Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/8n8hiAxasiAZjSvNIcXpwUW11mY.roa
File: 8n8hiAxasiAZjSvNIcXpwUW11mY.roa (raw, json)
Hash identifier: evtZZFzf2GXv7dtKuhPlZiBHSot+dTgO7XoC1Berieg=
Subject key identifier: F2:7F:21:88:0C:5A:B2:20:19:8D:2B:CD:21:C5:E9:C1:45:B5:D6:66
Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial: 01856F66C4E0C73A4BD99A1B5817BB37747C
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/8n8hiAxasiAZjSvNIcXpwUW11mY.roa
Signing time: Sun 01 Jan 2023 22:14:44 +0000
ROA not before: Sun 01 Jan 2023 22:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61244
IP address blocks: 46.236.224.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:c4:e0:c7:3a:4b:d9:9a:1b:58:17:bb:37:74:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Validity
Not Before: Jan 1 22:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f27f21880c5ab220198d2bcd21c5e9c145b5d666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f7:a5:9f:04:18:79:ed:42:ef:ad:c8:7f:56:
05:5a:6a:3f:fd:d7:dd:bf:d5:4a:77:e2:e7:7d:c6:
ee:35:1a:ad:b7:52:7e:6c:48:28:1c:ff:a1:53:cc:
a8:ff:c9:74:81:b0:00:9d:24:ff:a5:99:b4:b8:9d:
41:0a:df:16:4b:cf:1e:ef:a5:4f:c3:bc:20:e9:b6:
ad:84:5e:3d:81:cc:76:f2:eb:b6:de:95:f4:4d:bc:
1a:83:f4:2c:77:59:ba:44:57:e4:2d:47:d8:d3:c0:
39:50:6b:79:05:90:43:fc:6b:de:a8:1e:7e:f7:a5:
6d:5b:49:04:42:62:d5:44:18:b7:23:93:2a:92:c7:
68:f8:69:db:1f:44:e2:64:e2:65:85:4b:74:32:9f:
3a:df:7e:a7:0a:5d:c6:11:39:73:8f:c1:58:0b:47:
00:f4:0e:2e:c8:a2:91:c4:d9:e3:68:38:e3:31:4f:
02:d6:1e:b4:1c:b6:c9:2e:75:87:b4:43:6e:3c:60:
30:5a:da:3f:07:f0:fb:44:cb:97:ec:e5:5f:1e:9c:
73:b7:46:e2:58:99:ce:24:63:26:10:fd:f4:41:a4:
71:78:70:cf:ca:e7:6c:3d:5f:6f:e5:72:06:8b:31:
66:c6:14:58:07:3a:be:f8:53:dc:7e:4e:d4:f7:eb:
40:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7F:21:88:0C:5A:B2:20:19:8D:2B:CD:21:C5:E9:C1:45:B5:D6:66
X509v3 Authority Key Identifier:
keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/8n8hiAxasiAZjSvNIcXpwUW11mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.224.0/19
Signature Algorithm: sha256WithRSAEncryption
83:69:6d:6e:1e:b3:01:70:17:c6:b0:62:8c:03:d3:25:dd:1d:
0d:c6:e3:eb:45:04:bb:27:7f:dd:dc:ce:ed:78:a3:cf:a3:ab:
66:05:d7:3e:41:92:2f:d3:22:8d:c8:c4:6a:b8:1f:65:fe:5d:
3c:2c:3e:36:b6:2f:3a:96:b9:87:b1:88:2e:96:8c:2e:b2:b7:
38:c2:bf:1d:d8:29:de:17:0b:66:93:72:cb:aa:4b:28:2a:b4:
6c:ce:8a:61:7b:dd:d6:c5:df:a8:9d:93:02:87:d1:1b:cc:ed:
df:35:5b:f8:1f:06:8b:db:ff:78:32:fb:b0:ab:0e:66:c2:ca:
88:04:1a:9b:83:aa:ce:7b:fb:0d:25:ad:9a:ba:75:c4:f2:86:
7b:96:38:3c:9e:63:d2:96:54:39:dd:89:06:25:d4:3d:30:a9:
ab:0f:36:86:9e:09:55:99:6b:b3:41:a1:c4:32:a3:df:ea:08:
f0:b3:be:c7:ba:6f:51:db:cd:45:c0:85:c6:25:3a:55:92:d7:
e4:52:5f:98:c9:a7:ed:fd:3e:8f:5c:0f:25:b9:94:b7:58:20:
02:5e:ab:0e:0d:49:52:db:c7:fc:bf:65:79:ac:be:01:03:38:
b4:37:b9:2f:34:59:6c:2e:74:c3:65:b1:c4:e4:34:c7:c8:09:
04:74:42:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:06 2024 by rpki-client on console-ams.rpki-client.org