2024 by rpki-client on console-fra.rpki-client.org