Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d6e868-be11-4342-a5fe-b532fe5d658a/1/LXXtO3Fh1tsM0Swd1uvBvvFMpao.roa
File: LXXtO3Fh1tsM0Swd1uvBvvFMpao.roa (raw, json)
Hash identifier: BJiaRNt6+ZNU0FYRBo79Bwwo+kz5WKILA8Y9GNMmkXQ=
Subject key identifier: 2D:75:ED:3B:71:61:D6:DB:0C:D1:2C:1D:D6:EB:C1:BE:F1:4C:A5:AA
Certificate issuer: /CN=730d77647f28bccf592e48d8e2149a38e69966e1
Certificate serial: 01856F8B6F985AE52598F942B09B50AD6AC9
Authority key identifier: 73:0D:77:64:7F:28:BC:CF:59:2E:48:D8:E2:14:9A:38:E6:99:66:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cw13ZH8ovM9ZLkjY4hSaOOaZZuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d6e868-be11-4342-a5fe-b532fe5d658a/1/LXXtO3Fh1tsM0Swd1uvBvvFMpao.roa
Signing time: Sun 01 Jan 2023 22:54:47 +0000
ROA not before: Sun 01 Jan 2023 22:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 46.18.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:6f:98:5a:e5:25:98:f9:42:b0:9b:50:ad:6a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=730d77647f28bccf592e48d8e2149a38e69966e1
Validity
Not Before: Jan 1 22:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d75ed3b7161d6db0cd12c1dd6ebc1bef14ca5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a8:d0:24:b6:ea:4a:eb:fe:c8:62:59:f9:79:
ca:d2:d0:81:71:6a:6c:3b:44:ca:3d:49:3b:1a:8a:
8d:05:24:89:41:f0:7b:c6:25:37:23:4f:9b:4d:49:
51:62:ea:e2:f7:4d:60:cd:77:9f:57:a8:98:a7:30:
1b:5b:11:84:86:19:8a:c6:15:ec:4c:7e:7a:9f:aa:
2c:a2:87:6a:0f:e7:81:b3:da:ad:f7:18:01:4d:da:
be:0e:fa:60:03:02:7f:2f:75:67:40:a4:3c:be:ca:
49:ca:3e:3f:09:0a:0b:9d:51:f6:dd:98:94:55:e7:
1e:f5:c2:f2:19:e5:10:44:07:5b:6a:d9:85:b6:75:
d0:3e:fa:ac:86:e3:b2:1f:67:45:ac:5d:7e:63:d1:
84:c4:23:95:54:7b:96:98:67:4a:c4:eb:e1:e5:3b:
f1:0f:ed:bd:b9:f7:fc:7d:35:8e:f5:26:b2:4d:e0:
ed:04:bd:85:c5:44:81:8f:7d:b5:c8:fc:e7:58:22:
62:f1:da:bf:57:d8:98:9b:e0:76:cb:26:d3:d1:0c:
99:2d:11:5f:a5:2c:5b:25:b0:95:0b:01:4c:9a:80:
d2:14:d4:0d:c6:e3:fa:4f:e1:8a:ce:a3:20:0d:fc:
a1:96:c1:05:d7:6f:e6:3d:54:44:2b:5e:8a:c9:1b:
82:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:75:ED:3B:71:61:D6:DB:0C:D1:2C:1D:D6:EB:C1:BE:F1:4C:A5:AA
X509v3 Authority Key Identifier:
keyid:73:0D:77:64:7F:28:BC:CF:59:2E:48:D8:E2:14:9A:38:E6:99:66:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cw13ZH8ovM9ZLkjY4hSaOOaZZuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d6e868-be11-4342-a5fe-b532fe5d658a/1/LXXtO3Fh1tsM0Swd1uvBvvFMpao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d6e868-be11-4342-a5fe-b532fe5d658a/1/cw13ZH8ovM9ZLkjY4hSaOOaZZuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.106.0/24
Signature Algorithm: sha256WithRSAEncryption
34:13:3f:c5:28:69:b5:3a:40:4d:cc:53:09:2d:f3:d1:6b:2e:
c3:fa:0f:f2:53:35:ef:e3:93:7b:6f:f7:40:c0:09:4f:63:11:
3c:45:a8:f5:7f:49:c5:a6:f8:69:bc:3d:d1:2d:29:9e:e5:88:
33:79:f2:83:77:98:9d:df:4d:0f:d6:ff:a1:e1:c8:5b:b3:61:
9a:3f:45:fb:6c:2a:78:b6:54:26:af:65:6a:5d:b8:00:24:7e:
80:70:07:d7:44:17:20:1d:34:6d:fb:68:b1:cd:04:3d:fa:a1:
75:9f:d2:60:e0:85:a5:c8:19:e3:d8:9e:c6:66:21:c5:51:6a:
95:bd:b3:2b:69:55:b3:9c:67:d0:08:45:c2:fb:d5:8f:cc:e1:
24:a9:21:12:80:27:4f:ee:6f:6e:00:47:e2:c3:e4:1b:5e:5a:
f8:ed:c0:99:e0:f4:2f:8e:07:48:d9:04:d9:9e:76:c4:a1:74:
66:5c:12:6c:e1:42:08:e7:a6:47:a8:86:a3:a0:d7:50:2f:80:
c2:a1:82:b7:0e:a1:3c:67:14:81:23:2d:bc:93:01:45:ed:93:
4c:24:be:13:10:e3:0a:02:10:5d:f2:72:85:7e:b7:1c:d6:83:
60:b5:e0:cd:b9:dc:6c:ff:fb:47:34:35:86:0f:51:58:70:dc:
ad:f8:e0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:48 2023 by rpki-client on console-ams.rpki-client.org