Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/1-THpjfJxsbf_6SOKbkTp0OCINJU.roa
File: 1-THpjfJxsbf_6SOKbkTp0OCINJU.roa (raw, json)
Hash identifier: BJxdziIxqrlJuBsMkpLVlGlJ6SWaOsfQxmotfjANPgI=
Subject key identifier: F9:31:E9:8D:F2:71:B1:B7:FF:E9:23:8A:6E:44:E9:D0:E0:88:34:95
Certificate issuer: /CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Certificate serial: 018C91C94E054E2A3D604173BC8CC0FD9F28
Authority key identifier: CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/1-THpjfJxsbf_6SOKbkTp0OCINJU.roa
Signing time: Fri 22 Dec 2023 13:48:58 +0000
ROA not before: Fri 22 Dec 2023 13:48:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57866
IP address blocks: 46.226.126.0/24 maxlen: 24
2a11:7b80::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:91:c9:4e:05:4e:2a:3d:60:41:73:bc:8c:c0:fd:9f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Validity
Not Before: Dec 22 13:48:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f931e98df271b1b7ffe9238a6e44e9d0e0883495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:19:3a:46:c1:91:dd:9a:4d:f3:22:47:0c:70:
2d:1b:2a:19:c0:1b:b0:1e:22:61:41:c0:7a:50:6a:
94:d5:0f:cc:a8:58:08:b8:52:4b:2d:33:ea:78:06:
11:9a:63:a2:89:ca:4f:71:66:7e:c9:bb:6c:37:17:
36:b8:7c:cb:48:76:3f:9a:17:be:66:1a:f2:97:a5:
b6:81:44:ef:e8:8b:87:fc:5b:e3:b1:64:4e:36:49:
a5:37:c6:b8:99:94:01:36:ad:0f:92:59:77:eb:30:
6b:f2:47:70:55:05:f3:86:b9:82:6b:19:be:e7:25:
fb:67:2c:b5:09:af:c5:38:fa:f6:94:69:46:99:98:
73:26:bb:37:06:8a:28:bb:5c:c1:79:31:ed:c6:a4:
2f:3c:c7:38:6c:cd:b5:a2:d1:5e:5a:78:4a:9c:d3:
c2:07:b0:a5:08:f9:36:81:d4:22:be:ef:4c:69:5e:
c6:f0:b3:eb:5f:9f:c7:1e:ba:95:20:2c:db:60:31:
6c:4a:dd:ef:df:c3:de:ba:65:14:59:e9:30:82:c5:
3e:c6:ec:27:d3:5a:55:da:44:4c:7d:c8:a6:87:ce:
73:8d:4d:4a:a1:06:12:08:c9:c6:bc:c6:df:14:e7:
e6:58:ca:f5:b9:b3:7a:60:dd:0d:77:29:5e:b4:8c:
11:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:31:E9:8D:F2:71:B1:B7:FF:E9:23:8A:6E:44:E9:D0:E0:88:34:95
X509v3 Authority Key Identifier:
keyid:CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/1-THpjfJxsbf_6SOKbkTp0OCINJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.126.0/24
IPv6:
2a11:7b80::/29
Signature Algorithm: sha256WithRSAEncryption
12:be:17:e5:79:6e:71:5d:1a:fe:a2:7d:81:ea:6b:78:80:56:
57:02:e3:28:39:38:3b:4b:4f:30:2c:ee:02:45:c9:ef:4c:78:
41:a5:7d:8c:05:fe:c5:c7:d0:1d:99:c0:77:9b:cc:b7:7b:41:
4f:0d:f1:4b:c6:64:ac:14:83:bc:fb:3e:dc:94:72:ee:df:33:
a1:f4:8b:56:a5:7e:15:c0:3b:0d:b6:16:e5:ba:73:2d:b0:c2:
62:65:a5:97:3f:a4:8d:91:03:33:b2:53:f8:72:57:bf:73:e7:
23:d6:0d:b3:8d:ff:b8:e0:2e:aa:f7:c6:9f:76:f4:34:b3:7a:
7f:5e:88:01:cf:b8:80:06:eb:da:09:aa:aa:ff:23:97:08:6e:
cd:de:43:aa:a5:0a:49:52:b0:76:31:58:84:33:c8:2e:02:a1:
d9:e8:81:ba:e7:c4:ff:7e:f9:d4:17:00:94:57:e6:2f:68:1c:
69:ad:8f:9a:5e:50:22:f8:5c:0c:91:65:9f:d2:04:2f:bb:3b:
e5:d1:ae:49:34:33:b9:ff:88:f6:9b:58:09:e5:71:a0:24:84:
c1:65:33:89:3f:f6:79:bd:23:55:0e:88:54:3d:5e:e6:cc:2e:
a2:c7:4a:04:c8:c4:e2:c6:6f:4c:77:6e:31:90:b4:04:b6:58:
76:14:04:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:31 2024 by rpki-client on console-fra.rpki-client.org