Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/hlT8UPSZG4fnqHpHRFVYft5VBww.roa
File: hlT8UPSZG4fnqHpHRFVYft5VBww.roa (raw, json)
Hash identifier: l6d6A3dp+0Z9Dr2KMeIGCaeYUqcc+GSEjnAYYMsxZiE=
Subject key identifier: 86:54:FC:50:F4:99:1B:87:E7:A8:7A:47:44:55:58:7E:DE:55:07:0C
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 01887776763566D4E1E62FDC73DACFA6CB0A
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/hlT8UPSZG4fnqHpHRFVYft5VBww.roa
Signing time: Thu 01 Jun 2023 14:57:12 +0000
ROA not before: Thu 01 Jun 2023 14:57:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197336
IP address blocks: 46.31.32.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:77:76:76:35:66:d4:e1:e6:2f:dc:73:da:cf:a6:cb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: Jun 1 14:57:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8654fc50f4991b87e7a87a474455587ede55070c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:85:9f:d0:c3:8a:2a:1e:db:3f:90:86:33:
76:e5:4c:b6:2a:62:0d:0b:37:dd:04:2b:a4:90:a8:
ef:e1:84:a5:a3:c0:b9:14:da:ea:f9:97:fa:83:d6:
71:06:76:ed:03:ac:c8:21:a7:b6:ab:cf:b7:6a:87:
dc:f9:10:26:ea:45:0e:34:c7:db:ae:1f:6e:08:e0:
89:a9:ba:15:75:35:21:84:e1:97:1c:4a:35:3b:f1:
7a:8d:d2:7e:48:03:e4:95:d4:f2:34:2c:b2:43:ab:
be:22:9a:a6:97:cb:2a:2a:28:51:26:fb:15:8f:b4:
0f:4b:41:75:a8:33:ba:20:e5:a9:af:71:73:fa:d9:
7d:c4:a3:0e:b2:cb:3e:6d:20:20:27:c8:27:eb:35:
db:1f:89:a3:17:61:4d:8c:0d:21:e2:30:41:ce:18:
32:e9:65:bd:bf:5e:0f:04:05:c5:07:bd:a8:f9:4c:
18:49:d7:09:62:db:09:8d:ed:7f:37:7e:a5:e5:76:
dd:a3:3b:e6:fb:e6:1d:7c:84:7e:05:d4:20:d2:9f:
b4:fe:bd:94:63:9d:88:9f:ac:15:ee:1c:98:08:16:
9c:f3:4c:8b:e0:4f:14:53:3a:9c:e7:14:c8:0c:5f:
4d:40:e3:64:31:e1:c6:59:b0:64:0e:9b:68:cf:dc:
2a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:54:FC:50:F4:99:1B:87:E7:A8:7A:47:44:55:58:7E:DE:55:07:0C
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/hlT8UPSZG4fnqHpHRFVYft5VBww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.32.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:a7:b9:c5:7e:c0:cc:ee:bc:b3:ee:80:e0:69:5d:9a:43:54:
e4:25:85:fa:28:dd:91:f2:9e:c1:fa:db:91:83:c1:3e:bf:ae:
87:e2:4a:58:42:cc:b7:93:c9:f8:3c:e0:74:79:c6:6d:a2:b5:
0a:c9:3f:ab:35:33:48:9c:83:bb:49:88:6b:57:eb:87:25:2d:
26:b1:35:03:e7:b8:13:56:4b:80:cc:26:20:a9:5c:01:1c:91:
31:6f:61:fd:ae:9c:6e:88:c2:c3:80:c3:d5:a8:b3:12:ed:6d:
61:5a:55:da:62:df:d6:2e:41:be:eb:cb:65:f5:7d:fb:a3:cc:
bd:a2:8d:bd:6e:1e:ba:7b:28:9d:26:4d:3d:32:63:e0:bc:84:
f3:46:64:ad:25:7e:c1:15:43:ed:5a:0c:ed:36:14:d0:1a:80:
9b:77:51:ef:9a:75:13:b6:4d:d7:5d:38:31:80:ce:f1:44:33:
42:b2:47:f2:5b:84:07:4c:1d:7e:f3:d4:a5:34:03:9c:41:5d:
38:3b:f7:39:80:78:cc:ab:1f:d0:6f:b0:7b:fd:6f:25:b3:7d:
93:bf:b6:e7:57:56:f3:f3:a3:c9:82:60:a2:d5:0b:67:86:91:
0f:e1:35:d7:65:48:76:ed:43:08:e8:27:51:c9:c6:6f:7a:52:
29:06:4e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:25 2024 by rpki-client on console-ams.rpki-client.org