Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/IbB4dkPgoeeqqdafQi_6Djzqb8k.roa
File: IbB4dkPgoeeqqdafQi_6Djzqb8k.roa (raw, json)
Hash identifier: BEUuAf9Beg2DT7bZf12ZcFO1psbTchQ772Sz0ozDnf8=
Subject key identifier: 21:B0:78:76:43:E0:A1:E7:AA:A9:D6:9F:42:2F:FA:0E:3C:EA:6F:C9
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 0185A5D8246345C483FD9E671B7DCECC37D0
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/IbB4dkPgoeeqqdafQi_6Djzqb8k.roa
Signing time: Thu 12 Jan 2023 11:58:03 +0000
ROA not before: Thu 12 Jan 2023 11:58:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54103
IP address blocks: 46.244.116.0/22 maxlen: 22
185.51.48.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a5:d8:24:63:45:c4:83:fd:9e:67:1b:7d:ce:cc:37:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Jan 12 11:58:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21b0787643e0a1e7aaa9d69f422ffa0e3cea6fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:b5:39:af:f9:31:08:03:c4:07:a1:6d:bf:
8f:21:d6:08:a3:7c:18:a8:c8:ea:30:a5:23:fc:e0:
29:4c:04:c8:ce:3a:fe:57:88:69:7b:dd:97:60:d9:
af:25:44:e4:8c:e8:42:eb:d3:81:11:bf:38:37:65:
7d:60:69:94:dd:1a:cf:db:d2:7d:2f:75:ea:a4:9a:
6b:c8:91:31:f4:6d:aa:de:4c:cb:de:ab:7e:ff:dd:
35:5d:f2:90:74:61:8e:92:97:14:2c:4f:94:76:45:
8c:63:74:fb:10:69:d8:8e:62:46:45:63:79:e4:eb:
ae:2f:29:06:82:13:5b:81:e5:c5:5f:55:32:41:e3:
46:86:3b:79:d0:53:5c:e1:19:54:11:c3:01:f9:79:
dd:28:b7:f2:7d:e8:e9:e2:f9:fe:76:aa:59:ce:99:
10:1e:a6:f1:da:8c:e7:94:ae:16:04:b9:5a:b7:97:
52:ea:bb:1b:60:d0:f6:c0:f5:36:a9:01:c8:48:95:
5a:85:b7:c1:c5:4e:33:9d:56:03:92:82:59:26:6d:
5b:c1:b5:d5:0f:c5:38:6e:1b:56:c0:bb:a0:12:35:
d8:fc:6f:eb:7f:11:57:09:db:e9:97:29:5e:16:01:
c5:bf:16:ff:d7:f3:a5:dc:6f:49:92:ec:32:32:c2:
45:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B0:78:76:43:E0:A1:E7:AA:A9:D6:9F:42:2F:FA:0E:3C:EA:6F:C9
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/IbB4dkPgoeeqqdafQi_6Djzqb8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.116.0/22
185.51.48.0/22
Signature Algorithm: sha256WithRSAEncryption
47:8b:c6:37:9b:1c:06:68:77:cd:51:d2:3a:fa:82:68:42:3a:
f8:47:d2:5a:39:ec:a4:61:c8:c2:ff:10:4a:06:01:2b:a3:e4:
3f:7f:48:f4:63:bd:9f:a9:73:a3:f5:b9:d0:3e:83:ff:06:0f:
a9:88:7d:f1:15:de:c6:d1:6d:2e:40:9d:1b:7b:06:04:95:cc:
dc:e9:c2:55:4c:39:b4:24:3b:0f:56:df:79:e4:ec:ba:1a:c6:
13:b9:b6:a8:60:51:0b:7e:7b:1b:23:da:a3:a1:f5:dd:86:c4:
6a:0e:df:86:8f:b0:f4:64:e0:1a:82:14:33:84:da:50:a3:8b:
09:84:76:f4:d7:e7:53:41:20:58:54:9e:53:a5:24:43:a2:b6:
3b:9e:17:dc:04:e2:43:dd:f0:84:26:07:02:3f:c1:0b:d4:20:
e7:77:76:2f:41:5f:97:34:3e:8c:2b:71:10:d4:10:bf:19:3d:
a9:e5:c6:f2:27:cc:cb:76:b3:6c:a2:80:0e:ad:42:cd:ba:76:
37:8f:30:86:22:c1:93:78:bc:5c:be:88:27:db:4c:ae:b1:4e:
58:dc:da:f1:8f:52:8e:c6:0c:1b:28:3b:fb:4a:0e:38:45:34:
6a:6e:9c:a8:70:c7:8b:77:f9:fe:3f:c4:eb:72:97:7d:86:66:
d2:b7:73:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:35:46 2024 by rpki-client on console-fra.rpki-client.org