Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1Rp1tKxamHd8copZX6lK01Ux-48.roa
File: 1Rp1tKxamHd8copZX6lK01Ux-48.roa (raw, json)
Hash identifier: pD1iQ9/yCW7FJaGhXEHsP5JyCFBAXbPKlQzA3ccxzCY=
Subject key identifier: D5:1A:75:B4:AC:5A:98:77:7C:72:8A:59:5F:A9:4A:D3:55:31:FB:8F
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 018894A6138DFB33FB32AC106A67EF324398
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1Rp1tKxamHd8copZX6lK01Ux-48.roa
Signing time: Wed 07 Jun 2023 06:58:11 +0000
ROA not before: Wed 07 Jun 2023 06:58:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 85.203.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:94:a6:13:8d:fb:33:fb:32:ac:10:6a:67:ef:32:43:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jun 7 06:58:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d51a75b4ac5a98777c728a595fa94ad35531fb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ba:6c:dc:6a:0d:1d:40:00:2d:ea:f4:7f:28:
b7:bc:c5:1f:b2:89:1f:7f:e0:a7:6f:b5:80:47:00:
6b:cc:b3:d2:c7:cf:3a:85:6f:fd:75:d1:b3:6d:7e:
20:69:8b:d6:4b:40:af:29:51:10:a8:cb:a7:48:15:
5a:3c:67:87:55:be:06:1e:25:50:00:59:ec:fa:79:
e4:6f:e5:cc:c2:8e:af:aa:75:6f:39:a8:71:d0:40:
46:e7:56:e3:e2:9f:0c:8c:d6:cb:71:88:e3:be:e2:
91:8b:b3:a9:1b:c2:2d:97:00:c7:8e:a5:7c:b4:10:
42:9f:6e:f2:33:93:f5:a8:97:6c:8f:bd:7b:72:d9:
0d:73:f1:48:aa:fb:b3:7d:e4:94:b8:4e:33:6c:b9:
42:32:e0:b2:94:c2:3f:88:15:91:34:60:1f:41:11:
4d:e4:d0:b3:24:d0:82:6b:5d:f1:23:27:c4:16:e8:
22:ae:94:21:cd:1f:7e:36:99:1f:db:49:fb:cb:83:
95:c0:6a:89:b1:f5:0f:c9:32:6c:1d:2b:1d:ad:05:
3e:53:d4:ef:ec:a1:cd:01:11:00:fe:26:5c:89:2a:
b1:06:65:a9:07:bd:bb:15:9a:78:23:72:ca:b9:3b:
02:25:d0:22:8d:74:29:b5:f1:44:53:aa:8e:11:ec:
50:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1A:75:B4:AC:5A:98:77:7C:72:8A:59:5F:A9:4A:D3:55:31:FB:8F
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1Rp1tKxamHd8copZX6lK01Ux-48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.46.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ee:7f:f0:d4:d7:73:87:04:9c:90:66:fb:12:57:58:b5:30:
46:8e:a5:45:d7:5d:fe:cb:0f:61:f6:b6:61:3b:d2:d9:2e:fe:
05:6e:f9:14:2f:c5:9d:ac:d7:d3:93:2c:ac:80:00:c4:a6:4d:
b3:9f:b6:88:dc:99:7d:0a:d4:12:b4:57:93:02:67:b5:dc:6d:
d1:2d:37:a0:40:d0:72:ec:49:b3:c0:9f:e1:45:f6:b7:67:ec:
9b:16:e3:54:43:d5:05:57:5b:ba:79:68:4e:1d:48:f3:d1:7e:
2d:9c:fb:44:32:94:3c:0b:a1:43:2b:a7:28:5d:b5:c0:cd:a1:
af:36:97:a5:5b:8e:32:1c:40:d7:9f:cb:ad:0e:0b:a7:c3:db:
70:8a:4d:d8:a1:9b:e4:81:14:80:6e:3a:c3:71:07:3b:b0:9d:
01:76:a6:3a:00:83:c3:78:0a:67:61:17:5d:3c:1b:c5:24:50:
73:0b:dd:14:ed:4a:8a:a5:51:23:2e:f0:e1:f6:0c:b4:a8:16:
02:f3:17:10:40:73:64:84:0b:3b:24:cd:4b:d1:ea:b2:bd:77:
f0:ec:48:21:1e:c7:e8:a8:91:4a:90:71:09:96:b1:5f:dc:c6:
ca:5f:e6:0e:a9:ed:22:7d:e5:44:2b:f0:f1:8e:d3:da:54:46:
74:c8:95:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:50 2023 by rpki-client on console-ams.rpki-client.org