Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/nUeibIY-9hsowYNdTNyTGVhsCwI.roa
File: nUeibIY-9hsowYNdTNyTGVhsCwI.roa (raw, json)
Hash identifier: d6THxGOwD9wi7qLJjzxS4jIeAUooz/oY85eosvtegEY=
Subject key identifier: 9D:47:A2:6C:86:3E:F6:1B:28:C1:83:5D:4C:DC:93:19:58:6C:0B:02
Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial: 018C49939FF2A38D60E7B7F3B5E93ECB19A1
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/nUeibIY-9hsowYNdTNyTGVhsCwI.roa
Signing time: Fri 08 Dec 2023 13:17:40 +0000
ROA not before: Fri 08 Dec 2023 13:17:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206774
IP address blocks: 46.227.152.0/21 maxlen: 21
185.176.244.0/23 maxlen: 23
185.176.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:49:93:9f:f2:a3:8d:60:e7:b7:f3:b5:e9:3e:cb:19:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Validity
Not Before: Dec 8 13:17:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d47a26c863ef61b28c1835d4cdc9319586c0b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cd:57:15:89:f0:62:fa:b4:85:2b:1a:55:d8:
04:40:1d:9b:dc:78:ff:ec:35:99:98:6c:ea:1e:82:
7f:91:2e:25:f4:a5:c3:c9:7c:0e:b7:e1:08:ba:90:
df:33:ac:67:b3:76:7b:88:0d:7d:e9:77:1e:14:d1:
c7:9d:59:49:1d:9d:ee:be:01:f4:53:ab:fe:c2:04:
e1:9c:ec:37:bb:0f:00:d8:90:01:d6:24:64:ee:06:
ea:88:23:c3:35:0a:e6:d0:32:5e:bb:c4:4f:39:38:
14:ce:70:3d:dd:2e:b9:47:ff:50:93:06:77:34:c5:
80:44:9e:f0:e2:c3:eb:5d:51:b6:68:8f:da:1d:08:
59:43:71:3f:7c:dc:e2:d3:c8:7d:74:66:72:fe:bc:
ee:a1:af:f3:d4:26:c1:7c:70:32:3a:83:62:93:60:
9e:04:c4:a2:0b:06:f6:3d:4f:86:5c:bc:96:ce:aa:
65:79:90:f7:58:e0:42:f4:17:44:6c:35:1d:05:be:
9f:80:7c:02:76:5b:c0:55:7c:80:c5:ce:34:c7:90:
a8:36:c2:c1:2d:46:90:42:96:00:2c:20:08:58:f6:
5a:f2:8d:bf:ef:a3:fb:95:73:7f:fc:bb:c6:2b:70:
e2:67:ca:fa:5a:b0:9c:7b:63:a1:b1:54:2d:6c:33:
77:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:47:A2:6C:86:3E:F6:1B:28:C1:83:5D:4C:DC:93:19:58:6C:0B:02
X509v3 Authority Key Identifier:
keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/nUeibIY-9hsowYNdTNyTGVhsCwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.152.0/21
185.176.244.0/23
Signature Algorithm: sha256WithRSAEncryption
65:10:4b:25:c5:b3:3d:fa:94:05:8e:a7:bf:23:5a:79:06:7c:
82:9d:90:02:27:55:8e:ca:65:e3:06:88:70:90:55:ba:1e:73:
87:70:d8:8f:8d:43:da:24:55:3a:e4:d9:d1:70:71:4c:30:53:
2f:c0:ec:3f:35:ee:25:68:03:4c:c7:6b:93:f0:66:db:13:e1:
12:88:64:75:90:10:7c:08:eb:f0:fa:ed:69:b4:3a:a3:ae:c7:
39:c8:68:9f:3b:46:90:fd:27:ca:6e:34:ad:5f:03:c9:f6:86:
54:43:25:cd:c3:9c:5a:a0:c6:28:7b:c5:a5:03:ff:ec:08:a6:
53:a3:02:4b:41:69:0d:2a:6c:39:5a:70:60:28:9a:a8:8b:35:
cd:71:a8:83:da:0a:0d:dc:f2:50:c2:d2:58:77:5d:e5:39:b0:
44:21:b2:4e:e9:cd:11:97:7f:ea:b8:7b:72:b5:b2:35:2d:e4:
89:4e:73:b4:fa:0d:9a:77:68:8f:da:4c:b9:56:1c:eb:1a:4a:
d3:70:32:c7:e0:ea:9f:ea:77:0a:19:bd:7b:02:fb:cb:bb:95:
db:c5:0e:ea:90:b7:ea:9c:b6:d6:f8:f3:87:d7:f1:b5:3a:23:
a1:ad:be:87:b5:14:33:21:41:68:6a:95:33:d7:78:9d:46:21:
d7:64:bb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:28 2024 by rpki-client on console-ams.rpki-client.org