Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/G40N3t6sWVjBFZi5FavHbreNQp8.roa
File: G40N3t6sWVjBFZi5FavHbreNQp8.roa (raw, json)
Hash identifier: IqOj2T5zKhxw6hJJYh9QhVeItGk1tSxeN861d65fFDQ=
Subject key identifier: 1B:8D:0D:DE:DE:AC:59:58:C1:15:98:B9:15:AB:C7:6E:B7:8D:42:9F
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 018C43775F13A856ABD2E95947AF482ECAC8
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/G40N3t6sWVjBFZi5FavHbreNQp8.roa
Signing time: Thu 07 Dec 2023 08:49:05 +0000
ROA not before: Thu 07 Dec 2023 08:49:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12507
IP address blocks: 46.151.144.0/23 maxlen: 23
46.151.144.0/21 maxlen: 21
195.49.206.0/23 maxlen: 23
195.49.200.0/21 maxlen: 21
195.49.200.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:43:77:5f:13:a8:56:ab:d2:e9:59:47:af:48:2e:ca:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Dec 7 08:49:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b8d0ddedeac5958c11598b915abc76eb78d429f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:48:d9:2f:ec:5c:c7:8b:28:90:91:4f:98:d5:
7d:e4:d6:cd:33:7d:97:3d:e2:3e:e0:6f:9c:36:12:
e4:dd:a3:d4:4b:02:27:33:2d:0f:2a:0d:88:aa:e9:
e9:1d:78:f2:33:b5:2c:d6:f5:5b:0b:4f:25:94:b1:
e5:e0:11:ca:31:a7:6d:77:3b:39:5a:b9:11:ec:66:
07:9e:5d:0b:c4:62:93:59:c1:bf:ef:78:a6:de:98:
ea:69:63:a1:8d:fd:78:a2:3d:7e:d3:90:e6:e7:b7:
00:13:cb:58:ca:2f:49:e8:84:69:1d:f1:b8:55:2a:
11:62:74:83:4f:38:e5:bc:46:29:63:b7:95:86:ac:
7c:e2:ef:e8:18:da:cc:9d:43:a5:fb:e0:e1:67:c5:
8e:2d:1a:94:c3:d9:f9:26:ed:68:1d:35:85:7d:7e:
bf:ea:13:18:05:ec:54:1e:cf:fb:1b:4c:0b:21:fb:
ce:90:d3:b0:02:f2:34:ae:be:c2:fd:96:ed:6b:b6:
f7:10:85:b5:00:63:c6:80:a7:62:66:f6:e1:e8:5a:
6e:1c:d7:43:d9:13:2d:85:8b:79:03:27:37:e2:be:
8f:db:db:b7:96:00:d4:83:7b:18:fb:56:61:51:e7:
f9:11:0f:a9:8d:05:e2:52:ab:28:1e:4e:4d:4c:8f:
6b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8D:0D:DE:DE:AC:59:58:C1:15:98:B9:15:AB:C7:6E:B7:8D:42:9F
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/G40N3t6sWVjBFZi5FavHbreNQp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.144.0/21
195.49.200.0/21
Signature Algorithm: sha256WithRSAEncryption
bb:88:8f:8f:0e:2a:81:98:b3:77:d3:7d:d9:39:5f:f1:2d:79:
f7:f0:fe:85:0e:a9:fa:8a:13:34:78:1c:91:3a:f5:c7:ce:4a:
cf:b9:96:e1:ff:ff:1c:ce:cd:15:9b:45:42:67:09:d1:d6:8f:
08:71:61:71:bd:55:a2:32:52:c6:38:5f:4c:57:42:17:d1:ff:
01:59:25:34:51:f9:06:0a:15:04:e5:da:38:64:a0:e8:ed:90:
d8:4e:68:23:16:8b:d6:7c:66:c9:23:f1:55:74:4e:65:b3:40:
9c:ee:12:98:f1:63:46:6f:75:b6:2f:a4:4b:92:01:6e:b8:41:
04:10:c1:e3:06:4e:3e:4f:a2:36:bc:4d:e9:8b:1d:11:84:af:
60:0d:32:62:96:18:99:e8:e8:65:bd:01:c1:10:48:ab:80:52:
74:34:e9:63:6e:92:92:3f:0f:e8:3b:65:95:b8:77:92:6a:2f:
f7:f9:6b:83:f6:e7:38:ec:01:e2:ca:20:52:87:2e:84:26:57:
d8:56:0d:74:51:8e:6b:a4:8d:24:00:cc:60:1e:41:07:46:47:
3d:b2:74:d2:57:b0:fe:75:35:33:31:76:59:b8:97:11:c6:e3:
dd:de:35:45:23:17:cc:eb:12:12:0e:08:76:73:dc:93:d5:74:
51:2e:ff:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:17 2024 by rpki-client on console-fra.rpki-client.org