Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/V5a0cl28YmNSLBT84u6KhJp3flc.roa
File: V5a0cl28YmNSLBT84u6KhJp3flc.roa (raw, json)
Hash identifier: Mihmg64k3UCJMp8mZy/Ay0dFCkfJua4FtMUe1IFQZNs=
Subject key identifier: 57:96:B4:72:5D:BC:62:63:52:2C:14:FC:E2:EE:8A:84:9A:77:7E:57
Certificate issuer: /CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Certificate serial: 01856DAF5D8BCA38809256183D5751D7C4B0
Authority key identifier: 80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/V5a0cl28YmNSLBT84u6KhJp3flc.roa
Signing time: Sun 01 Jan 2023 14:14:47 +0000
ROA not before: Sun 01 Jan 2023 14:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211600
IP address blocks: 46.243.74.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:af:5d:8b:ca:38:80:92:56:18:3d:57:51:d7:c4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8095e0cc6e4a8de8acd3b07cce5ea0c040c47ff1
Validity
Not Before: Jan 1 14:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5796b4725dbc6263522c14fce2ee8a849a777e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b8:7d:95:86:bf:10:c7:48:aa:f6:17:80:c0:
35:23:6b:68:a9:bd:ef:75:ee:f7:c2:f2:a2:ef:c5:
99:06:b6:58:59:6e:40:a8:43:bd:c7:96:bd:07:ce:
1d:22:83:62:f4:72:cc:fe:41:3b:9c:4a:9e:33:42:
8f:60:4c:2b:95:87:c5:d4:db:36:54:be:28:3f:24:
e7:78:82:22:5a:bb:88:b6:fe:63:58:04:74:fb:e8:
68:ce:cc:30:0a:14:cb:0c:42:61:57:9e:ba:b7:cb:
9a:2a:e1:2d:b5:f6:ae:44:e2:f1:11:ba:9f:1f:dd:
f8:3e:ab:9e:da:9a:0a:45:ad:aa:65:ff:ee:ae:ba:
9b:d1:a9:b9:40:95:9b:57:54:c9:f4:3d:1c:08:7a:
f5:dd:85:a9:a6:51:24:13:25:a0:dd:7d:a3:04:de:
3b:40:30:99:5f:64:d8:d9:43:06:7a:1a:d8:95:75:
20:13:67:a2:5a:8f:0a:1f:1f:1c:27:8b:47:1a:21:
f4:a7:2c:7f:8f:20:e9:bb:f3:9c:84:c7:24:fa:8f:
cd:bd:ae:27:02:49:87:d2:3f:70:0a:a9:77:48:fd:
36:68:31:26:33:d2:2e:36:e2:37:d6:14:cb:f7:5a:
c6:89:ba:d1:32:cf:34:fa:06:fe:cd:3d:47:73:41:
2b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:96:B4:72:5D:BC:62:63:52:2C:14:FC:E2:EE:8A:84:9A:77:7E:57
X509v3 Authority Key Identifier:
keyid:80:95:E0:CC:6E:4A:8D:E8:AC:D3:B0:7C:CE:5E:A0:C0:40:C4:7F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJXgzG5Kjeis07B8zl6gwEDEf_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/V5a0cl28YmNSLBT84u6KhJp3flc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e413d8-d389-473e-b63a-204d76eee661/1/gJXgzG5Kjeis07B8zl6gwEDEf_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.74.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:27:c3:1f:70:7d:c2:ae:81:cd:f8:e4:21:93:48:d6:a8:8c:
43:dd:e4:02:ab:32:d1:f5:ef:e0:61:e5:ec:d5:f5:b0:42:6f:
e9:3e:24:a8:3a:79:ef:54:dc:6d:29:45:12:92:77:0f:57:57:
e5:0f:a2:bc:19:07:41:07:e6:24:98:41:23:a1:05:28:dd:3f:
6f:6f:2a:f6:c3:86:a7:c7:12:94:fc:cd:78:d8:72:7c:bc:e1:
31:eb:64:c8:8d:8e:bd:ef:4f:f9:ee:e0:e6:4b:7b:5a:ab:1e:
5d:25:2c:f0:5d:a6:30:15:ad:ee:35:fa:8f:f5:6f:47:84:8d:
c1:f7:f5:5e:a4:c3:fc:ca:17:6a:4c:6a:8c:2f:31:37:3a:55:
2a:91:c1:3d:7e:97:00:4a:fc:4e:a5:68:69:9e:b2:60:7a:c1:
35:27:77:ce:c1:e6:9a:e3:c4:82:75:c1:72:b3:2c:f2:cc:4a:
9e:03:cc:8d:b6:49:c4:b4:99:3f:bf:85:1e:ec:6c:e3:e2:d3:
a3:0f:ed:83:fe:af:32:4c:c2:03:c7:7b:66:97:be:3a:e7:65:
c3:7f:5e:6a:90:f0:9e:f4:06:8c:d7:19:d5:11:08:a1:f2:35:
a7:e4:8b:1d:e9:4d:0b:d3:79:c6:dd:39:d7:4b:86:71:5b:a1:
ae:ce:cc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:59 2024 by rpki-client on console-fra.rpki-client.org