Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/f0ISb8rR3hmSwArizZt3N9r7wDY.roa
File: f0ISb8rR3hmSwArizZt3N9r7wDY.roa (raw, json)
Hash identifier: qQ/gRaja94hzC42Kgi4IK9jK5VhsxxMVBOtPr39XgdI=
Subject key identifier: 7F:42:12:6F:CA:D1:DE:19:92:C0:0A:E2:CD:9B:77:37:DA:FB:C0:36
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 0188BA195A81E9C61670074AAD9DE71617EC
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/f0ISb8rR3hmSwArizZt3N9r7wDY.roa
Signing time: Wed 14 Jun 2023 13:30:03 +0000
ROA not before: Wed 14 Jun 2023 13:30:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 46.228.131.0/24 maxlen: 24
46.228.136.0/23 maxlen: 24
46.228.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Jun 2023 13:52:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ba:19:5a:81:e9:c6:16:70:07:4a:ad:9d:e7:16:17:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jun 14 13:30:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f42126fcad1de1992c00ae2cd9b7737dafbc036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:95:09:b7:74:d8:df:af:89:8a:02:87:da:9d:
3b:4d:8c:3b:56:3c:8c:82:a3:51:0e:b3:eb:81:ff:
a0:05:23:78:fb:ad:12:02:2b:1d:14:a6:66:e7:12:
5e:57:3c:fb:3e:9c:29:7b:8c:f1:7b:e8:31:93:93:
7e:a2:d8:48:9d:8d:5b:d9:dc:3e:48:18:05:03:1b:
a1:b1:b6:a8:5c:ac:bf:62:ea:8a:0b:e6:e6:e2:5a:
29:0d:e4:9d:a6:12:67:46:b7:2a:27:8c:52:13:cf:
15:47:1c:20:0f:31:bf:40:34:ac:5a:34:be:67:62:
bc:95:98:bf:4a:0b:7b:cc:cb:b2:bc:8f:1f:1e:0e:
6f:99:03:c3:e4:2a:a3:7a:e8:38:2b:93:e1:2f:48:
89:03:97:32:d9:20:4c:ae:46:a2:0e:14:d5:7d:75:
60:43:f7:ad:6b:62:62:f7:b9:f1:79:10:ee:fb:75:
5b:ed:21:3f:06:02:5d:a3:9c:53:fc:24:3b:05:31:
d8:2b:18:1a:0b:c0:8d:6d:17:12:3a:73:cf:e2:f7:
64:e2:e0:d1:0e:fa:cb:5d:a9:65:b1:52:0f:84:db:
f3:a4:07:ab:ef:2f:a0:f4:b5:f0:38:73:ca:c3:a8:
f2:d3:22:6c:26:3e:6a:24:7e:8a:43:c7:1c:bd:d1:
4e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:42:12:6F:CA:D1:DE:19:92:C0:0A:E2:CD:9B:77:37:DA:FB:C0:36
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/f0ISb8rR3hmSwArizZt3N9r7wDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.131.0/24
46.228.135.0-46.228.137.255
Signature Algorithm: sha256WithRSAEncryption
1e:82:70:92:a9:41:f4:70:33:79:33:96:33:b6:f5:ce:ff:d4:
d7:42:10:42:42:30:9f:ed:56:7c:3a:80:a9:00:6f:da:3c:92:
d7:92:a4:04:83:fe:38:99:c2:ea:8a:a0:0c:a5:15:9c:34:3b:
6a:73:7e:5e:d4:5e:89:7f:99:af:75:ec:31:a8:31:0a:ac:53:
2d:62:ab:e8:57:4c:7c:dd:f3:8d:f4:55:10:fb:c9:08:78:51:
66:1c:48:88:49:c9:69:82:54:ca:c3:fa:6d:e1:24:c4:22:56:
ed:68:be:47:74:25:d4:43:2e:65:90:61:c0:3a:63:a4:98:15:
60:64:4d:99:a6:86:9b:c4:c4:83:2b:f9:cc:77:0b:dc:ad:4f:
4d:c8:3b:31:ba:a6:43:09:f1:e7:10:70:4d:4d:f3:3e:a5:ce:
ed:5d:5b:79:13:95:4a:2e:f7:73:5a:be:8b:c1:ff:9b:b3:76:
3a:d0:ea:67:46:26:9d:39:1a:a9:4b:be:84:e9:cb:73:88:5d:
37:69:8f:7d:36:87:11:ef:32:62:af:ed:13:d2:26:89:3b:e9:
87:28:27:78:03:74:fb:37:a1:27:75:9e:19:1f:c8:90:e6:7a:
2e:18:f5:a1:3b:94:be:a1:04:5d:bc:b4:48:ec:a1:08:57:a5:
5c:d7:06:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:08 2024 by rpki-client on console-fra.rpki-client.org