Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/TdUrwA_Dr0rWMOWlL4bLUaoG_VM.roa
File: TdUrwA_Dr0rWMOWlL4bLUaoG_VM.roa (raw, json)
Hash identifier: f5B1r7tdEevOH0N47ygOXGfmz/Il5fn2PbD+jZDTh3Q=
Subject key identifier: 4D:D5:2B:C0:0F:C3:AF:4A:D6:30:E5:A5:2F:86:CB:51:AA:06:FD:53
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 01856F94B7864DAAAAFEF86015649D7FD9E1
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/TdUrwA_Dr0rWMOWlL4bLUaoG_VM.roa
Signing time: Sun 01 Jan 2023 23:04:55 +0000
ROA not before: Sun 01 Jan 2023 23:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196925
IP address blocks: 46.32.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 May 2023 11:53:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:b7:86:4d:aa:aa:fe:f8:60:15:64:9d:7f:d9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Jan 1 23:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4dd52bc00fc3af4ad630e5a52f86cb51aa06fd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:81:a2:7c:f7:a7:ad:56:5b:59:3a:5e:6b:be:
1f:f4:e2:66:3b:4d:04:dd:d5:d7:f4:c0:9e:18:f8:
e3:55:31:6c:ab:77:eb:95:c1:da:8a:e7:42:e6:8a:
31:df:8e:eb:2e:30:2e:f0:08:2f:f1:6a:aa:47:35:
59:49:3f:e5:a6:20:c3:bc:55:b1:fb:2b:97:10:90:
e9:ef:f0:f0:42:da:43:4b:37:22:4e:a1:f8:ea:79:
b1:31:9b:f1:bc:12:85:19:44:d1:dd:b9:02:52:e8:
24:d5:3a:7c:7f:6f:93:25:8a:1b:41:38:a7:98:f5:
b0:7a:db:d0:6b:43:ec:79:81:28:44:50:09:81:19:
5b:17:29:8d:06:ec:c2:e8:b5:c8:bf:ba:d1:46:0b:
d9:0c:39:d3:b4:64:d8:f2:e6:76:40:90:45:19:01:
6b:27:4d:85:51:9a:0a:b7:5d:f5:00:da:2b:c4:26:
90:c9:09:2d:fc:63:97:6b:09:6d:9b:59:37:7e:40:
29:79:64:99:07:ea:a2:e5:78:8a:1f:ae:cd:67:b0:
63:5b:c2:a1:8c:9b:37:46:a8:89:81:c2:0f:36:71:
ab:71:7b:88:3c:b9:20:d9:bb:86:5c:9d:ab:81:04:
34:29:60:36:9b:3a:ce:b9:11:c3:1f:c7:eb:80:e4:
d5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D5:2B:C0:0F:C3:AF:4A:D6:30:E5:A5:2F:86:CB:51:AA:06:FD:53
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/TdUrwA_Dr0rWMOWlL4bLUaoG_VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.169.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:11:29:ed:5a:7f:29:f4:dc:6a:fe:6b:b6:1d:cd:8f:e5:9b:
dc:43:9e:67:05:87:a5:3d:d7:3c:e8:7b:e4:e4:b5:e5:70:0f:
0a:a3:9c:20:d6:07:38:b0:36:b1:11:3b:e1:fb:18:7b:dc:81:
85:1e:da:d8:8b:54:67:76:06:e0:3f:6d:6c:74:dd:33:b9:eb:
1a:d4:65:90:f9:43:81:36:1f:ef:b0:d2:9d:90:d8:6d:24:5c:
f3:0a:2b:2c:f7:b3:04:2a:14:31:f4:fa:e5:8a:5e:4f:1e:b0:
4f:8c:ae:00:5e:b6:44:78:da:f0:88:0e:b4:a2:08:b2:4f:d1:
40:9c:2f:9c:01:3c:41:8f:bc:8c:41:bf:d4:05:b6:25:c3:e4:
26:27:3d:9d:67:a3:35:13:be:0d:1c:cd:db:eb:ad:fb:8c:e0:
17:dc:74:a3:f8:6b:e0:ae:62:cd:48:62:19:a8:e7:8b:10:d2:
a7:3d:57:ee:97:dc:62:73:e2:ed:b6:12:78:ff:b8:a8:a4:e5:
a0:94:32:52:4b:90:26:d6:ef:90:07:ff:18:66:cd:fb:a6:79:
98:40:c8:99:f3:ea:26:c2:d1:ef:4f:ec:52:33:ba:0d:87:c8:
19:71:8d:e3:73:95:3b:53:d6:a7:59:17:e2:d4:55:b9:3f:2a:
18:68:d7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:11 2024 by rpki-client on console-fra.rpki-client.org