Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/7hZcUlW3UYc3J6_nZbpCdLuOGK8.roa
File: 7hZcUlW3UYc3J6_nZbpCdLuOGK8.roa (raw, json)
Hash identifier: VM2eO7SFIS1rTGWWNMQJMbfy7nqiYsBk5pRg7aSCZbI=
Subject key identifier: EE:16:5C:52:55:B7:51:87:37:27:AF:E7:65:BA:42:74:BB:8E:18:AF
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 018BC960F9943B1EE5752E0C89B6E2689392
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/7hZcUlW3UYc3J6_nZbpCdLuOGK8.roa
Signing time: Mon 13 Nov 2023 15:50:57 +0000
ROA not before: Mon 13 Nov 2023 15:50:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20454
IP address blocks: 46.226.160.0/21 maxlen: 32
Validation: Failed, certificate revoked on Wed 15 Nov 2023 08:24:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c9:60:f9:94:3b:1e:e5:75:2e:0c:89:b6:e2:68:93:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Nov 13 15:50:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee165c5255b751873727afe765ba4274bb8e18af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:43:1c:73:ad:d0:df:0c:da:f8:90:4b:6d:bd:
a0:e1:3f:4f:b9:9e:e0:37:da:c0:6b:fb:96:99:f8:
82:89:1a:33:e8:bf:5d:a4:23:f0:e9:f0:ec:56:88:
7d:95:d9:44:3f:62:b0:3b:a2:59:2a:64:35:72:f3:
86:5d:65:6e:e9:fc:f2:2c:95:10:db:96:13:4b:c8:
db:0a:4f:45:10:74:18:81:d7:a6:cf:4e:55:13:63:
d1:7f:50:2a:62:8a:6e:b4:87:8e:9b:37:90:21:c5:
df:20:21:df:72:d5:bb:46:9c:4d:bd:82:5d:6c:18:
78:83:76:aa:d3:c8:e1:d5:9d:a3:ca:04:96:68:88:
6d:22:07:03:96:2c:73:0a:7c:a6:e0:e9:9e:be:9c:
ea:eb:4d:65:cc:83:a7:2c:d2:28:00:2d:54:ef:39:
b4:9a:55:80:c9:e9:74:54:e6:d7:88:d9:47:a4:1f:
47:23:fb:86:1f:a9:77:c4:5c:0f:b5:e9:93:43:44:
65:dd:72:22:1e:7d:39:81:8b:7a:e0:a1:b4:87:67:
3e:a3:fc:a6:ef:75:df:e1:2b:e3:1d:95:c3:0b:ca:
0d:b4:e5:bc:4c:52:8a:9f:4b:a5:65:81:cd:ae:fd:
dc:3c:5f:1e:b4:93:37:8f:e8:30:4d:b6:22:82:0d:
c9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:16:5C:52:55:B7:51:87:37:27:AF:E7:65:BA:42:74:BB:8E:18:AF
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/7hZcUlW3UYc3J6_nZbpCdLuOGK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.160.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:29:76:b7:d3:b7:ec:8f:1d:da:71:a2:88:02:4d:4f:ce:d5:
68:68:a8:8c:a1:86:cd:a9:9b:5d:2b:b1:9c:81:cf:b0:0b:48:
d9:be:0e:8d:e5:e2:8c:19:33:14:51:71:01:09:96:76:aa:17:
22:36:68:87:cf:b5:70:83:11:3a:6e:6a:43:c2:f8:50:00:c4:
6c:02:f7:7c:6e:37:4a:06:2b:fb:10:39:a7:f1:00:8d:84:d2:
8f:0f:09:e4:89:c5:cf:5e:3c:21:88:d6:6f:61:a0:9c:88:37:
8e:72:99:e4:bc:2a:8e:40:79:3c:6c:49:23:c0:93:6d:56:78:
ce:16:8d:0d:8d:81:26:98:f2:fc:51:38:1d:05:89:71:c0:4b:
ca:5f:2a:ed:91:88:d5:b7:07:8d:b6:90:39:f1:23:7d:18:ce:
4a:64:fb:f9:fa:32:6e:5c:4b:c2:96:45:53:2c:88:40:34:15:
03:6e:47:81:9e:c1:8c:80:46:0f:e5:ff:72:9f:d3:20:df:c2:
70:c0:70:96:82:47:b5:4e:06:63:85:47:1f:a4:ad:7d:4c:e7:
9c:4a:b8:7e:35:35:8a:11:9d:b4:1b:e8:71:fa:8e:31:ac:41:
4c:5a:85:5a:fa:d8:e5:85:7e:41:ac:b0:9d:47:ff:27:1b:42:
ef:c8:e7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:44 2024 by rpki-client on console-fra.rpki-client.org