Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/y1xXhGOaS7DlixdfWxK6qeJgiGc.roa
File: y1xXhGOaS7DlixdfWxK6qeJgiGc.roa (raw, json)
Hash identifier: ILiBsgEEU2b54iYTXAj3ixAHGu9vDYhf43Muc3XzMSc=
Subject key identifier: CB:5C:57:84:63:9A:4B:B0:E5:8B:17:5F:5B:12:BA:A9:E2:60:88:67
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 018CC5DC009B20B1E7A709B09F2E2A4B3A39
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/y1xXhGOaS7DlixdfWxK6qeJgiGc.roa
Signing time: Mon 01 Jan 2024 16:29:38 +0000
ROA not before: Mon 01 Jan 2024 16:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202391
IP address blocks: 46.34.160.0/22 maxlen: 24
89.47.201.0/24 maxlen: 24
89.47.200.0/24 maxlen: 24
89.47.202.0/24 maxlen: 24
89.42.196.0/24 maxlen: 24
89.42.136.0/22 maxlen: 24
92.114.51.0/24 maxlen: 24
92.114.48.0/24 maxlen: 24
92.114.50.0/24 maxlen: 24
92.114.49.0/24 maxlen: 24
89.47.196.0/22 maxlen: 24
89.47.197.0/24 maxlen: 24
89.47.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 12:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:00:9b:20:b1:e7:a7:09:b0:9f:2e:2a:4b:3a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Jan 1 16:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb5c5784639a4bb0e58b175f5b12baa9e2608867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:42:f8:57:ca:44:91:90:10:a5:6b:ac:a3:79:
17:6c:bf:7e:2a:8c:e4:00:02:7a:b8:c0:38:8c:df:
ba:55:dd:13:d6:59:de:95:ab:91:59:c8:ea:92:f1:
99:d0:cf:34:ca:97:bb:1d:9a:16:cc:25:90:b2:2a:
05:12:b2:81:d1:c8:e2:81:33:d2:75:5b:42:30:af:
52:b2:0e:82:ee:d6:44:14:7d:82:a9:02:96:d2:69:
42:22:a3:42:21:34:3d:ea:df:23:ce:2d:7c:0d:6a:
52:bf:4a:40:32:a4:74:39:60:f5:8e:09:a3:fe:4f:
3f:96:4b:c5:ee:fb:0b:09:d4:ef:5f:af:f5:cd:9c:
f5:39:82:f8:f9:4c:50:52:fb:56:0d:32:0d:f8:77:
98:f4:6f:3b:78:0c:4f:a7:1a:a0:d0:fa:7a:fb:6a:
64:b7:13:40:bb:9c:cc:4e:88:05:cb:c2:31:b8:49:
cf:14:08:10:df:ad:60:d6:db:01:55:ef:fb:dd:2a:
71:40:ef:d9:c6:83:7f:c6:6f:e0:46:0e:b4:fd:b9:
29:de:0f:0c:0a:e4:a9:f4:b8:54:a3:ae:79:c6:03:
24:7a:4e:77:e4:68:ad:48:a8:ee:23:f0:32:5a:bf:
80:ce:e6:f9:a5:9f:ba:02:e9:6d:b0:13:f8:f6:75:
74:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5C:57:84:63:9A:4B:B0:E5:8B:17:5F:5B:12:BA:A9:E2:60:88:67
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/y1xXhGOaS7DlixdfWxK6qeJgiGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.160.0/22
89.42.136.0/22
89.42.196.0/24
89.47.196.0-89.47.202.255
92.114.48.0/22
Signature Algorithm: sha256WithRSAEncryption
56:7e:14:22:fd:5d:f7:64:bc:3c:34:aa:ba:6d:fe:c2:e7:f0:
6b:f0:a1:60:33:90:74:87:77:2c:68:25:70:66:27:b4:5e:50:
eb:6d:e3:82:15:05:ba:85:e9:0d:bc:97:f0:d9:0c:3e:44:5a:
10:03:62:d2:07:2b:e9:ed:6e:94:fa:32:fe:99:a2:a1:57:a3:
2a:32:d4:79:1b:82:5a:3e:ee:53:98:ea:41:b0:c9:4d:e6:f3:
74:fb:3b:2d:91:07:dd:42:4a:7d:07:e2:8f:38:53:f8:7b:d0:
d8:d7:99:86:62:78:b6:e0:9d:58:88:a0:87:65:a9:d9:56:5b:
4b:1a:a0:00:bf:a7:cd:87:3d:cd:49:75:f8:5a:b3:0e:78:48:
79:37:e9:d6:ef:d3:3f:a0:ea:ec:0c:8a:c0:a2:94:4a:8e:9f:
14:30:e3:95:36:92:e1:4f:83:06:ce:55:e4:cf:6e:15:21:db:
eb:c4:d1:ec:35:80:09:be:4f:13:7e:82:cd:93:97:3e:90:b6:
94:55:0b:6e:ae:d1:2d:60:99:84:d5:85:f5:8f:03:ff:72:b2:
c0:fb:d2:0e:4c:de:b6:4f:b5:4c:16:5c:8e:58:55:04:ca:eb:
95:cb:f5:63:b5:1f:bf:65:1e:4d:b1:12:24:8e:5f:d0:e9:70:
97:45:df:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:53 2024 by rpki-client on console-fra.rpki-client.org