Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/oPI8jrbO3jIW3_-oGHOASWiaeaQ.roa
File: oPI8jrbO3jIW3_-oGHOASWiaeaQ.roa (raw, json)
Hash identifier: xYr6/ExlNJJXhd3c79EdGsz0aeYUYHOgKBSSfbkmTD8=
Subject key identifier: A0:F2:3C:8E:B6:CE:DE:32:16:DF:FF:A8:18:73:80:49:68:9A:79:A4
Certificate issuer: /CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Certificate serial: 01856E2FB168EA1C24AEB38FB484E51E0147
Authority key identifier: D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/oPI8jrbO3jIW3_-oGHOASWiaeaQ.roa
Signing time: Sun 01 Jan 2023 16:34:57 +0000
ROA not before: Sun 01 Jan 2023 16:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212804
IP address blocks: 46.252.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:b1:68:ea:1c:24:ae:b3:8f:b4:84:e5:1e:01:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8284f18cd44604bdd6d08f4d878dc61456c40fd
Validity
Not Before: Jan 1 16:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0f23c8eb6cede3216dfffa818738049689a79a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:18:b6:a2:b6:42:dc:b7:98:1a:49:1b:35:96:
cf:6a:4d:b7:a0:97:e6:cd:e1:df:22:ca:ea:a2:60:
1b:19:46:fb:55:bb:30:3e:6c:82:eb:21:67:ee:d8:
f8:37:be:6f:2c:0e:3b:91:cf:ce:08:84:e5:0b:89:
84:52:aa:0d:5f:fc:2d:56:c3:34:58:e8:8f:c5:5a:
f1:9d:70:fa:45:a0:ad:8b:1a:f1:74:f6:e6:95:e8:
0a:62:a9:22:10:14:03:7d:2e:2d:be:4f:0a:3d:9a:
c9:0d:b0:64:e7:66:cf:5f:51:64:44:a8:35:3c:3d:
44:f2:78:93:9f:29:47:e5:1c:eb:a1:af:62:41:4f:
07:8f:fc:62:c6:8e:7d:2f:71:a1:42:16:7d:49:a3:
89:9a:71:e8:be:73:f9:57:4e:ff:18:ee:85:42:8f:
52:c6:89:d5:a3:58:38:36:9c:f1:13:44:c3:45:b0:
5d:03:e0:99:f8:c1:90:f7:7e:72:6c:f5:6c:08:57:
fb:8f:5b:e0:de:80:63:a2:7b:1c:7e:94:95:2e:7b:
e2:6f:7c:f7:77:1b:64:72:90:10:9d:74:cd:ff:c9:
b7:91:47:8e:6a:4d:79:51:c0:65:31:70:74:54:be:
ff:fd:a4:60:67:a1:fd:59:5c:c0:31:82:78:46:ad:
1d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F2:3C:8E:B6:CE:DE:32:16:DF:FF:A8:18:73:80:49:68:9A:79:A4
X509v3 Authority Key Identifier:
keyid:D8:28:4F:18:CD:44:60:4B:DD:6D:08:F4:D8:78:DC:61:45:6C:40:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ChPGM1EYEvdbQj02HjcYUVsQP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/oPI8jrbO3jIW3_-oGHOASWiaeaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2652cd-7ecf-49e8-a4f8-c7869128582c/1/2ChPGM1EYEvdbQj02HjcYUVsQP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.252.0.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:19:d7:9a:27:62:15:29:5f:2e:e5:87:b9:a5:a4:5e:2c:aa:
35:e8:d8:ea:4f:0e:c6:58:83:bd:17:28:a5:5c:da:0b:0a:f3:
ff:ee:1d:a0:5c:35:8e:55:b2:6d:e2:80:82:92:0c:4e:4c:a6:
5c:f6:52:75:b0:34:97:a8:35:af:1d:4c:4d:6c:11:35:fd:28:
af:43:81:4f:4b:b8:f6:f3:18:27:d3:1d:d2:62:64:5f:dc:30:
5f:a1:01:42:a0:f5:e5:c2:31:b8:d6:2b:e1:fa:b5:1e:74:5d:
a2:aa:cc:4c:fa:01:bf:40:80:8d:bf:18:ee:8d:04:42:67:74:
31:02:86:35:0d:e5:92:9f:fb:5b:48:cd:9d:aa:0a:4f:df:95:
72:4a:a0:ea:af:29:b0:e2:f8:c0:f5:05:ad:26:9f:fb:f8:26:
8b:7b:d0:e6:65:98:d7:c7:b5:b6:46:3c:28:fd:5c:00:e0:3d:
87:48:13:36:b9:46:e1:16:0e:94:a6:76:80:30:ff:c8:d1:f1:
91:9c:f4:7d:c6:ca:e9:e0:eb:6b:05:5f:ca:56:31:b6:97:26:
7b:f9:dc:51:70:4b:bc:fc:34:e9:06:61:d5:d5:d4:1b:3d:a0:
de:98:02:59:d8:63:a8:42:e4:f2:6b:7a:e1:28:90:99:45:35:
f6:d2:53:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:46 2024 by rpki-client on console-ams.rpki-client.org