Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/TqL6wWH-AlJSpgxTpHLnAv5cbTs.roa
File: TqL6wWH-AlJSpgxTpHLnAv5cbTs.roa (raw, json)
Hash identifier: RNxQh5EjNdTH7QE9lSTkGNRcn5jgb2rAHUa9AuKQL1Y=
Subject key identifier: 4E:A2:FA:C1:61:FE:02:52:52:A6:0C:53:A4:72:E7:02:FE:5C:6D:3B
Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Certificate serial: 018BB3E9FA19D403AA43FDC70AD54092A901
Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/TqL6wWH-AlJSpgxTpHLnAv5cbTs.roa
Signing time: Thu 09 Nov 2023 11:48:57 +0000
ROA not before: Thu 09 Nov 2023 11:48:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43987
IP address blocks: 46.49.132.0/24 maxlen: 24
46.49.135.0/24 maxlen: 24
46.49.144.0/24 maxlen: 24
46.49.140.0/24 maxlen: 24
46.49.143.0/24 maxlen: 24
46.49.173.0/24 maxlen: 24
46.49.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Nov 2023 12:11:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b3:e9:fa:19:d4:03:aa:43:fd:c7:0a:d5:40:92:a9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Validity
Not Before: Nov 9 11:48:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ea2fac161fe025252a60c53a472e702fe5c6d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:24:78:ea:81:6e:3c:3d:b7:d9:ff:d1:58:
42:62:ab:50:f1:dd:78:ae:9e:76:f1:67:93:74:66:
cf:c5:68:75:be:d4:b6:a0:ea:73:e4:9c:02:02:f9:
af:cc:85:36:45:e8:4d:36:f7:98:94:1f:c5:17:ee:
c5:19:96:94:5f:bc:b6:09:c7:64:43:a2:89:00:1c:
44:36:ab:1b:3e:e8:24:34:da:6d:29:04:54:a5:fa:
4d:e2:03:60:16:65:8b:bd:0b:a9:85:2d:73:42:9e:
54:f3:4f:ac:b9:45:42:ec:89:07:c2:4c:34:0a:a3:
1e:df:b6:78:9c:77:d8:21:93:38:39:c1:6b:83:c1:
07:cf:14:e5:e3:66:24:2e:de:5a:96:2c:07:b3:7b:
a5:37:70:a4:e5:bb:96:67:b7:0c:5b:9a:70:d8:16:
39:35:10:40:94:a4:07:1b:ef:2c:cf:af:6c:72:8b:
7d:51:a4:07:70:02:dd:85:0f:4a:30:c7:1c:38:dc:
a3:af:d1:18:b7:a3:1c:19:07:90:ea:45:9f:86:e7:
1e:b6:2b:5e:b6:b1:36:25:6c:22:95:16:76:0e:15:
10:2e:c9:c8:ca:8f:93:8a:34:cc:6e:44:70:86:7c:
68:96:82:0a:c9:e1:d7:37:69:6d:39:b4:dc:73:08:
6b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A2:FA:C1:61:FE:02:52:52:A6:0C:53:A4:72:E7:02:FE:5C:6D:3B
X509v3 Authority Key Identifier:
keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/TqL6wWH-AlJSpgxTpHLnAv5cbTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.49.132.0/24
46.49.135.0/24
46.49.140.0/24
46.49.143.0-46.49.144.255
46.49.173.0/24
46.49.210.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:e7:c8:fe:48:cc:bb:12:77:c1:0b:13:b9:6e:c6:20:50:38:
a1:3c:0c:e5:8b:96:b7:90:be:34:1a:76:aa:67:54:a5:ba:ac:
0c:f5:42:4a:a2:e7:4c:4d:82:cf:6e:97:c9:54:7c:82:63:4f:
7b:70:05:23:a9:20:f2:c0:3d:4d:69:39:8a:d3:de:ca:43:9c:
95:b4:d9:df:9e:8b:0c:e2:6e:60:8c:54:6a:c3:45:60:22:28:
fc:a2:9e:a6:69:47:a8:f3:42:c1:78:77:98:49:e5:cc:69:56:
41:45:32:c5:cc:7b:b7:7c:87:68:a8:9c:b8:36:3a:67:bb:ae:
48:6a:2c:84:2d:52:82:c1:5c:b4:09:b4:f0:4a:3d:ee:46:11:
2e:28:ba:09:da:99:a2:a6:07:be:b8:fd:c3:a4:ba:18:91:50:
f5:23:78:22:c5:20:41:70:71:d4:3f:da:be:04:d0:98:fe:9c:
ab:3f:0d:44:46:8a:70:8b:ee:b5:b8:04:91:dd:02:6a:3a:75:
be:60:5a:97:81:51:77:b2:d7:34:87:94:b4:5e:ab:c6:c9:f4:
f1:05:94:06:0d:19:fe:d8:da:4b:9f:f6:77:95:5a:80:36:c2:
85:ff:43:3f:9a:62:91:fd:0c:e3:8c:19:98:dc:1e:83:ae:ab:
ef:b6:82:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:50 2024 by rpki-client on console-ams.rpki-client.org