Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/eOuXJt6dM5_f5dJCQ-3GEkJADr4.roa
File: eOuXJt6dM5_f5dJCQ-3GEkJADr4.roa (raw, json)
Hash identifier: 5MpmWPCW/xayUStxP5WKA08zY/RbgHCDwX/AO8GDNeI=
Subject key identifier: 78:EB:97:26:DE:9D:33:9F:DF:E5:D2:42:43:ED:C6:12:42:40:0E:BE
Certificate issuer: /CN=936cb336c1beb71d4fbbaae243b23352c6270061
Certificate serial: 01856F42AA7EF86E4FA81EA86334FD59A5D6
Authority key identifier: 93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/eOuXJt6dM5_f5dJCQ-3GEkJADr4.roa
Signing time: Sun 01 Jan 2023 21:35:17 +0000
ROA not before: Sun 01 Jan 2023 21:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210923
IP address blocks: 46.175.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:aa:7e:f8:6e:4f:a8:1e:a8:63:34:fd:59:a5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=936cb336c1beb71d4fbbaae243b23352c6270061
Validity
Not Before: Jan 1 21:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78eb9726de9d339fdfe5d24243edc61242400ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cb:aa:51:16:23:07:37:24:c3:b6:e1:ca:1f:
a0:4d:b3:ca:71:51:46:ad:83:65:80:41:a6:da:1c:
bf:7b:a3:42:75:40:a1:ee:c9:35:8f:02:b6:6b:71:
60:54:9d:f7:16:25:d5:79:f0:57:6f:33:bb:49:91:
7a:6d:35:23:f7:ce:4d:01:84:85:66:ee:72:65:dd:
03:b0:45:ca:1e:69:fa:d7:be:62:ff:7a:73:22:16:
f0:ae:06:9d:0f:12:cb:5f:b7:5d:29:2f:ac:d0:e5:
9e:ba:99:9b:f6:78:9f:d9:d2:85:94:b1:1d:73:82:
27:fe:2b:41:85:4f:d5:99:aa:e8:35:14:26:3c:1e:
f4:16:a6:d5:5d:aa:68:1d:6a:2f:1f:c7:1f:64:b3:
4d:20:12:c0:3e:af:4b:89:82:c8:7b:0e:69:46:2a:
88:06:24:dc:80:34:d1:64:21:98:1e:86:4c:e2:c5:
7f:50:07:29:30:d7:f0:43:1b:6d:75:a2:52:86:fc:
6c:4f:b0:22:5a:0e:df:88:43:f9:a7:d5:ac:f9:88:
b6:9d:f6:44:fd:0e:29:13:e4:f5:2c:44:23:cd:26:
1c:d4:24:2c:3a:f2:a8:48:35:07:f0:aa:ca:1b:78:
44:76:19:65:00:c8:4c:81:3f:db:d2:bc:61:cd:61:
76:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:EB:97:26:DE:9D:33:9F:DF:E5:D2:42:43:ED:C6:12:42:40:0E:BE
X509v3 Authority Key Identifier:
keyid:93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/eOuXJt6dM5_f5dJCQ-3GEkJADr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.134.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:f7:42:e4:96:10:a8:7a:40:db:8a:1b:e7:9d:51:c3:c2:cd:
ca:0b:d6:0f:f6:95:cf:5f:54:d4:aa:b9:cd:aa:f9:60:a9:d9:
85:7d:b2:5a:22:dc:f6:9d:5d:08:8f:0a:da:8b:81:36:4d:9c:
89:3d:d9:67:d5:03:1f:69:58:4f:c9:a0:be:d9:42:82:cf:d6:
50:f0:75:a8:9b:5e:ff:98:64:36:42:27:c4:5f:04:cd:54:38:
f2:62:ac:eb:69:53:c0:80:2c:15:b0:6e:63:4f:00:a4:21:97:
43:8d:5e:25:a8:2f:d1:4b:d9:7d:e0:51:72:2b:78:60:0e:83:
62:21:64:f6:61:33:66:39:7e:a1:94:69:03:f2:b2:2c:3b:59:
fd:f5:85:cf:b7:3e:8f:c2:57:e5:2c:14:ff:87:8d:40:b5:e9:
94:eb:e2:23:35:fc:50:b9:ae:b0:78:d4:d7:57:64:72:f6:75:
98:15:e9:63:8d:81:77:e1:34:ef:00:b2:dc:2c:08:52:a6:67:
5e:47:03:7f:7f:a7:cd:e9:88:fe:0e:7c:65:0f:e9:db:5c:e1:
31:d3:96:10:4d:06:d1:54:6b:71:b4:a9:a6:49:f6:c3:20:db:
49:12:af:f0:4a:04:fc:4c:69:8f:9e:63:e9:3e:35:1b:09:bf:
70:96:15:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:55 2024 by rpki-client on console-ams.rpki-client.org