Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/Aho_E00YwJ2hl6VJ7YwEUrJvyIw.roa
File: Aho_E00YwJ2hl6VJ7YwEUrJvyIw.roa (raw, json)
Hash identifier: A0IZqFgXWZBF5M3hFtTJkA2ueRVqR+f+/1Ikea0xrak=
Subject key identifier: 02:1A:3F:13:4D:18:C0:9D:A1:97:A5:49:ED:8C:04:52:B2:6F:C8:8C
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 0185718C150C7E7DAD9793431A285886B2BC
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/Aho_E00YwJ2hl6VJ7YwEUrJvyIw.roa
Signing time: Mon 02 Jan 2023 08:14:43 +0000
ROA not before: Mon 02 Jan 2023 08:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207381
IP address blocks: 89.47.200.0/22 maxlen: 24
89.42.196.0/22 maxlen: 24
92.114.49.0/24 maxlen: 24
92.114.48.0/24 maxlen: 24
46.34.161.0/24 maxlen: 24
46.34.160.0/24 maxlen: 24
46.34.160.0/22 maxlen: 24
46.34.163.0/24 maxlen: 24
46.34.162.0/24 maxlen: 24
89.47.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 May 2023 11:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:15:0c:7e:7d:ad:97:93:43:1a:28:58:86:b2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Jan 2 08:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=021a3f134d18c09da197a549ed8c0452b26fc88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fd:23:f3:e6:47:ee:76:a5:21:29:26:0f:e4:
d4:e2:51:3d:fa:86:9c:46:c5:06:44:c0:b0:b8:c6:
a4:f5:e4:32:b9:ff:2a:f6:00:cb:4f:3f:cc:09:33:
fd:0b:0a:52:f2:fd:1d:92:df:48:61:c0:75:23:cd:
7f:00:1c:98:00:16:d4:01:e9:c8:b6:5e:67:08:ec:
45:81:3c:2c:5b:25:7c:97:c0:93:f1:d8:58:c5:90:
e6:7a:d3:ce:22:62:ed:ea:cc:22:ab:3f:04:44:ef:
26:cf:f3:58:b7:71:3c:77:93:e9:31:ff:20:4e:8c:
7e:6e:e0:72:59:75:35:e6:de:81:b6:cf:81:9c:39:
7b:2e:36:19:4b:2b:6c:36:fa:40:75:53:a4:e5:b4:
f2:61:35:26:a8:3b:28:9a:15:bb:42:b3:69:0c:95:
b8:37:9b:93:89:64:13:12:f5:8a:fe:57:0e:2a:a8:
43:5f:06:4e:71:86:ee:86:4f:13:76:ad:33:ce:7c:
0b:a4:55:f1:aa:bd:b4:e1:1a:e0:b1:a7:ec:55:32:
8c:8a:79:43:10:78:ec:68:2b:48:93:63:46:ca:b7:
5a:95:79:94:7f:f0:a5:af:17:1a:ed:f6:3a:a9:7b:
ef:7a:5a:57:80:c0:75:ee:99:49:fb:e7:1b:1c:50:
bc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1A:3F:13:4D:18:C0:9D:A1:97:A5:49:ED:8C:04:52:B2:6F:C8:8C
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/Aho_E00YwJ2hl6VJ7YwEUrJvyIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.160.0/22
89.42.196.0/22
89.47.196.0-89.47.203.255
92.114.48.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:b8:79:22:75:a8:4c:9b:fb:33:b7:a8:f6:36:80:87:47:fc:
af:ef:aa:d5:57:15:e1:b0:c1:b1:8f:0f:f0:42:55:6d:f0:1c:
6c:84:56:9f:ad:49:a5:8b:ef:45:3f:38:db:14:0f:70:9a:03:
07:34:c6:ae:f9:f0:4c:17:7b:f5:89:aa:ea:6a:5d:f6:34:94:
8d:ff:75:8e:b4:a8:e1:f5:3a:9f:5e:0e:8c:36:ce:b7:b1:18:
20:99:44:fc:36:3f:74:a1:93:c2:aa:6d:34:06:d3:c2:ce:41:
60:0b:73:99:00:ee:ef:53:3a:4b:b9:3c:88:8a:e5:fd:c2:4d:
34:98:12:2a:3b:db:4f:47:c3:dd:c9:7f:10:01:bb:ae:c4:06:
dd:6c:e8:8e:ff:67:05:0b:8e:11:29:13:e9:18:f1:92:56:f4:
fa:eb:7a:60:c6:02:ad:93:96:8d:f3:73:fe:b8:ba:1f:d1:6b:
00:2f:48:6c:3c:72:cb:c9:e5:42:f7:74:21:95:a2:ef:77:55:
e2:75:a9:27:28:0e:6c:4c:6e:ea:c5:81:32:00:49:ab:71:f2:
6b:af:74:d3:59:e9:ca:80:dc:db:e6:c1:9b:39:e5:ca:3d:d2:
8d:05:68:1a:3b:62:2a:80:bd:97:ba:aa:19:e9:52:ad:3f:fc:
fb:66:ae:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:27 2024 by rpki-client on console-ams.rpki-client.org