Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/cWmgwBE-FD_b_qxmQ3DbXLIFmoM.roa
File: cWmgwBE-FD_b_qxmQ3DbXLIFmoM.roa (raw, json)
Hash identifier: 3m4nc21UuuLBpCilgAX0ratBL7xYzDtxfWY1N8C40zY=
Subject key identifier: 71:69:A0:C0:11:3E:14:3F:DB:FE:AC:66:43:70:DB:5C:B2:05:9A:83
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 018891AE3097264DD0BE0B8697BCC4AA1137
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/cWmgwBE-FD_b_qxmQ3DbXLIFmoM.roa
Signing time: Tue 06 Jun 2023 17:08:11 +0000
ROA not before: Tue 06 Jun 2023 17:08:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 46.228.131.0/24 maxlen: 24
46.228.136.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Jun 2023 11:52:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:ae:30:97:26:4d:d0:be:0b:86:97:bc:c4:aa:11:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jun 6 17:08:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7169a0c0113e143fdbfeac664370db5cb2059a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bb:b4:c3:d7:0b:5c:98:37:9c:60:79:29:6c:
b6:3f:9c:40:b2:6b:d3:20:82:db:7c:40:44:4d:b4:
cd:da:37:fa:4d:ed:23:04:81:fa:51:5b:36:c6:57:
ac:28:37:9c:c0:20:ef:45:ab:ec:da:96:87:05:58:
18:e2:bf:3d:81:f2:3a:f7:a9:bc:3c:f5:f6:8c:fe:
aa:df:49:2c:ad:69:80:7f:cd:18:c0:ca:99:c2:83:
4a:81:b3:92:01:d3:1d:e4:7b:4a:b8:57:37:7a:52:
82:7b:27:51:6b:42:99:91:62:0c:d3:92:91:2d:36:
0e:92:bd:33:b5:76:0c:55:90:27:82:f4:4c:22:f3:
9b:c3:0b:c9:b8:7f:66:2b:ba:96:5b:d8:5d:36:9f:
0f:74:89:ef:bf:52:b9:3e:03:6d:ed:26:59:7d:cb:
62:4d:6f:a9:9b:14:56:af:62:06:09:58:a2:3c:03:
6f:d5:ce:a2:df:a6:9f:14:b2:1f:2e:59:06:ab:4c:
06:a3:00:b5:eb:43:95:83:5b:3b:3d:0f:a8:c2:c4:
43:f2:92:63:5a:5e:31:7b:e8:bc:8f:42:4c:70:f8:
03:0e:e0:95:e0:a5:58:1b:cc:b0:1d:46:59:b0:76:
f0:86:0a:3d:27:ac:ab:93:4a:b7:2f:e1:3a:a5:56:
ec:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:69:A0:C0:11:3E:14:3F:DB:FE:AC:66:43:70:DB:5C:B2:05:9A:83
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/cWmgwBE-FD_b_qxmQ3DbXLIFmoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.131.0/24
46.228.136.0/23
Signature Algorithm: sha256WithRSAEncryption
40:1d:e3:b8:be:6f:1c:a2:68:c8:7c:96:40:ff:2b:11:2c:ad:
65:28:85:a7:54:ff:f2:60:29:45:88:c6:99:a7:c8:10:b7:a6:
65:2e:1e:7b:9c:dd:2a:a5:4c:fa:9c:bd:b5:95:75:36:39:92:
1b:3c:59:26:2c:64:c3:4f:23:f4:1f:cf:af:d2:ae:4d:d5:ee:
e9:54:e5:bb:ea:44:c5:d4:a6:11:47:ac:cc:d3:73:c0:9a:80:
b1:9a:da:dc:3e:91:0b:80:1a:ba:96:e8:b7:6e:43:f5:53:87:
71:42:f9:53:00:02:f6:13:c6:9e:87:24:7d:29:c3:da:5e:00:
94:1e:b1:96:31:e6:c8:57:7a:95:1f:1b:c2:88:7f:f7:78:07:
b2:2b:ed:2e:bb:c6:34:1f:a2:50:47:ca:c0:49:b9:65:6a:60:
53:b8:73:09:9a:4c:dd:45:1a:ac:94:dc:19:62:87:dc:6d:78:
97:30:4e:ec:75:8d:b9:0b:f5:50:e9:6a:44:8a:3d:53:1f:0e:
58:11:cc:12:9a:f4:60:7f:1c:ae:70:40:54:97:ff:61:ec:5d:
ac:cb:f8:40:3d:9f:ae:f1:a8:73:da:e7:63:ab:2e:e3:9c:11:
36:76:e5:e3:ca:c9:9c:fb:65:2b:98:14:f1:46:dc:38:97:af:
89:51:14:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:18 2024 by rpki-client on console-ams.rpki-client.org