Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/2Hb_0v9Gq1NipARnudLfyMzXoN0.roa
File: 2Hb_0v9Gq1NipARnudLfyMzXoN0.roa (raw, json)
Hash identifier: irYXzLfB42smJz/z55YrEVz4QZhvRBnp6d1x68thy0E=
Subject key identifier: D8:76:FF:D2:FF:46:AB:53:62:A4:04:67:B9:D2:DF:C8:CC:D7:A0:DD
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018570028722F2A875089A293F80F5658708
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/2Hb_0v9Gq1NipARnudLfyMzXoN0.roa
Signing time: Mon 02 Jan 2023 01:04:51 +0000
ROA not before: Mon 02 Jan 2023 01:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57914
IP address blocks: 46.234.11.0/24 maxlen: 24
46.234.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:87:22:f2:a8:75:08:9a:29:3f:80:f5:65:87:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 2 01:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d876ffd2ff46ab5362a40467b9d2dfc8ccd7a0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d4:21:ec:a0:79:1f:4c:60:48:f5:1a:df:41:
7d:70:3b:5e:c2:fc:76:41:07:ff:14:02:83:ff:06:
af:04:46:ca:2d:59:2e:48:19:58:1e:b4:81:e3:d8:
33:88:5b:db:1c:10:54:cb:94:5a:fb:a6:ec:00:1d:
52:c8:ec:c8:c4:16:b0:47:4f:58:09:6d:48:90:e5:
2f:10:5a:33:67:1e:01:6f:07:52:51:bd:1d:eb:75:
cb:93:ce:04:24:ef:27:0f:40:2d:7e:ab:33:de:30:
d1:1e:84:f8:55:b1:97:81:9c:ad:e8:95:85:f5:fb:
81:f7:bd:cb:60:9d:01:93:e4:16:60:6a:dc:e3:5f:
2b:57:2e:32:5e:bb:fb:59:b4:1e:14:13:03:d5:da:
2a:26:40:64:8d:f9:bc:c0:34:42:28:c8:86:4f:c8:
97:3e:5c:c5:e1:90:57:c1:5c:2e:12:b6:6a:7d:6b:
c1:b4:c3:ce:26:ea:43:b3:e6:67:20:1e:9c:ab:b8:
41:14:cc:c7:3b:ff:f0:cd:5a:6f:71:d0:7a:ff:71:
8e:d0:56:89:ed:61:a0:c1:d8:cd:9a:20:21:69:ee:
f4:7b:a9:37:d3:5b:3b:cc:be:58:b6:eb:f4:51:97:
85:a0:3b:ae:14:92:11:c7:a5:a5:ff:d5:64:73:54:
f0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:76:FF:D2:FF:46:AB:53:62:A4:04:67:B9:D2:DF:C8:CC:D7:A0:DD
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/2Hb_0v9Gq1NipARnudLfyMzXoN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.234.11.0-46.234.12.255
Signature Algorithm: sha256WithRSAEncryption
00:7c:9d:0a:22:ad:14:09:73:35:38:5a:be:dd:dd:6c:41:1f:
0f:47:c7:75:a1:da:9a:43:83:62:7d:3b:af:8b:4d:56:1e:e9:
59:25:91:c5:1a:0f:25:c8:3a:72:7d:44:9f:89:83:b0:50:96:
56:7a:31:89:54:ca:e8:0b:8d:02:21:3e:6c:ca:e8:68:bd:5e:
2b:58:72:87:9e:3b:2d:29:ba:4c:ac:52:38:77:f2:15:8e:ee:
f3:f3:13:21:f9:28:b6:0e:04:55:60:09:fa:c8:5f:a8:d7:69:
07:ba:ed:cc:2a:3b:d9:16:7c:31:79:b4:b0:35:46:4f:3d:be:
58:b4:52:c7:64:3e:d2:89:88:22:50:3c:e7:96:eb:4e:0e:c1:
19:b5:79:39:58:e4:67:80:66:e3:49:93:76:f9:7e:a7:51:1e:
32:b8:0e:9b:7d:5d:4d:03:73:a7:89:68:a9:c1:1c:cc:36:e5:
12:91:30:74:48:11:1e:93:71:8b:bd:6d:f1:c7:51:62:2c:fb:
2e:fe:92:d6:f5:95:90:a0:b4:27:14:0f:76:28:9b:7e:04:e1:
8b:1e:cd:bb:cb:5d:69:22:b3:9b:8b:14:ea:f0:03:c3:14:33:
a4:e5:9a:61:14:9b:63:87:a2:b0:fa:1f:0c:78:7b:a8:3e:f4:
23:ea:05:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:37 2024 by rpki-client on console-ams.rpki-client.org