Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/pYBuWde5cJKZb1pJmmaYr8iO1LA.roa
File: pYBuWde5cJKZb1pJmmaYr8iO1LA.roa (raw, json)
Hash identifier: +ZQ33p6P7d3Xt6cKvMz150CEqS1CWsiFcoZZ87jkwpg=
Subject key identifier: A5:80:6E:59:D7:B9:70:92:99:6F:5A:49:9A:66:98:AF:C8:8E:D4:B0
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01892249840EC48B542147EE391183A5E96A
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/pYBuWde5cJKZb1pJmmaYr8iO1LA.roa
Signing time: Tue 04 Jul 2023 19:03:10 +0000
ROA not before: Tue 04 Jul 2023 19:03:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60144
IP address blocks: 46.8.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:22:49:84:0e:c4:8b:54:21:47:ee:39:11:83:a5:e9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jul 4 19:03:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5806e59d7b97092996f5a499a6698afc88ed4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:49:72:37:61:fd:63:75:41:1f:97:42:68:9b:
52:92:06:6c:8c:c2:3b:9d:1c:2b:61:59:71:0c:92:
2a:af:85:48:3a:da:1a:29:28:e6:6d:85:bb:31:cb:
ca:79:07:fd:87:d5:05:db:93:0f:72:61:36:53:a2:
af:90:5f:25:fb:04:f2:2d:89:81:c6:30:c4:01:2c:
fe:fe:6b:0b:13:0c:15:fc:e1:df:0f:c4:16:bc:68:
af:38:6c:74:1b:22:2e:f7:fb:69:1f:02:59:8d:1e:
c8:4f:23:93:5f:d6:2e:05:88:de:ea:7b:ce:6d:c0:
41:e9:56:34:32:92:9a:22:26:38:75:14:72:5d:98:
8d:42:73:41:10:38:0e:e1:c5:5e:c4:85:f4:4b:27:
71:a9:1d:86:76:f5:8e:e0:46:5b:70:5b:7d:6f:bb:
7f:0d:e0:7a:d6:67:05:5f:56:68:0a:e6:3c:35:92:
3a:9c:6e:e6:72:62:37:e8:f7:db:df:f3:02:e4:30:
bc:67:de:0c:72:e6:08:19:62:4b:0b:44:04:57:10:
82:b9:df:cb:f6:98:c0:9d:85:9d:72:59:d3:0d:21:
f0:29:57:f8:47:27:03:67:b1:91:b8:fe:72:08:af:
af:41:5a:fa:10:32:e6:6b:42:c1:f1:1b:1a:50:07:
2b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:80:6E:59:D7:B9:70:92:99:6F:5A:49:9A:66:98:AF:C8:8E:D4:B0
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/pYBuWde5cJKZb1pJmmaYr8iO1LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.190.0/24
Signature Algorithm: sha256WithRSAEncryption
af:c1:29:2d:ab:4a:3f:cd:1f:22:11:cc:41:6b:85:e8:f1:0d:
0b:2f:ae:5d:1a:93:00:47:65:28:77:65:0e:73:71:79:e4:5d:
e1:a6:b3:b5:84:15:96:15:ad:b7:e0:a9:dc:cf:74:3d:60:71:
bd:ff:b4:cb:be:69:c9:c1:48:33:78:1c:92:88:54:8d:81:bc:
b3:88:22:1f:f5:84:0c:b7:f6:dc:af:f9:92:d0:7d:61:08:9c:
2c:3e:73:2c:3b:d0:9b:a2:1d:f5:81:d3:af:45:d1:ef:ee:bb:
92:36:92:d7:f1:72:bd:89:85:f4:23:d6:15:79:28:d0:02:48:
51:60:fa:d9:bb:44:6b:57:b1:31:77:c2:14:1a:ef:02:22:07:
c7:71:06:dc:fb:82:d8:a6:47:54:c8:8c:27:30:91:bf:eb:ce:
f9:54:b9:97:ab:53:b3:9c:92:84:10:b8:df:88:67:55:65:c7:
2b:ba:c2:9d:25:f1:af:ab:17:e2:2e:38:b1:9a:85:39:c7:58:
89:be:1b:fd:2c:0f:54:07:96:da:5f:6f:9c:ff:3e:23:59:c3:
88:33:d6:15:ac:57:0a:5c:2f:ee:77:3c:7b:81:9b:1f:67:b1:
dc:cd:6e:cb:e7:cd:a3:cc:3b:50:59:3d:d2:a4:b2:37:69:c2:
f1:30:74:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:00 2024 by rpki-client on console-ams.rpki-client.org