Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/7X_Pbw4Z5RXeVAkSc-lwZlQBorc.roa
File: 7X_Pbw4Z5RXeVAkSc-lwZlQBorc.roa (raw, json)
Hash identifier: bvUea0qKa9EHjVloagdo8eAuWaIytYafa+7RGnn9KPI=
Subject key identifier: ED:7F:CF:6F:0E:19:E5:15:DE:54:09:12:73:E9:70:66:54:01:A2:B7
Certificate issuer: /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Certificate serial: 0190DAD028E94B9373D5F8745218FD1D99D4
Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/7X_Pbw4Z5RXeVAkSc-lwZlQBorc.roa
Signing time: Mon 22 Jul 2024 14:19:53 +0000
ROA not before: Mon 22 Jul 2024 14:19:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53856
IP address blocks: 46.173.68.0/22 maxlen: 22
46.173.72.0/22 maxlen: 22
46.173.76.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 23 Jul 2024 14:19:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:da:d0:28:e9:4b:93:73:d5:f8:74:52:18:fd:1d:99:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0
Validity
Not Before: Jul 22 14:19:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed7fcf6f0e19e515de54091273e970665401a2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:f4:f7:78:69:c1:a3:08:69:69:87:d0:66:
bc:5e:d4:85:35:a4:f1:c4:a7:d1:5a:14:32:b3:e7:
66:66:73:dd:bb:c0:e8:38:f7:79:b5:6b:c3:ad:4c:
61:2f:c8:ad:df:56:b4:04:a8:fc:9a:f7:fd:a2:f9:
ef:5f:99:3e:c2:af:01:68:b1:ac:f4:7e:5a:24:26:
31:02:bf:8c:76:6f:87:f7:23:59:4f:8c:c4:38:b4:
4e:f3:2b:49:63:99:3a:52:34:5e:68:1a:7d:60:05:
96:7d:12:14:dd:fc:5d:00:43:c7:23:65:6a:c4:b4:
fd:73:fd:7a:0b:29:31:fe:49:81:ed:2e:95:16:3f:
af:14:42:a8:d1:d1:a0:53:45:d7:1e:b8:7b:48:70:
5c:ed:f0:7d:b1:c4:18:ed:83:6f:3d:1c:40:5a:61:
d6:3f:22:cc:e4:33:60:1a:28:2a:61:1d:97:84:f4:
56:e7:76:51:2a:86:83:7c:c1:c8:bb:0b:6d:8b:47:
85:8b:6b:52:bc:41:00:cc:6a:dd:71:e7:4d:cc:83:
44:c7:ee:68:89:ee:65:74:04:6e:e9:04:46:f7:44:
b1:92:f5:1c:3f:81:d4:e8:29:b2:57:f6:19:56:d7:
74:3b:98:c7:22:af:d3:39:27:ed:b3:14:26:2d:46:
a1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7F:CF:6F:0E:19:E5:15:DE:54:09:12:73:E9:70:66:54:01:A2:B7
X509v3 Authority Key Identifier:
keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/7X_Pbw4Z5RXeVAkSc-lwZlQBorc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.173.68.0-46.173.79.255
Signature Algorithm: sha256WithRSAEncryption
9a:31:7a:af:a8:67:de:2b:38:ed:50:87:d0:6b:60:69:0e:4a:
cb:e3:fa:2b:92:63:58:e2:e8:31:e9:4e:0a:05:03:2b:4e:51:
46:80:d4:36:bb:c7:0b:c8:13:fe:9e:12:03:7f:f6:b4:79:38:
36:5b:19:60:d0:f9:c3:42:30:0f:10:4d:34:7c:3d:46:d6:9d:
85:29:fc:7d:c8:91:ff:78:e0:c5:71:a5:08:e2:86:84:ba:f3:
2e:28:9b:b6:6e:b1:d4:ff:d7:cd:6d:1a:14:23:67:ae:f7:50:
0a:4e:9f:f0:4c:54:38:8c:c4:27:8b:49:dd:3e:4c:9f:40:6d:
4c:c8:a2:78:19:d9:85:11:15:d2:61:36:2c:ba:f8:ac:96:31:
ca:38:12:3a:f2:1b:12:40:5c:17:0a:3d:98:f0:2f:c0:24:56:
6d:28:bf:59:7d:04:2d:52:78:9f:60:9e:bb:cc:2f:d9:92:b5:
85:ac:ee:48:f6:07:bf:f8:17:f5:38:4f:7f:d4:0c:2a:6b:27:
f8:47:e4:a1:56:db:07:fe:ef:1f:64:c3:bc:33:90:6f:e4:80:
e0:2d:47:04:4a:93:89:e5:c9:e4:fb:98:fc:14:e2:79:70:b1:
d3:e6:02:35:d8:40:cf:11:d2:f4:61:6e:dc:5b:6e:e3:5a:85:
5c:66:7f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 16:54:48 2024 by rpki-client on console-fra.rpki-client.org