Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/DsYG9MDmmusSjwwmd8khs47FrXY.roa
File: DsYG9MDmmusSjwwmd8khs47FrXY.roa (raw, json)
Hash identifier: sDSv9UNqGyeu7oeeboGqTcOcTiV4dzFpPeYadcWKGW8=
Subject key identifier: 0E:C6:06:F4:C0:E6:9A:EB:12:8F:0C:26:77:C9:21:B3:8E:C5:AD:76
Certificate issuer: /CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Certificate serial: 01857295AC379AFBB7EB0825702F2A173C57
Authority key identifier: 77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/DsYG9MDmmusSjwwmd8khs47FrXY.roa
Signing time: Mon 02 Jan 2023 13:04:49 +0000
ROA not before: Mon 02 Jan 2023 13:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52214
IP address blocks: 46.226.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:ac:37:9a:fb:b7:eb:08:25:70:2f:2a:17:3c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Validity
Not Before: Jan 2 13:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ec606f4c0e69aeb128f0c2677c921b38ec5ad76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f2:86:86:20:c9:2f:c7:65:66:44:15:34:a2:
a7:5e:ea:ed:6c:46:86:42:36:8c:b4:cd:08:05:c9:
75:85:d8:5e:3c:fb:d4:75:d8:4f:e1:28:5b:03:f7:
59:4a:2d:88:31:99:83:78:b3:c9:03:54:cf:7b:64:
83:8c:b0:bc:de:87:93:1c:97:ef:09:4b:38:93:a6:
e2:ec:82:66:18:32:43:6d:6e:b8:82:1a:7f:39:db:
38:b1:92:b2:75:0d:08:fe:40:46:a0:5a:0c:1b:c0:
78:96:1a:7b:28:e6:1d:2d:58:07:44:16:49:68:3d:
ba:64:a2:f8:c5:0e:a6:40:7c:fb:bd:f6:f0:ae:81:
0f:6e:9e:57:5b:7c:8f:5e:2b:95:3b:78:da:36:c1:
d1:a6:d2:fd:f9:2c:56:55:cb:84:15:a7:67:1d:5c:
63:9a:0d:b6:ea:22:0e:bf:73:d7:88:a0:8a:1b:29:
fc:dc:1e:e4:cb:94:5f:cc:7a:07:d1:d4:77:61:04:
d8:2e:07:35:dd:8c:a9:7d:52:9f:2f:f9:05:d5:b5:
fa:c8:32:8e:21:e3:63:72:86:51:99:03:5a:a8:08:
b4:be:a2:ba:13:c8:e2:1f:65:3e:4f:63:00:60:c2:
69:9b:ca:7e:82:13:1e:ff:eb:d0:5b:59:84:65:fe:
f7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C6:06:F4:C0:E6:9A:EB:12:8F:0C:26:77:C9:21:B3:8E:C5:AD:76
X509v3 Authority Key Identifier:
keyid:77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/DsYG9MDmmusSjwwmd8khs47FrXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.210.0/24
Signature Algorithm: sha256WithRSAEncryption
16:0f:3e:40:df:40:a1:46:6c:af:07:0c:44:d2:9a:19:95:f9:
dc:26:62:f8:53:96:71:ec:94:65:70:fa:b3:ea:0a:31:16:10:
bb:23:a6:53:f1:b0:b9:e6:87:1c:08:98:00:56:7c:91:de:d2:
61:1b:ac:0a:41:ba:4f:b2:f4:4a:78:85:0c:53:ad:ed:7d:07:
b7:76:df:e0:be:9c:3b:0b:af:f8:98:2e:1d:1b:b6:60:f3:99:
74:bc:2a:b2:5a:55:bf:e4:20:35:b3:0d:19:89:fd:55:7d:44:
e9:95:95:fe:c6:c9:e7:8a:30:cf:82:83:4b:b9:e2:2b:08:95:
ad:18:fe:60:1f:20:fb:4c:e8:d0:0b:07:d0:6f:e1:76:90:b9:
07:b9:61:78:b2:22:e7:03:00:12:d6:b0:93:31:3b:99:92:04:
87:63:16:2d:1f:dc:5c:bf:ef:fc:32:ff:dd:cc:4b:d4:21:6d:
24:3c:b2:3c:52:ec:b4:08:28:1e:d3:99:b4:a1:af:38:74:6f:
05:57:4d:1c:b0:e6:3e:b7:01:1c:93:4a:08:bf:bc:fe:78:a4:
f5:18:c5:f3:99:9a:45:50:07:cd:4d:ba:0a:22:3c:58:c7:5d:
8e:7c:7e:30:4a:4d:93:5e:f7:ad:b6:62:3f:b2:98:d5:49:8c:
48:ff:80:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:11 2024 by rpki-client on console-ams.rpki-client.org