Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/3g3v3gUNEXyRgEIafN3u6zkDyC4.roa
File: 3g3v3gUNEXyRgEIafN3u6zkDyC4.roa (raw, json)
Hash identifier: EjaQfzDGgsYQyDGzcggXO8ovThEqXkQsYmxgQGsjPRE=
Subject key identifier: DE:0D:EF:DE:05:0D:11:7C:91:80:42:1A:7C:DD:EE:EB:39:03:C8:2E
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01860792483185351DD604776097797CE0BF
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/3g3v3gUNEXyRgEIafN3u6zkDyC4.roa
Signing time: Tue 31 Jan 2023 11:24:32 +0000
ROA not before: Tue 31 Jan 2023 11:24:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26548
IP address blocks: 46.161.56.0/21 maxlen: 24
146.185.200.0/24 maxlen: 24
146.185.201.0/24 maxlen: 24
146.185.202.0/24 maxlen: 24
146.185.203.0/24 maxlen: 24
146.185.206.0/24 maxlen: 24
146.185.204.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:92:48:31:85:35:1d:d6:04:77:60:97:79:7c:e0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 31 11:24:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de0defde050d117c9180421a7cddeeeb3903c82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6b:6b:27:0f:6d:ea:76:49:8b:44:c5:76:6b:
de:b6:c3:58:2c:77:a9:55:7e:b8:a2:61:f3:d8:d6:
52:57:bf:83:4c:ae:f0:7d:70:aa:7d:0b:98:62:75:
61:bc:c0:a6:fd:7b:dc:42:c8:86:37:1d:87:e0:1c:
ee:e6:04:0c:14:ad:0c:72:3c:3d:0f:64:07:8e:2b:
ab:7f:2e:6f:7d:14:da:78:6f:e2:be:b5:7d:ab:eb:
80:14:e4:8c:40:b2:49:bc:d3:79:e9:a6:d9:48:1f:
7c:7e:fa:88:9d:79:b3:44:04:1e:e6:f3:53:97:30:
d2:ac:ef:f7:85:00:f3:b4:30:0d:50:7d:d8:b2:2d:
fa:44:f4:c8:83:fb:36:02:75:0b:c8:b6:2c:da:f1:
68:70:88:ab:ef:6f:56:20:71:0d:5a:ef:1e:cc:63:
1b:ae:0a:79:eb:dd:87:95:46:a2:d3:97:ba:06:6f:
ad:bc:f0:9b:0d:23:cc:3a:b9:8e:07:6d:85:82:85:
93:8e:01:8c:a2:b4:12:eb:5e:68:6a:8d:aa:e9:d1:
fb:33:dc:61:00:15:b6:f2:20:54:2e:ff:55:1e:99:
ef:97:b2:54:ba:4f:eb:a6:5b:4c:4a:37:05:5b:ef:
2f:3c:44:eb:5e:f5:54:29:7e:81:66:7e:d8:db:34:
f8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0D:EF:DE:05:0D:11:7C:91:80:42:1A:7C:DD:EE:EB:39:03:C8:2E
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/3g3v3gUNEXyRgEIafN3u6zkDyC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.56.0/21
146.185.200.0-146.185.206.255
Signature Algorithm: sha256WithRSAEncryption
65:5c:f2:0a:7c:de:fb:98:f9:3f:c0:86:7b:e5:0e:bd:b6:ff:
72:3c:c2:59:8e:eb:17:90:ca:79:c2:bf:d4:f7:e6:bd:79:23:
86:83:f3:61:1c:6f:b4:8b:d8:e9:74:2f:4e:93:b6:14:2b:b1:
26:ba:24:23:72:ed:11:41:ab:88:51:8b:2c:f7:cd:fe:88:75:
65:de:d2:49:4e:7a:ea:4b:ba:b8:bc:9a:ee:84:c0:4a:28:fe:
08:9e:cf:5e:02:ca:bf:00:7c:df:82:dc:f4:bb:96:05:e1:c4:
4a:6a:e9:bd:57:b0:03:c9:ba:a7:4c:ec:8f:c5:5b:af:65:8a:
7a:4e:77:18:b7:f2:9b:2c:20:f7:28:2f:ab:db:34:33:ef:20:
91:6b:6c:08:7d:75:44:b8:c5:8f:b2:45:aa:c7:1f:bb:ac:72:
ba:8d:45:ac:3e:72:ce:31:5b:e3:62:13:79:e7:2c:17:f0:5c:
bc:1d:f6:3e:b8:0b:4f:5d:98:bf:a8:13:fa:ec:85:06:14:54:
d1:e1:f0:d7:7d:72:3e:4a:72:eb:21:a7:7b:b5:51:d8:0a:d8:
b2:0a:f5:9e:b3:f7:aa:26:fd:18:bb:1e:6a:d2:39:f1:6d:65:
d6:fc:c9:c0:f3:d4:bc:18:d6:17:66:a6:7c:32:79:32:4b:60:
17:ad:d9:f5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:25 2024 by rpki-client on console-fra.rpki-client.org