Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Z3nlrybwbsoQB-l8zkjQj52_y3Q.roa
File: Z3nlrybwbsoQB-l8zkjQj52_y3Q.roa (raw, json)
Hash identifier: F5tWIxEQUCAklvYEWWfJ2+ldzIpIqFXoB9LzHmXnPaY=
Subject key identifier: 67:79:E5:AF:26:F0:6E:CA:10:07:E9:7C:CE:48:D0:8F:9D:BF:CB:74
Certificate issuer: /CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Certificate serial: 0185BEBC2DD2DFB8F4BA268327DEB4BDA1A3
Authority key identifier: DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Z3nlrybwbsoQB-l8zkjQj52_y3Q.roa
Signing time: Tue 17 Jan 2023 07:58:01 +0000
ROA not before: Tue 17 Jan 2023 07:58:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 185.246.172.0/22 maxlen: 32
46.232.208.0/23 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:be:bc:2d:d2:df:b8:f4:ba:26:83:27:de:b4:bd:a1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Validity
Not Before: Jan 17 07:58:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6779e5af26f06eca1007e97cce48d08f9dbfcb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2d:88:c7:d3:ad:51:74:6c:ab:9c:19:f7:b7:
cf:4a:ca:6e:f7:02:1c:f4:ce:57:af:17:a5:ab:08:
e0:52:94:42:7e:16:1a:5b:04:ef:59:c8:f3:2d:67:
9f:6c:84:bf:c1:12:cf:c1:f6:26:58:c5:72:ef:5f:
83:4b:1f:bf:f3:86:54:a6:e9:b9:15:54:4b:11:a4:
f8:3a:0f:e4:71:ca:3b:00:49:35:c1:9e:c7:dd:66:
2c:fc:95:44:93:6d:68:dc:80:77:34:fd:d2:5a:4c:
f8:03:57:b3:8f:bb:76:cd:bf:cb:63:3e:d9:01:f7:
24:01:77:17:ad:f6:b4:47:ba:e9:71:93:6f:7e:dd:
84:e6:74:9f:50:34:a3:dd:6b:4b:93:3e:c1:63:5a:
5e:48:c8:cc:d9:f6:35:53:3f:31:32:3a:3e:47:a7:
cf:42:a0:66:3b:02:66:e7:a3:df:58:8a:95:9b:59:
b0:91:e8:1e:8d:97:2c:b9:70:3b:80:81:eb:16:cf:
c7:18:36:0a:3c:0f:6e:4c:ae:10:89:03:18:32:07:
99:55:98:56:6f:bc:4b:4d:80:8b:ec:30:48:e9:8b:
6c:d6:1d:2b:81:c7:47:72:b6:7f:9c:8c:09:47:f3:
ca:77:f3:f3:5f:b0:a7:2e:7d:8e:42:47:1f:7e:6a:
bd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:79:E5:AF:26:F0:6E:CA:10:07:E9:7C:CE:48:D0:8F:9D:BF:CB:74
X509v3 Authority Key Identifier:
keyid:DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Z3nlrybwbsoQB-l8zkjQj52_y3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.208.0/23
185.246.172.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:48:61:96:6f:55:24:6c:28:bb:0b:b8:80:cb:a0:35:75:12:
f6:de:4b:82:38:38:51:e9:5a:31:ef:17:4f:12:03:aa:35:b1:
a9:be:8b:8b:3d:4a:a9:4b:8a:ff:ee:f8:a9:ec:46:37:e1:d1:
ba:69:cc:27:f2:c7:31:af:ea:21:71:62:58:47:6a:03:af:bf:
e7:f6:5d:36:1c:19:9d:10:50:48:fa:b7:22:4c:c9:f5:51:c6:
b3:6a:e7:3b:04:d2:85:54:5e:0f:13:5f:e4:f7:ac:2f:db:88:
ef:44:fe:b9:07:3c:bd:f1:40:92:dd:97:38:96:05:db:e4:d1:
cb:9f:10:16:c1:25:61:80:aa:32:94:41:f3:62:a4:7f:e1:f9:
34:44:29:e9:6f:f5:63:a6:e5:64:4d:1f:8d:29:63:79:53:64:
69:63:4a:34:25:ef:e6:9d:a0:65:7b:4c:de:33:13:29:45:4a:
94:a7:0a:ff:dd:ba:1f:ce:30:99:c7:cd:de:ab:08:58:7f:d6:
fb:e9:97:6f:6f:67:6d:88:fa:9b:f3:0e:89:e2:22:de:09:e8:
c3:a8:c4:b8:3b:be:8a:83:19:70:48:86:d3:dc:10:4a:08:d7:
05:d8:7a:71:a4:b7:e4:2a:49:83:be:4d:f0:3f:0c:7f:45:20:
5d:d6:c1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:58 2024 by rpki-client on console-fra.rpki-client.org