Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/FtEjgDQI-07-E4cRrTsiq3OnfPU.roa
File: FtEjgDQI-07-E4cRrTsiq3OnfPU.roa (raw, json)
Hash identifier: Tcqm+RETOwB65Xiao77U1tKpa1XBKWtFHplZIDR2yTs=
Subject key identifier: 16:D1:23:80:34:08:FB:4E:FE:13:87:11:AD:3B:22:AB:73:A7:7C:F5
Certificate issuer: /CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Certificate serial: 01857295AB378550991A7427A8E4DE407B81
Authority key identifier: 77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/FtEjgDQI-07-E4cRrTsiq3OnfPU.roa
Signing time: Mon 02 Jan 2023 13:04:49 +0000
ROA not before: Mon 02 Jan 2023 13:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39438
IP address blocks: 46.226.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:ab:37:85:50:99:1a:74:27:a8:e4:de:40:7b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e3c2900b599754283f27f3b4e8d7f6c4510972
Validity
Not Before: Jan 2 13:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16d123803408fb4efe138711ad3b22ab73a77cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:14:69:d8:55:bd:2d:65:d7:43:c3:7d:4e:a0:
5c:e6:90:2e:c7:3a:7a:cd:f6:8d:a2:6d:3c:95:28:
10:10:38:30:37:df:57:b8:83:5c:40:5b:ba:d9:94:
c5:f9:a1:6b:29:c9:37:16:fa:6b:54:94:1c:22:13:
d0:77:02:92:6b:60:4a:3e:2a:ba:4c:f7:fb:e6:18:
b5:32:d0:c5:9c:29:71:89:03:c5:75:b6:97:b7:47:
90:ea:7a:8a:d6:4c:2f:15:fe:17:f6:8e:02:c9:bb:
4a:70:ff:96:90:75:56:78:a2:54:fb:35:cc:8f:c9:
16:65:4c:33:f8:dc:dd:01:4a:61:24:dc:63:b7:35:
70:d8:2e:08:87:79:0f:68:23:42:fe:fc:6e:08:b1:
66:12:26:89:e0:46:0c:b9:03:72:3b:76:b7:47:d2:
ca:c7:31:14:0d:5e:b5:0c:63:0b:3f:8b:78:18:49:
91:ec:c1:2d:0c:2d:92:fc:2a:8a:fb:11:81:8d:15:
9e:11:ed:a3:56:50:08:83:48:a4:30:57:48:9e:c9:
8d:4f:1c:43:e2:dc:45:6c:1c:e2:12:22:26:a2:d3:
7a:04:35:2c:1a:e0:1f:79:4e:1f:f1:9e:42:53:74:
1c:ec:bf:e1:47:89:6e:48:c6:32:4d:6f:b7:d3:4d:
7b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D1:23:80:34:08:FB:4E:FE:13:87:11:AD:3B:22:AB:73:A7:7C:F5
X509v3 Authority Key Identifier:
keyid:77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/FtEjgDQI-07-E4cRrTsiq3OnfPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.208.0/24
Signature Algorithm: sha256WithRSAEncryption
36:1e:c4:75:9a:50:32:9f:e1:f2:7c:1d:ff:05:d6:e3:25:bd:
89:49:b2:b5:a4:0b:6f:b2:97:d3:1a:a6:c1:20:a5:99:ad:64:
02:90:ff:d1:17:a2:e1:24:c3:c2:2d:43:e2:a2:b1:93:a4:a8:
66:3d:1d:3e:f3:68:fb:ab:7e:aa:fd:e5:6d:87:09:05:d4:81:
62:c2:73:cd:0b:05:e0:00:2a:9c:17:3b:47:25:9d:35:b6:20:
37:62:b2:b0:7f:63:fe:a8:0d:14:32:a8:4e:52:55:88:ac:00:
d3:9e:a8:91:64:0f:04:4d:28:d9:bd:39:09:06:b8:fe:d7:bd:
4a:3c:ce:bd:fa:9a:85:0c:bb:41:4f:59:a9:da:01:57:d1:43:
22:f3:54:cf:f4:08:0c:81:71:e5:0b:46:3c:b8:a5:e5:0f:e0:
0d:e5:5d:fd:7a:7e:fd:a8:10:0c:06:10:a8:35:a4:68:2d:b2:
9c:0a:0b:65:e9:be:b9:41:6a:e8:a9:fd:f0:ea:d3:65:bf:13:
9b:aa:e6:80:86:e7:17:56:6d:17:ff:4e:16:8c:ab:22:9d:53:
c7:f4:ac:57:fe:b8:d7:b8:94:e1:d0:c4:a8:65:c9:c5:c4:51:
38:db:14:8c:3c:4f:a7:e9:65:c3:d0:4c:59:70:0e:be:9c:30:
f1:d8:8d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:41 2024 by rpki-client on console-fra.rpki-client.org