Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/FjQ2XAPl8lFrJEuQTd8lATTHPkg.roa
File: FjQ2XAPl8lFrJEuQTd8lATTHPkg.roa (raw, json)
Hash identifier: q+ViPMTxvUZNMPKMDlJGVS9TE3D6nJFOZatyN113ftY=
Subject key identifier: 16:34:36:5C:03:E5:F2:51:6B:24:4B:90:4D:DF:25:01:34:C7:3E:48
Certificate issuer: /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial: 0185BAAB393BBC4E8C9DE95237179A27F483
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/FjQ2XAPl8lFrJEuQTd8lATTHPkg.roa
Signing time: Mon 16 Jan 2023 13:01:01 +0000
ROA not before: Mon 16 Jan 2023 13:01:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29470
IP address blocks: 87.245.192.0/20 maxlen: 20
46.46.160.0/20 maxlen: 20
46.46.176.0/21 maxlen: 21
46.46.184.0/22 maxlen: 22
46.46.128.0/19 maxlen: 19
46.46.128.0/18 maxlen: 18
2a02:24b0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ba:ab:39:3b:bc:4e:8c:9d:e9:52:37:17:9a:27:f4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
Validity
Not Before: Jan 16 13:01:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1634365c03e5f2516b244b904ddf250134c73e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d8:77:f6:0c:76:41:ef:91:3c:65:66:d8:7a:
ad:44:45:96:aa:05:79:6e:0d:0a:d2:c7:d9:37:cc:
72:d3:14:91:b5:8a:6d:e4:9e:75:cb:fb:38:eb:f0:
03:5d:b2:28:ed:39:ba:85:6f:d2:e8:aa:9a:9a:ea:
fe:54:a5:14:15:1d:14:81:35:39:aa:19:ce:b2:b0:
2e:e9:7d:c0:94:6f:12:0e:24:9b:12:33:41:47:4e:
2f:2d:16:d4:83:58:cd:e7:ca:82:66:57:45:d3:2a:
33:ac:06:ed:72:80:27:51:cd:df:a4:9e:cc:02:2a:
bb:ea:52:0a:29:8e:05:4d:e8:80:71:ea:55:4d:cd:
76:23:a2:7e:69:cc:75:01:bb:ab:2c:dd:3c:03:40:
2f:a5:7f:6c:5c:af:cc:0b:04:ed:53:44:1b:d9:15:
f7:77:d4:d3:8d:48:0c:20:c1:2b:60:6e:1e:6b:79:
5f:6d:82:19:f5:06:67:b9:0d:c9:5c:2f:0b:e5:17:
b9:46:3f:83:8f:cb:84:2a:be:db:28:b8:0c:71:22:
30:28:a0:ec:f0:28:47:03:a2:07:80:f6:92:96:75:
eb:19:53:2d:05:62:e0:52:e7:68:09:ca:76:1d:e7:
66:0f:51:17:64:40:fa:a6:97:d1:15:f4:5e:8d:b3:
b0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:34:36:5C:03:E5:F2:51:6B:24:4B:90:4D:DF:25:01:34:C7:3E:48
X509v3 Authority Key Identifier:
keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/FjQ2XAPl8lFrJEuQTd8lATTHPkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.46.128.0/18
87.245.192.0/20
IPv6:
2a02:24b0::/32
Signature Algorithm: sha256WithRSAEncryption
50:e6:52:f9:39:3b:ff:d6:93:b4:f9:e6:45:1c:2a:02:6a:69:
f4:2d:77:e4:7d:59:74:83:53:48:f5:ff:e8:55:e8:6c:2d:db:
b4:33:ab:0f:31:f9:20:28:7d:d0:2b:34:9e:99:54:2f:b2:36:
80:9b:89:90:ac:be:43:21:f7:e1:04:b0:6b:ae:07:d5:df:83:
1e:04:cc:7c:56:f6:25:8c:92:b0:83:93:6b:e3:a2:ba:e8:23:
6d:16:a4:47:b7:ea:3e:51:6e:9d:d0:e6:db:7c:47:82:5b:dc:
44:68:1a:61:aa:3f:47:83:d8:ad:1f:db:42:a7:bf:d4:a1:25:
94:60:b1:8e:62:5b:35:e4:f1:91:32:59:2d:c7:d6:81:c1:e4:
e5:5d:af:9c:96:5f:06:80:30:f1:4a:53:68:71:aa:83:10:c6:
7e:00:e9:c0:af:7b:c4:d0:f4:3e:07:cd:07:2c:42:01:7d:58:
12:4a:89:43:10:ba:5d:cd:58:d4:4b:74:41:ec:20:a9:d9:84:
f2:a4:b8:e2:c0:66:88:83:d6:15:8f:b0:e5:08:b9:65:7c:ff:
8c:4e:e5:33:65:e5:6f:c0:35:9d:38:da:4a:b8:10:21:0a:76:
60:16:a7:5a:8e:47:cd:86:3f:59:c9:63:28:8d:29:8c:2d:75:
0f:4f:29:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:37 2023 by rpki-client on console-fra.rpki-client.org