Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/BYaQXe4LIo4a_ok1URMd_Zb6tP0.roa
File: BYaQXe4LIo4a_ok1URMd_Zb6tP0.roa (raw, json)
Hash identifier: ZXbqLX4NjaunF5eDDAI1SCSK5GbkRSx6Er7blXYNM0Y=
Subject key identifier: 05:86:90:5D:EE:0B:22:8E:1A:FE:89:35:51:13:1D:FD:96:FA:B4:FD
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 018BD7622D0C3E5031144B0C6CA8BA558034
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/BYaQXe4LIo4a_ok1URMd_Zb6tP0.roa
Signing time: Thu 16 Nov 2023 09:06:57 +0000
ROA not before: Thu 16 Nov 2023 09:06:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12507
IP address blocks: 46.151.144.0/23 maxlen: 23
46.151.144.0/21 maxlen: 21
195.49.200.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 07 Dec 2023 08:43:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d7:62:2d:0c:3e:50:31:14:4b:0c:6c:a8:ba:55:80:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Nov 16 09:06:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0586905dee0b228e1afe893551131dfd96fab4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:18:12:18:4a:e3:d0:87:4a:15:94:4b:d3:f3:
7e:3e:8a:fa:c0:0d:51:f8:1d:9c:29:1c:58:53:a5:
c2:ec:eb:b0:ae:f9:f9:0b:14:42:6b:f3:4c:a4:81:
14:9e:16:50:a8:68:dc:22:b6:6d:11:47:3e:9c:5a:
54:d0:e5:3f:ca:92:c3:f8:45:c8:1c:cc:5e:4c:3a:
e4:4a:ba:7d:f9:c8:c2:d4:0d:1a:73:38:59:fa:00:
2d:12:3e:1c:e8:85:62:bb:bd:d3:90:93:52:c8:a1:
b3:3f:89:29:61:59:4e:f3:4d:69:c4:ff:ae:97:70:
aa:1b:17:2a:6f:72:c9:d2:4c:98:00:e4:b3:2e:16:
83:cb:d1:b4:0f:41:55:03:02:78:06:f9:3a:3c:57:
d7:dc:fd:09:da:77:a4:c1:35:49:cc:56:2e:f7:c4:
60:da:1c:a7:fc:08:67:1e:d2:f4:29:9e:ab:e7:52:
31:b1:38:82:90:ab:57:8b:12:26:01:8e:0e:3b:33:
b1:d0:cb:ad:bc:b6:19:93:c7:61:4c:ea:62:d7:30:
36:09:54:90:e9:80:2a:d9:88:5d:49:37:5a:3c:34:
9f:1b:30:ab:6c:20:a3:59:98:44:24:43:d9:eb:af:
4f:5e:55:9e:04:b1:1f:17:ed:89:e8:cf:d1:62:23:
0d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:86:90:5D:EE:0B:22:8E:1A:FE:89:35:51:13:1D:FD:96:FA:B4:FD
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/BYaQXe4LIo4a_ok1URMd_Zb6tP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.144.0/21
195.49.200.0/21
Signature Algorithm: sha256WithRSAEncryption
65:39:b9:18:f8:e5:f2:d7:55:36:f3:63:2e:f8:ea:7a:a9:bb:
28:87:de:b4:2a:ac:fa:29:5a:6e:d5:ff:5e:08:38:1b:90:79:
c3:a8:6d:3f:23:30:3b:a0:69:97:91:28:fd:32:52:57:9c:cf:
ec:2b:25:d2:f8:70:81:a3:e7:7e:6b:e2:c5:f7:5e:25:e7:08:
b3:b8:8d:80:8b:0c:18:48:aa:35:da:99:95:dc:2d:16:13:37:
69:60:0c:09:1a:ba:16:c8:16:27:00:71:3c:71:f2:3f:bb:c6:
0e:6d:a0:e0:35:14:84:1d:c5:c4:d9:8d:04:c3:e0:e0:62:a1:
da:5c:f8:8b:29:8a:56:dd:e1:17:f6:6f:e8:fb:97:18:6c:75:
a4:4d:2f:7e:45:f5:6a:16:1f:84:8a:c6:17:63:e3:69:ee:fb:
f7:13:86:6c:53:13:fd:04:da:f7:c1:d3:73:28:30:6e:71:6a:
b9:3c:c3:4c:7c:51:ec:34:a7:6a:de:46:9f:24:ee:d9:44:ac:
4f:cd:89:48:a1:da:1d:02:6f:36:56:af:25:bd:07:37:77:b6:
e1:04:ec:08:cd:a9:f8:a6:b4:02:87:84:a0:4f:13:3d:6f:71:
07:c7:5f:bf:d9:e2:c4:d8:2a:cb:63:39:2f:5a:51:0a:d5:a6:
4c:55:63:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:17 2024 by rpki-client on console-fra.rpki-client.org