Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/ejxYlrUx0nj9Ye_fKpL3uYzsPIY.roa
File: ejxYlrUx0nj9Ye_fKpL3uYzsPIY.roa (raw, json)
Hash identifier: h8kycZPNwZQxpQwMtr2pK5OQGjh5pAfMHiTwCOsLbzM=
Subject key identifier: 7A:3C:58:96:B5:31:D2:78:FD:61:EF:DF:2A:92:F7:B9:8C:EC:3C:86
Certificate issuer: /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Certificate serial: 018B3A3FDF73403FD1663E9C2214CD0B0FAA
Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/ejxYlrUx0nj9Ye_fKpL3uYzsPIY.roa
Signing time: Mon 16 Oct 2023 20:49:06 +0000
ROA not before: Mon 16 Oct 2023 20:49:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205546
IP address blocks: 46.229.246.0/24 maxlen: 24
46.229.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3a:3f:df:73:40:3f:d1:66:3e:9c:22:14:cd:0b:0f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Validity
Not Before: Oct 16 20:49:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a3c5896b531d278fd61efdf2a92f7b98cec3c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ae:46:be:ff:f8:a2:79:28:ae:1a:70:c6:52:
8d:01:13:d1:a9:72:ef:b5:3c:6d:cd:06:2e:95:45:
57:49:2d:ae:df:ff:20:51:b8:8c:17:e4:69:36:73:
93:2b:43:7e:05:19:60:e8:34:53:14:45:66:56:60:
50:a8:f8:b4:5b:75:6c:0e:af:63:80:08:65:f7:c8:
44:16:c5:48:b3:1a:a7:41:04:2b:79:11:3e:f5:77:
15:22:4c:5e:ed:98:42:01:67:0e:d3:17:e8:48:fc:
51:fe:75:93:19:b1:de:17:08:9e:c4:4e:0f:5a:91:
e2:65:f3:3a:ab:d4:cb:6e:aa:e3:bb:07:fe:f8:78:
95:9d:2b:da:1c:d3:55:26:02:a6:10:12:54:4f:c1:
d6:8d:35:9a:22:4d:21:76:f3:d5:6f:fd:b7:17:bf:
0a:30:19:e8:3b:f4:42:70:80:a1:a7:5c:66:c5:00:
0d:79:a4:77:4c:0f:7f:70:87:a1:81:ad:43:5d:1f:
a8:20:89:62:b2:b2:16:3d:3a:61:40:eb:78:a6:50:
39:1c:92:73:43:af:eb:6d:c9:1a:b8:db:36:68:b6:
1f:22:6a:4d:ea:47:7f:e6:02:6a:0e:7e:00:f2:19:
a3:ec:1b:a8:ca:ee:42:5d:45:98:82:81:33:09:80:
b7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3C:58:96:B5:31:D2:78:FD:61:EF:DF:2A:92:F7:B9:8C:EC:3C:86
X509v3 Authority Key Identifier:
keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/ejxYlrUx0nj9Ye_fKpL3uYzsPIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.246.0/23
Signature Algorithm: sha256WithRSAEncryption
99:a2:fd:f6:aa:17:54:49:51:5f:d8:5d:70:0f:78:80:cc:a4:
d8:0b:ca:4f:ec:07:8f:f2:9d:3d:f5:24:b4:1e:b1:95:bf:de:
74:96:05:c1:3d:3d:70:f9:43:f4:4e:ff:82:be:f1:ce:16:aa:
c5:61:71:34:57:e2:ad:fd:41:8d:ee:9c:a5:d9:7e:13:d9:fb:
e8:8e:6e:9e:b4:f0:1f:3a:53:bc:a9:a4:47:d4:ed:54:d0:2a:
35:e5:45:77:75:8a:50:84:ce:3d:79:3f:a3:a0:ff:a7:48:07:
09:17:8a:b3:c4:d6:dd:e7:e4:b1:87:34:00:0f:81:28:46:2d:
15:4a:c6:3c:4f:4d:a4:cf:f7:ad:e1:8c:52:6f:07:7e:3d:85:
86:f2:04:5a:74:25:21:e2:68:0c:90:39:e4:f5:57:89:83:07:
14:d0:7f:4a:33:b3:0b:52:2a:63:c2:2c:a9:73:84:41:bc:c3:
47:f3:74:c5:fa:5e:fa:4a:f0:b9:ed:da:e2:64:16:4c:f2:8c:
62:9d:d2:52:a9:da:b1:b2:dd:74:c8:ca:48:ff:27:71:d3:dd:
4c:47:38:9f:d1:0e:9d:50:31:68:57:05:85:87:9c:85:6e:c5:
53:d2:bb:ce:00:3c:7a:df:98:70:15:cb:d7:bb:79:19:52:54:
4d:05:c2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:41 2024 by rpki-client on console-fra.rpki-client.org