Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/fHwLU9DRWIrTHV7OFTidPGrJqq0.roa
File: fHwLU9DRWIrTHV7OFTidPGrJqq0.roa (raw, json)
Hash identifier: OAxH4C5mHPGPIzvLVTpIhnLADlmjBMPCfZ+qvOirdwQ=
Subject key identifier: 7C:7C:0B:53:D0:D1:58:8A:D3:1D:5E:CE:15:38:9D:3C:6A:C9:AA:AD
Certificate issuer: /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial: 01856F66C28E5D91C5B84ADD9366481A9982
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/fHwLU9DRWIrTHV7OFTidPGrJqq0.roa
Signing time: Sun 01 Jan 2023 22:14:43 +0000
ROA not before: Sun 01 Jan 2023 22:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43140
IP address blocks: 46.236.204.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:c2:8e:5d:91:c5:b8:4a:dd:93:66:48:1a:99:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Validity
Not Before: Jan 1 22:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c7c0b53d0d1588ad31d5ece15389d3c6ac9aaad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ca:5f:d4:3a:3e:19:ba:e4:5c:7c:bc:70:56:
46:6a:53:41:09:f2:4b:5f:8d:82:ce:e5:ac:55:d3:
59:17:52:fc:7a:05:b8:b7:b9:03:e7:f2:ba:54:8b:
d3:a5:54:6b:73:db:33:1a:85:0a:1b:4d:2e:d1:6c:
b9:8e:84:df:5e:78:85:d4:37:fc:7c:24:51:46:4b:
7e:dd:1d:2b:f7:1a:69:fa:19:0d:3a:d6:64:13:14:
c4:62:cf:07:d6:00:7b:bc:02:cc:53:84:ca:81:90:
62:a3:6c:dc:f7:05:ec:ee:24:1b:16:56:81:e5:2f:
d1:eb:0f:86:f0:59:69:e2:9c:f4:33:94:a5:0a:bc:
27:3e:b1:bf:9f:27:ea:6a:82:46:0e:c2:47:0e:b9:
2d:95:34:5e:4d:49:97:1c:a5:bf:7c:68:a2:aa:12:
f9:12:0f:af:be:e5:c6:96:ae:14:1d:cc:b6:b1:f8:
0a:0c:6c:95:1e:78:d8:aa:2e:20:e7:73:63:8b:97:
8c:ba:98:78:c6:80:fc:5b:60:1b:c5:ae:90:17:55:
96:06:aa:50:f8:7e:ab:c6:30:49:53:7e:82:66:48:
7f:60:77:71:fc:4a:e4:a9:73:03:bc:4e:c8:ae:27:
28:98:59:7e:c9:e8:2b:6d:90:d6:42:f5:80:91:2f:
aa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7C:0B:53:D0:D1:58:8A:D3:1D:5E:CE:15:38:9D:3C:6A:C9:AA:AD
X509v3 Authority Key Identifier:
keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/fHwLU9DRWIrTHV7OFTidPGrJqq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.204.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:42:24:e0:35:e3:80:17:74:12:31:cb:34:57:9c:2c:77:c4:
ea:cf:04:fa:c3:8f:9b:32:4d:8f:ff:db:a2:be:44:b5:92:68:
0f:3d:bf:2d:7c:73:98:48:62:74:87:4f:3e:7a:88:6e:51:52:
35:07:30:e9:f6:4b:38:23:67:4c:cd:a3:cd:72:60:25:0d:9b:
eb:e8:1f:b3:19:9f:06:0a:16:bd:8a:4a:c4:84:ad:ab:39:6f:
21:fc:db:c4:60:63:4c:8a:72:1f:75:46:fe:a5:52:bd:0d:f0:
b3:0f:cd:3f:ff:33:17:28:80:ae:42:d8:3a:67:f3:89:3d:50:
b4:d9:5c:c6:39:b0:f4:6e:30:87:3c:d1:d4:0a:59:bb:ca:88:
3a:67:70:b3:00:6f:c7:d6:01:cf:a4:85:ef:af:8d:6d:6a:34:
11:af:1c:b6:9e:2b:07:8b:fe:21:36:f7:cc:9e:02:df:8e:e1:
a6:97:2a:3c:02:46:ec:be:92:1c:83:45:0c:7d:5d:a8:bc:17:
a0:1b:5c:2c:02:d9:e1:ea:f1:b4:2a:69:f9:8d:2d:ca:fe:bb:
b9:7e:73:ed:41:2e:44:80:62:20:be:d2:4f:04:58:5d:e6:80:
c0:fe:9e:22:5b:14:44:65:da:7c:cb:f4:b4:fd:9d:a2:15:da:
83:a9:b7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:27 2024 by rpki-client on console-fra.rpki-client.org