Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/4IuiZ65uSzNOA_8b_8fl5vSH4Co.roa
File: 4IuiZ65uSzNOA_8b_8fl5vSH4Co.roa (raw, json)
Hash identifier: f6KPH6HYFQfdTPmVUCRMaQKBdgooMpJa8aAURA0k9q4=
Subject key identifier: E0:8B:A2:67:AE:6E:4B:33:4E:03:FF:1B:FF:C7:E5:E6:F4:87:E0:2A
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018570028C7DA85CAB1B1FD3E5A4D723BC9E
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/4IuiZ65uSzNOA_8b_8fl5vSH4Co.roa
Signing time: Mon 02 Jan 2023 01:04:53 +0000
ROA not before: Mon 02 Jan 2023 01:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 65595
IP address blocks: 46.234.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:8c:7d:a8:5c:ab:1b:1f:d3:e5:a4:d7:23:bc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 2 01:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e08ba267ae6e4b334e03ff1bffc7e5e6f487e02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:5f:8c:ab:0d:43:c8:40:1e:1b:ae:76:0b:
06:0d:44:3c:6e:bc:f6:65:e2:10:96:d0:b8:ed:34:
a2:57:0e:25:b8:b6:02:e6:82:51:54:37:b5:09:16:
4f:54:db:21:1f:04:be:41:f8:64:87:2a:1d:e3:f6:
e7:74:8b:d5:ad:f3:6c:30:19:8b:80:96:a9:2a:51:
9d:18:31:32:c6:5f:4f:37:ee:fb:11:01:cd:d1:2a:
d0:88:86:83:4c:1b:b8:3d:5e:b0:cf:1d:05:7c:5d:
bf:ef:37:0e:70:55:c8:61:ab:3e:22:47:ff:b1:5a:
a2:c5:96:30:49:91:9b:89:8d:3d:df:30:bb:88:a3:
45:02:e6:b8:e7:44:55:9b:e1:ed:26:04:b6:81:63:
43:ad:69:85:60:33:97:6f:9e:f7:fb:3f:86:ea:5b:
80:ce:9e:53:3b:b4:1f:7a:6f:23:e6:5d:d8:57:cc:
c9:f7:08:09:61:e0:06:7e:62:a8:03:b6:1e:09:ad:
30:93:39:6c:4d:d2:65:f1:13:d1:c1:39:64:5c:0a:
05:30:84:c1:29:4f:e7:cc:a1:29:56:5c:65:39:a1:
d0:f8:e7:e4:42:84:5c:52:cc:f2:b7:7f:30:7d:e3:
cc:1c:31:40:c1:b9:a4:e7:bf:e5:2d:c6:19:cf:da:
12:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8B:A2:67:AE:6E:4B:33:4E:03:FF:1B:FF:C7:E5:E6:F4:87:E0:2A
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/4IuiZ65uSzNOA_8b_8fl5vSH4Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.234.9.0/24
Signature Algorithm: sha256WithRSAEncryption
be:89:bf:16:69:a7:87:61:76:60:98:b4:37:3a:f6:b6:88:7f:
bb:8a:df:67:21:b6:f7:85:22:0f:38:32:25:e5:6f:e4:5f:4a:
c1:bf:c7:5a:e4:29:4e:4f:b1:60:ec:bb:6d:d9:9c:b4:00:11:
55:a6:d7:5a:36:c0:d3:81:1a:24:fa:19:ba:c1:6f:47:bc:b3:
49:0b:9d:6d:ce:02:ce:85:5d:ef:56:6e:12:1c:d7:0a:24:dd:
33:73:28:59:5d:d9:82:b4:dc:41:98:85:51:75:82:d6:61:69:
fb:d2:43:9c:ff:9b:f8:2f:fe:c5:bb:fc:38:5a:6f:d1:72:2b:
77:5e:42:c7:de:46:2d:59:e2:6f:35:a4:c0:e0:37:a0:c9:a2:
ff:64:b9:42:6b:df:8d:17:7c:c5:68:03:bb:b3:6a:83:b9:58:
d9:da:10:62:b9:e5:81:9f:40:40:be:10:8c:f7:bc:52:0a:d4:
1d:34:a8:31:e5:5d:a6:6e:78:9d:30:78:34:d8:2d:a1:3d:e0:
f1:5d:17:60:c1:12:e1:58:76:d0:41:5f:67:8e:64:cd:42:b5:
62:ff:d4:8e:96:ab:3d:a4:d9:67:fc:3c:7f:76:63:87:20:ad:
e9:50:65:19:ec:83:c2:c7:24:e6:ed:58:d3:82:8c:a3:78:7a:
7f:14:5b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:56 2024 by rpki-client on console-fra.rpki-client.org