Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/G6eVIaPSrcVfD8ZUO8yIm5yx4KI.roa
File: G6eVIaPSrcVfD8ZUO8yIm5yx4KI.roa (raw, json)
Hash identifier: 9MTwdCmcEg6onocACliZ8LZouDUyce84nd+oetx4jcY=
Subject key identifier: 1B:A7:95:21:A3:D2:AD:C5:5F:0F:C6:54:3B:CC:88:9B:9C:B1:E0:A2
Certificate issuer: /CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Certificate serial: 01856DAF5CEE936B3EA45F8070A060CC6033
Authority key identifier: 80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/G6eVIaPSrcVfD8ZUO8yIm5yx4KI.roa
Signing time: Sun 01 Jan 2023 14:14:47 +0000
ROA not before: Sun 01 Jan 2023 14:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29686
IP address blocks: 46.243.74.0/23 maxlen: 24
46.243.73.0/24 maxlen: 24
46.243.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:af:5c:ee:93:6b:3e:a4:5f:80:70:a0:60:cc:60:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Validity
Not Before: Jan 1 14:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ba79521a3d2adc55f0fc6543bcc889b9cb1e0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f2:18:27:43:9c:d5:6a:92:82:2e:b5:3d:ec:
d8:2a:cc:50:3e:7d:04:0e:3b:0e:ab:b4:e7:6d:44:
c8:da:ff:17:dd:2f:7c:8a:d7:54:94:23:ee:1b:8a:
21:cc:b5:b9:bf:a0:96:42:3f:e6:28:9f:d3:17:ff:
a5:ee:50:f1:ee:8d:53:89:b7:55:8f:00:13:1d:f3:
58:c4:51:42:26:07:f5:e9:11:f3:43:1c:ed:14:d3:
76:50:07:d3:c8:ca:1b:5a:8e:9c:be:87:47:37:ff:
86:5c:82:33:aa:3a:c7:41:f1:b1:a3:d8:c4:01:a8:
70:38:4e:01:c9:90:dd:7e:2c:24:64:35:24:7a:99:
58:2a:b0:0b:45:8a:37:fe:88:fd:ce:6c:f0:af:a9:
55:d4:6e:3d:b7:07:dd:54:0f:96:4a:65:56:50:a8:
d8:0a:b5:7c:c9:b7:3d:23:2e:53:f1:f1:1f:96:8c:
42:03:d1:58:a8:98:3a:31:23:38:51:65:75:59:97:
ff:2d:42:00:eb:18:5b:9d:75:24:ca:23:70:c4:dc:
cb:e2:5e:70:ca:57:c7:0c:8d:49:66:ec:3d:19:34:
eb:0f:86:f7:70:92:c8:2c:44:0b:e4:2a:15:e5:7e:
c2:3d:61:88:b1:17:d7:8e:42:de:fb:87:98:73:33:
9f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A7:95:21:A3:D2:AD:C5:5F:0F:C6:54:3B:CC:88:9B:9C:B1:E0:A2
X509v3 Authority Key Identifier:
keyid:80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/G6eVIaPSrcVfD8ZUO8yIm5yx4KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.72.0/22
Signature Algorithm: sha256WithRSAEncryption
89:26:5e:6d:ca:00:92:54:9e:a6:59:0b:10:a6:c3:57:72:a5:
21:4f:ff:51:32:3b:5f:4e:6b:8c:b7:31:d1:39:20:a0:9c:4a:
74:35:ac:76:f8:1c:58:6a:fd:32:8b:01:8e:1f:40:71:7a:c4:
99:e9:1d:ca:b3:19:db:bd:03:cd:08:b8:e7:db:cf:65:ea:e7:
4e:12:f3:49:a5:b1:bc:2d:e1:d8:28:a4:90:70:3d:ed:9b:bc:
4b:08:cb:8e:09:29:2d:25:f7:28:48:2e:34:b9:d5:fd:ef:b0:
85:c4:b6:58:7f:c9:7f:e8:88:fb:14:f2:d3:4d:34:0c:96:0d:
a9:af:d0:64:b3:09:cf:6d:1c:2f:30:43:80:76:6c:f8:1a:92:
81:d1:1c:9b:a5:ea:7e:3e:8c:58:02:f4:21:7c:4d:0d:72:dc:
22:48:60:9b:04:78:66:7b:37:df:f0:24:03:a5:1c:c0:41:45:
cf:27:12:5b:a4:4c:8c:12:c9:d5:9e:d2:f5:fb:35:fc:de:d2:
e6:fd:45:ce:a6:e9:1b:bf:38:89:38:4c:9f:03:73:7a:0f:0b:
00:1d:9d:53:6b:4a:6a:16:41:cb:ed:d9:ad:0c:3f:cd:06:50:
75:9d:8f:3c:17:51:d0:fb:0c:77:cc:56:41:90:a5:65:13:7f:
d9:d8:02:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:59 2024 by rpki-client on console-fra.rpki-client.org