Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/mMGAyZfQBS2pZ2VBRzuBz9uRUwY.roa
File: mMGAyZfQBS2pZ2VBRzuBz9uRUwY.roa (raw, json)
Hash identifier: WJG0P/wmUbiZKhQ6iQYX3R3ckStOiIolsOkBrIcmc/g=
Subject key identifier: 98:C1:80:C9:97:D0:05:2D:A9:67:65:41:47:3B:81:CF:DB:91:53:06
Certificate issuer: /CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Certificate serial: 01856E6FDC892C91260D44C0798690F7600C
Authority key identifier: 05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/mMGAyZfQBS2pZ2VBRzuBz9uRUwY.roa
Signing time: Sun 01 Jan 2023 17:45:02 +0000
ROA not before: Sun 01 Jan 2023 17:45:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51764
IP address blocks: 46.235.49.0/24 maxlen: 24
46.235.50.0/24 maxlen: 24
46.235.51.0/24 maxlen: 24
46.235.48.0/24 maxlen: 24
46.235.54.0/24 maxlen: 24
46.235.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:dc:89:2c:91:26:0d:44:c0:79:86:90:f7:60:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Validity
Not Before: Jan 1 17:45:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98c180c997d0052da9676541473b81cfdb915306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4b:b6:68:9b:f7:ee:41:80:13:d6:8e:31:7d:
01:a1:26:bf:16:04:f5:a2:6e:1f:03:e4:50:a5:7c:
ec:8d:a9:8c:33:ed:8d:5d:0d:d3:83:dc:64:c8:9e:
f9:83:11:cf:5b:6a:a5:d0:2e:87:5d:82:12:9d:a9:
f6:d3:f2:45:a7:12:12:5e:e8:e9:7a:e1:f6:27:59:
f3:cf:01:84:b7:76:a3:64:6a:1b:74:79:91:74:f1:
c7:11:4a:12:80:10:71:4b:c8:15:3c:67:8d:0b:1e:
94:f1:f2:a1:39:11:69:75:4d:6a:ed:a1:f7:7e:8d:
1f:2a:75:44:e2:b1:f9:03:b1:e1:df:84:3b:06:70:
e7:5f:d8:2d:ac:09:be:aa:a4:31:5b:97:3c:d7:d1:
af:18:e8:3a:28:39:a2:3d:ba:07:3c:46:bf:4e:76:
27:59:79:2a:69:72:7c:b0:09:4b:3e:b6:04:2f:78:
27:bb:84:b3:81:42:9e:94:6c:f1:9f:5e:fa:d1:2a:
69:81:a0:73:9c:8d:2a:4d:ae:5e:84:11:be:22:dc:
4b:b4:71:28:a4:74:0c:8b:2b:3f:0f:bd:2f:74:26:
54:9a:cf:b9:0a:bd:b5:ca:6c:a2:d5:83:75:47:6c:
09:ba:e0:ba:64:d5:de:bf:55:e0:48:f6:ce:63:9c:
45:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C1:80:C9:97:D0:05:2D:A9:67:65:41:47:3B:81:CF:DB:91:53:06
X509v3 Authority Key Identifier:
keyid:05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/mMGAyZfQBS2pZ2VBRzuBz9uRUwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.48.0/22
46.235.54.0/23
Signature Algorithm: sha256WithRSAEncryption
26:21:e8:3e:e8:7e:a5:90:f2:51:da:ec:1c:70:0b:88:77:c1:
fd:be:d6:ff:ad:bd:5f:a4:c0:0d:87:d1:70:3d:f2:23:ff:f0:
7b:c3:e0:4f:66:3d:65:59:c1:83:d4:54:5b:72:49:a1:e8:f7:
c8:91:70:ca:b4:00:58:ff:a4:c8:63:34:8f:bf:5e:44:e4:5c:
a8:87:f5:a5:7e:6b:21:bb:1d:a7:57:46:75:db:a1:dc:24:4b:
40:bb:03:29:6e:3f:2c:ae:b4:97:dd:61:9b:e5:bb:6a:cc:d6:
d6:1b:b8:b4:97:48:06:ad:7d:91:ca:01:ec:34:84:cb:b7:50:
45:e7:e0:d4:19:30:c4:fe:7f:9b:28:12:64:b0:b7:ac:47:c3:
f0:ba:51:07:8c:93:5b:78:2a:5b:d7:bd:6a:aa:5f:2d:79:56:
65:02:c0:92:41:88:46:23:1c:ac:2a:d5:22:bc:e4:af:77:ec:
3f:e0:6b:0d:2d:2e:79:46:fd:3a:36:eb:26:5a:62:ea:26:67:
d1:1f:a0:32:be:ff:62:49:8a:cf:f7:7d:33:39:6c:b8:20:67:
18:59:8b:b1:c5:46:31:ba:8e:b9:12:3a:a1:00:25:ce:8e:92:
36:7b:88:d7:3b:22:7f:50:72:73:c3:d1:b6:0b:53:2a:d0:96:
85:18:f8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:03 2024 by rpki-client on console-ams.rpki-client.org