Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Iz3izQYp9mEtvQxksfyL6TKcd_Q.roa
File: Iz3izQYp9mEtvQxksfyL6TKcd_Q.roa (raw, json)
Hash identifier: PbVaoVIQyuMcKg4hJDyhasmbKVcCICj4pzVdRoeMaMw=
Subject key identifier: 23:3D:E2:CD:06:29:F6:61:2D:BD:0C:64:B1:FC:8B:E9:32:9C:77:F4
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018F5931A583506B7E77A12A9AB78EECCFC4
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Iz3izQYp9mEtvQxksfyL6TKcd_Q.roa
Signing time: Wed 08 May 2024 17:12:56 +0000
ROA not before: Wed 08 May 2024 17:12:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62163
IP address blocks: 46.161.216.0/24 maxlen: 24
46.161.217.0/24 maxlen: 24
46.161.218.0/24 maxlen: 24
46.161.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 22:36:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:59:31:a5:83:50:6b:7e:77:a1:2a:9a:b7:8e:ec:cf:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: May 8 17:12:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=233de2cd0629f6612dbd0c64b1fc8be9329c77f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:49:31:62:e3:25:56:52:f5:8a:ec:cc:71:ab:
f9:23:45:c4:74:58:ff:d4:32:4f:e1:5b:75:31:ba:
66:3e:7a:80:4d:20:af:b2:06:e1:7f:3a:87:9e:00:
83:e4:f1:40:f2:be:16:5f:91:7a:8b:98:cf:dc:79:
3a:0a:1b:18:d6:60:c2:84:53:e9:c2:7e:5c:7c:92:
b3:d2:ae:3c:e0:0d:f0:85:65:3a:3c:90:63:42:98:
86:01:aa:d0:94:a1:82:c7:82:92:87:b9:99:05:f2:
b5:dd:2a:08:17:4a:14:05:0c:92:2a:2c:12:68:d4:
e9:65:f2:9a:2a:e5:18:3f:f9:77:48:7d:d3:7c:f2:
18:85:e3:04:46:f6:b6:c5:4b:79:da:15:07:ad:2a:
80:2a:73:ce:2a:a1:82:2e:5a:a9:31:e7:a4:93:2d:
73:08:f4:1f:92:a7:f1:27:7c:68:6f:33:6f:b2:00:
15:9a:ad:9e:14:3e:af:c1:84:bb:6c:9f:51:2c:93:
9f:2c:2d:3f:3b:e2:34:d1:96:f8:36:74:23:94:70:
8a:18:3a:0e:a9:17:38:86:08:d4:19:2f:ec:32:c3:
43:a5:48:81:c8:31:df:93:90:da:e2:6d:a5:03:53:
77:d0:bb:fd:04:e5:ed:1b:d3:f6:f2:bc:1b:be:91:
06:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3D:E2:CD:06:29:F6:61:2D:BD:0C:64:B1:FC:8B:E9:32:9C:77:F4
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Iz3izQYp9mEtvQxksfyL6TKcd_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.216.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:e5:c2:b8:2b:eb:cb:8e:43:48:61:c4:06:70:53:db:23:4c:
cd:40:57:36:dd:c1:10:7d:e1:64:85:63:da:2d:ab:71:b4:23:
8f:d8:aa:3e:c5:a5:94:7c:f1:94:c1:ac:27:2c:33:6e:2a:4b:
03:9a:06:fb:b3:5a:c0:d1:7c:f5:51:73:dc:6a:82:76:25:61:
f9:b8:12:9c:6d:57:62:8b:71:dd:14:8d:b8:5a:ad:54:23:ba:
68:37:78:2e:26:b7:6b:31:e1:7c:5a:8e:33:52:24:da:e1:30:
46:2e:51:0a:ec:36:05:2d:16:5b:9a:ca:5a:9e:69:bd:a8:d2:
12:48:d4:cb:4d:8d:11:a1:4f:bb:5c:d5:ab:ac:f6:dc:05:18:
6c:82:4e:79:a3:90:89:26:fb:f6:f5:97:0c:0b:64:e9:8c:1a:
2d:04:d4:52:9c:63:5a:ba:c5:35:c2:85:73:7a:0b:c7:e7:c5:
cc:e3:5e:49:7a:78:54:6b:06:f2:38:d7:ba:b7:2c:fb:89:00:
50:e8:b4:81:05:82:8d:5f:4f:a9:3c:e2:a1:3a:6d:2c:c4:98:
ec:30:40:5e:18:43:5a:9d:b9:87:7b:d4:46:5f:51:4d:f0:d8:
6c:8b:93:5d:74:b6:bf:57:ff:f3:e3:db:05:87:62:f2:fd:3c:
c6:16:00:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org