Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/fIUI6WckXZOnAq_S5ymtdHtd2_g.roa
File: fIUI6WckXZOnAq_S5ymtdHtd2_g.roa (raw, json)
Hash identifier: gHcYNKamDw3xgewUgbEQ56lyfIEKGV4lvyIFIJOKOs4=
Subject key identifier: 7C:85:08:E9:67:24:5D:93:A7:02:AF:D2:E7:29:AD:74:7B:5D:DB:F8
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 0187FC33DA38E2AE26CAE19B354C67C54989
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/fIUI6WckXZOnAq_S5ymtdHtd2_g.roa
Signing time: Mon 08 May 2023 16:31:09 +0000
ROA not before: Mon 08 May 2023 16:31:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203727
IP address blocks: 185.46.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Dec 2023 17:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fc:33:da:38:e2:ae:26:ca:e1:9b:35:4c:67:c5:49:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: May 8 16:31:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c8508e967245d93a702afd2e729ad747b5ddbf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f4:7e:8a:f7:1b:da:ae:46:15:72:c9:4e:d3:
c4:c0:84:16:79:b7:67:46:f3:90:c1:da:f9:e8:00:
2a:a9:cc:8a:f0:2b:08:cd:19:27:63:94:57:fb:94:
71:93:18:29:a8:87:ab:ed:ea:c3:69:75:3f:8d:e3:
32:13:14:a0:6e:06:36:be:a0:bd:97:0d:f4:5c:4a:
d8:af:0e:f1:a6:75:b3:0e:37:cf:6c:1e:27:45:5d:
98:50:b8:70:92:af:42:a9:8c:35:5d:b7:99:c4:85:
e7:56:1a:2f:c0:9c:2c:57:8f:26:6c:30:59:77:fe:
95:3f:7b:24:7c:dd:85:48:7c:59:07:b2:2d:f3:83:
01:4c:91:aa:a9:64:60:aa:4b:c1:56:0b:39:27:89:
19:ee:af:44:7b:f1:48:df:86:fd:dc:aa:41:65:e5:
db:13:16:32:a5:80:21:f4:b3:75:6b:09:58:e1:08:
d2:7c:8f:60:ac:83:ed:cc:ac:0b:84:04:fb:90:89:
72:46:0b:96:65:f9:76:0a:d0:95:14:f6:63:1d:db:
39:ec:f7:1b:ff:e9:c5:72:d3:c4:57:95:46:7f:58:
7e:4b:48:f8:75:cc:e3:de:c7:2d:64:1c:8a:a8:38:
66:57:41:ed:e3:16:1c:ca:f8:2a:c8:0b:0b:f0:e8:
8d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:85:08:E9:67:24:5D:93:A7:02:AF:D2:E7:29:AD:74:7B:5D:DB:F8
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/fIUI6WckXZOnAq_S5ymtdHtd2_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.46.0/24
Signature Algorithm: sha256WithRSAEncryption
12:96:11:74:aa:84:68:67:d6:cf:f8:7e:de:05:44:fd:36:fe:
3f:a7:e1:62:cb:d5:ca:1b:a8:ef:55:e2:0a:c6:50:8d:47:a5:
df:5b:9a:4a:1a:07:51:27:91:c5:8b:17:2a:79:56:ee:76:22:
26:ae:f8:de:1e:e0:76:7d:5f:72:85:5e:e5:d5:ea:c6:ef:62:
d3:48:6b:24:63:1e:f1:c7:d5:fd:6f:16:6e:57:2f:f4:4b:9b:
d9:1b:be:91:73:28:29:51:d8:a1:5c:fd:99:86:ea:fb:7c:a6:
43:69:97:81:2b:91:55:2d:97:f8:b9:e9:f0:49:79:09:6c:49:
7c:17:bc:ae:cf:17:96:81:02:e8:e2:24:76:04:26:2c:73:74:
3b:c1:4e:51:2b:d1:d4:1f:b9:2f:fd:f3:b9:0d:a8:e3:6a:22:
4e:b9:20:2b:a4:89:0b:02:20:8b:90:32:1c:d6:51:ae:bb:b4:
54:6c:b5:c0:86:6c:cb:20:5c:ab:bd:08:57:66:81:ce:e1:ff:
2e:0b:ae:90:38:cb:27:1d:1a:cc:fa:2c:ed:1d:85:73:88:cc:
71:0d:10:4e:06:15:ff:87:82:62:b1:25:9a:ce:76:4f:30:06:
0d:fc:28:7f:e6:0a:ed:98:e4:c2:69:7e:c6:9e:6f:8c:1a:a1:
7a:f2:9b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-fra.rpki-client.org