Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/RFteSfIPpHw6Vg6MWjMtygFqFX8.roa
File: RFteSfIPpHw6Vg6MWjMtygFqFX8.roa (raw, json)
Hash identifier: aOxyeVGtSCMe0oQWKABKIsSJS6Ty9w26PS17BCWhM84=
Subject key identifier: 44:5B:5E:49:F2:0F:A4:7C:3A:56:0E:8C:5A:33:2D:CA:01:6A:15:7F
Certificate issuer: /CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Certificate serial: 0185727A1F29B2EA42B026ED96694BD69E99
Authority key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/RFteSfIPpHw6Vg6MWjMtygFqFX8.roa
Signing time: Mon 02 Jan 2023 12:34:44 +0000
ROA not before: Mon 02 Jan 2023 12:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210650
IP address blocks: 46.36.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:7a:1f:29:b2:ea:42:b0:26:ed:96:69:4b:d6:9e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Validity
Not Before: Jan 2 12:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=445b5e49f20fa47c3a560e8c5a332dca016a157f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e5:77:e6:cc:b9:c3:c3:2b:3e:68:8a:aa:a6:
29:10:79:b2:7a:6e:51:4c:9d:46:ab:77:6f:ac:36:
ec:dc:4d:61:6e:11:bc:4e:90:ea:c1:b3:48:cb:40:
6d:71:11:fb:61:a2:a8:c2:26:81:70:8b:f3:9a:f4:
77:89:59:a0:ae:b6:88:8d:d9:55:a2:7c:f8:07:c2:
24:23:cc:c3:3e:68:28:a4:46:01:f5:91:98:31:39:
1b:6e:a9:57:83:b4:4b:cd:54:8c:ac:7b:33:4b:8e:
84:66:e5:68:c9:9a:ac:2a:77:33:4a:a7:1c:43:03:
9f:62:3d:ea:6a:85:8e:61:64:6d:0d:6b:d3:0a:ac:
9f:25:92:de:28:be:ec:10:a4:24:35:7e:f9:7d:16:
5a:ae:41:e7:f3:03:41:39:f6:40:27:e1:5e:75:6a:
92:90:b1:fd:64:72:e1:f2:03:e6:94:e8:c1:fa:c0:
c0:73:e9:c0:6e:c4:84:c1:06:6e:b3:62:66:e3:3b:
71:d9:6c:97:0e:32:ec:5d:e5:75:ef:f7:c4:f5:ce:
c4:66:b5:52:d8:3b:c9:a6:5e:44:19:a7:7e:5b:d1:
fc:d9:7b:33:ae:d2:be:4a:d6:5f:98:d0:28:46:43:
7b:6f:df:5d:65:29:96:35:dd:6b:df:7c:9c:e3:22:
3a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5B:5E:49:F2:0F:A4:7C:3A:56:0E:8C:5A:33:2D:CA:01:6A:15:7F
X509v3 Authority Key Identifier:
keyid:D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/RFteSfIPpHw6Vg6MWjMtygFqFX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.111.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:74:69:f4:a9:36:80:00:6c:c1:14:88:1a:b6:f8:8a:18:9c:
0a:38:69:aa:19:eb:48:6e:86:f8:59:8a:8e:94:a0:4e:00:60:
44:c7:f1:ee:4e:83:65:13:02:d1:52:09:8d:98:f2:f9:38:a5:
0c:5b:e9:25:08:56:33:6b:7e:49:75:ee:75:de:1e:77:9d:e1:
3f:47:d2:2d:4f:ae:d4:3d:c7:9f:99:e4:57:b8:75:21:49:36:
6f:8d:c4:c3:d4:99:e8:af:3c:f1:94:a8:08:be:34:2c:ad:60:
86:a7:3c:86:2b:53:1d:ec:5b:5b:80:36:af:8a:85:87:63:b7:
85:af:64:23:05:3e:c1:ef:71:b1:29:4b:fc:8a:5d:ee:df:ba:
e6:36:5a:1a:39:45:7a:97:28:b1:ca:a3:49:49:dc:ab:7f:d7:
90:b0:07:d0:9f:e0:6c:a5:6e:52:ae:e5:e7:e7:6a:3c:11:2b:
4f:f6:03:eb:66:21:8f:f7:36:b4:0a:5f:58:7e:20:9a:d3:8d:
68:b6:fe:30:af:74:47:52:34:4c:66:a2:7d:73:21:a0:cc:eb:
9d:26:e5:4f:56:b0:c2:19:f8:25:6e:99:52:2c:c1:fb:9d:cc:
5e:d0:64:aa:ec:d8:bb:2c:a0:dd:72:a3:70:4b:1b:4d:c9:8d:
ed:36:c2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:25 2024 by rpki-client on console-fra.rpki-client.org