Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/_1kSk-k_0ZrfCCihaH1pkgRswOc.roa
File: _1kSk-k_0ZrfCCihaH1pkgRswOc.roa (raw, json)
Hash identifier: EAecLPjmySbJRT1Xr/qG+7MlDc75FEjTD1mrhSUqO3o=
Subject key identifier: FF:59:12:93:E9:3F:D1:9A:DF:08:28:A1:68:7D:69:92:04:6C:C0:E7
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 01856B8A113512DD65C2965EC7E867DDB8D6
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/_1kSk-k_0ZrfCCihaH1pkgRswOc.roa
Signing time: Sun 01 Jan 2023 04:14:48 +0000
ROA not before: Sun 01 Jan 2023 04:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201041
IP address blocks: 46.229.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:11:35:12:dd:65:c2:96:5e:c7:e8:67:dd:b8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jan 1 04:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff591293e93fd19adf0828a1687d6992046cc0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a8:f1:0a:9d:f9:17:77:73:3b:e1:69:69:ff:
8e:30:cb:2f:7a:d5:de:0a:9a:47:20:73:e2:6f:24:
c6:c4:bf:50:5f:58:f7:0f:3d:02:37:ff:80:b9:49:
24:85:c4:c9:ac:c0:cd:b5:a1:38:8c:20:ed:7c:f0:
d5:2c:63:49:c1:87:73:ea:16:26:59:39:0e:f4:79:
49:84:21:e8:55:6a:14:53:3a:70:a0:cd:39:2a:e4:
34:f6:9d:98:69:9f:4a:28:64:8a:38:75:51:e5:3c:
bc:1c:60:17:f0:6f:3d:be:66:60:c0:84:41:fb:7e:
79:b0:c6:7f:32:a7:6d:8e:99:f9:3a:99:2d:e2:a6:
25:1c:3b:a5:68:c7:38:6b:27:6f:05:82:b5:c8:f9:
57:99:b5:8c:99:89:05:dc:b7:01:36:40:16:6f:10:
3e:da:1b:77:89:08:4f:42:60:89:ca:76:2c:9d:cf:
88:09:d5:7f:0d:8d:ca:74:9f:3a:e5:6f:75:5d:0b:
f3:e3:65:49:6b:81:3f:d5:19:6c:c3:f1:11:cb:13:
bf:6d:38:5e:44:df:c6:06:08:a8:aa:18:79:81:59:
d8:5e:db:6b:97:f2:5e:51:f3:91:5c:03:88:48:4d:
00:4c:32:56:4a:e0:37:45:c7:2a:26:b8:4d:7c:aa:
bf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:59:12:93:E9:3F:D1:9A:DF:08:28:A1:68:7D:69:92:04:6C:C0:E7
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/_1kSk-k_0ZrfCCihaH1pkgRswOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.60.0/24
Signature Algorithm: sha256WithRSAEncryption
06:68:0f:d3:9e:28:79:54:a1:2e:24:27:de:e6:b0:c6:e9:67:
1e:74:77:88:d1:c2:9d:cf:07:c5:e8:eb:a4:ee:02:6f:9e:ec:
57:1a:5c:bc:d9:66:59:52:8d:84:f7:1f:1d:26:86:7b:a5:7a:
fb:a0:5f:e1:b8:c4:66:e3:7d:f1:be:7b:9d:b4:c5:63:58:0d:
0f:a6:bc:d9:6f:11:fd:a7:e0:e4:56:3d:69:9c:29:12:71:20:
cf:1f:7a:ce:3b:95:4b:07:22:b6:81:c2:ee:60:37:82:fe:c4:
4b:a9:56:86:30:fe:5f:c8:5e:2e:0f:e1:a4:48:37:a6:ae:b2:
69:da:91:b7:7d:b8:ee:e0:ce:d5:c7:5e:a8:90:e8:8b:1c:ef:
c4:50:8b:6f:5d:eb:84:63:ed:26:c4:97:62:99:1d:41:ea:56:
b9:08:5d:4a:06:18:ad:11:d7:49:80:cc:ba:a9:6a:05:45:ad:
cf:e1:21:dc:8e:de:ef:c0:c1:23:98:33:96:1d:60:05:11:cd:
f3:38:da:1e:f2:49:fd:ca:76:43:af:71:03:07:be:54:eb:20:
4e:b0:65:67:17:95:a7:99:49:b7:35:8a:d6:e4:cb:c8:e0:fa:
76:4c:d6:ca:19:e9:8d:dd:7d:1b:e4:6e:62:24:13:07:fe:59:
a7:1c:3e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:42 2024 by rpki-client on console-ams.rpki-client.org