Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/Ks7wZtedZxd6FpbfGDA5GSdI9EA.roa
File: Ks7wZtedZxd6FpbfGDA5GSdI9EA.roa (raw, json)
Hash identifier: CVIs2Ud+tPTINOvMMUXbeRUp8s2sGbUnGvMiR0RshsM=
Subject key identifier: 2A:CE:F0:66:D7:9D:67:17:7A:16:96:DF:18:30:39:19:27:48:F4:40
Certificate issuer: /CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Certificate serial: 01856C2ED8FA056CCAFB06A9B25ACD5CE3BF
Authority key identifier: EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/Ks7wZtedZxd6FpbfGDA5GSdI9EA.roa
Signing time: Sun 01 Jan 2023 07:14:47 +0000
ROA not before: Sun 01 Jan 2023 07:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198089
IP address blocks: 46.31.8.0/22 maxlen: 22
46.31.8.0/21 maxlen: 21
46.31.12.0/22 maxlen: 22
2a02:4980::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:2e:d8:fa:05:6c:ca:fb:06:a9:b2:5a:cd:5c:e3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Validity
Not Before: Jan 1 07:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2acef066d79d67177a1696df183039192748f440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:8a:95:29:73:8f:0d:6d:bb:64:7f:9c:36:
53:83:59:b7:09:28:06:f1:79:64:eb:c1:fc:74:5b:
85:10:14:b6:56:6d:80:68:c8:24:75:ef:22:a3:b8:
bc:00:a2:be:83:1e:aa:53:7b:e4:0d:46:d1:d4:56:
0b:35:48:e1:4c:f8:f5:02:df:52:0e:d9:2f:b1:34:
10:43:ec:46:9e:27:8f:5c:69:d5:0b:9b:92:79:a4:
ce:23:ad:34:8b:7d:e9:ea:51:d3:34:a5:02:c5:e1:
8d:24:a6:07:85:49:97:8e:12:2c:e2:f5:e6:b7:1a:
6e:8f:13:7a:a1:fd:cb:1b:5f:e9:71:39:33:b8:68:
41:ec:2b:20:a3:b7:87:7e:cc:2d:68:0d:7f:83:41:
cd:80:2a:c9:35:22:87:22:40:99:f3:9d:97:3f:c4:
b5:66:0a:e1:ec:df:ec:8d:6d:9b:18:2b:a7:0e:54:
f7:a8:cd:29:7a:d1:05:ad:ae:ef:bb:ec:7d:ca:f2:
30:8f:78:69:08:88:10:7c:c3:aa:b6:b7:7b:a8:6b:
56:6f:4a:74:fa:6c:10:f0:5f:98:56:79:bb:6a:e2:
5a:e6:6d:e5:08:4b:62:3b:4e:bf:bf:52:3f:f8:3d:
7b:7b:86:f4:58:2f:0f:d7:1e:86:5d:ad:34:2d:21:
a3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CE:F0:66:D7:9D:67:17:7A:16:96:DF:18:30:39:19:27:48:F4:40
X509v3 Authority Key Identifier:
keyid:EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/Ks7wZtedZxd6FpbfGDA5GSdI9EA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.8.0/21
IPv6:
2a02:4980::/32
Signature Algorithm: sha256WithRSAEncryption
9f:4e:de:96:67:31:51:1e:25:34:04:70:69:c8:47:6f:70:85:
af:59:e5:7d:4e:56:f5:ff:75:9c:87:6a:9a:3e:8a:0f:76:27:
1c:73:da:07:ff:1d:23:8d:d2:de:8f:30:db:f1:6e:5a:71:2a:
1b:b9:86:db:5b:d5:43:44:07:74:22:49:ce:5f:6a:69:43:39:
2d:32:57:23:db:e2:23:90:3e:11:7d:3f:df:da:82:b2:21:7c:
99:02:cf:64:4c:39:b3:d6:af:2b:4c:ba:d8:41:3c:26:23:56:
78:ad:5b:1f:dd:23:5a:8f:99:0d:75:52:bc:78:d4:a4:f7:aa:
f6:e1:e2:a7:16:44:20:09:a3:cc:e8:ef:ae:f9:61:d9:12:d4:
52:d9:ce:a3:2a:d1:cf:75:6b:21:9a:f2:9c:18:bc:78:80:b1:
fa:ab:b5:19:dd:35:a8:5e:e3:87:9b:de:94:1a:b8:c3:4a:e2:
f3:db:31:06:a5:35:39:03:95:ae:a7:90:6b:54:9d:91:68:37:
df:77:ff:b8:84:5d:4b:b1:76:98:8f:59:21:9b:6c:b6:02:1d:
23:86:91:14:43:4b:42:89:c0:52:40:2b:ac:46:27:07:bf:7f:
13:ec:d5:c2:af:e3:46:9c:f9:2f:0c:24:de:f0:98:df:6e:5b:
62:29:47:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:03 2024 by rpki-client on console-fra.rpki-client.org