Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/5PVhXuKpRzNuTg2dsk11n647eDc.roa
File: 5PVhXuKpRzNuTg2dsk11n647eDc.roa (raw, json)
Hash identifier: plhKKU6KUZy5FRLjRSl73r/lADHrszNwTrsDdXFk7JI=
Subject key identifier: E4:F5:61:5E:E2:A9:47:33:6E:4E:0D:9D:B2:4D:75:9F:AE:3B:78:37
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01857246FD155B59B269268AB94821A73EF8
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/5PVhXuKpRzNuTg2dsk11n647eDc.roa
Signing time: Mon 02 Jan 2023 11:38:53 +0000
ROA not before: Mon 02 Jan 2023 11:38:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35112
IP address blocks: 46.161.41.0/24 maxlen: 24
46.161.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jan 2023 08:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:fd:15:5b:59:b2:69:26:8a:b9:48:21:a7:3e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:38:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4f5615ee2a947336e4e0d9db24d759fae3b7837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:10:10:53:12:68:51:eb:7f:0c:7f:21:5e:e8:
b7:1d:29:9f:8c:3b:58:62:1c:b1:5a:fc:0d:a2:17:
fe:8c:a8:46:63:00:7f:0b:ec:60:5b:94:c5:8d:c8:
6e:7e:b0:47:4f:45:e9:b3:ef:31:a7:f2:26:ef:16:
fa:f3:ba:a3:4d:53:0e:c6:1d:d0:ea:9e:08:54:5b:
c0:1b:b5:d6:20:1a:99:60:61:21:b1:d5:63:ed:4e:
21:b8:fc:04:2e:dc:29:69:94:25:6a:b1:cd:7d:ee:
d2:00:0b:b6:e0:2c:3e:46:b6:36:12:12:c4:86:c4:
70:65:c9:58:4d:e8:d1:e5:19:a4:69:aa:00:7f:09:
6f:b1:45:f9:93:99:c8:ce:7b:32:69:c5:a1:5f:a0:
4d:21:46:19:86:ab:ef:d0:67:50:52:05:d4:45:79:
d2:92:39:ea:8a:28:93:1c:ad:1b:50:9b:61:8e:ef:
11:cc:4c:c7:e0:13:b2:cf:fa:37:18:68:55:3f:0d:
3b:50:a4:d0:0e:12:4d:bf:38:a7:71:d8:fc:5a:88:
f3:b2:5b:ef:bc:81:98:d5:a6:62:75:91:17:b0:be:
5e:46:11:70:dd:bb:62:55:55:f2:96:ed:7c:6c:42:
c1:c0:a7:db:24:87:ff:5a:12:25:50:c4:0d:6d:b5:
b0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F5:61:5E:E2:A9:47:33:6E:4E:0D:9D:B2:4D:75:9F:AE:3B:78:37
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/5PVhXuKpRzNuTg2dsk11n647eDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.1.0/24
46.161.41.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:b6:85:23:8d:00:86:49:92:2d:6a:ed:7f:49:f8:52:c2:de:
0c:4e:be:4a:55:95:5c:25:d4:46:95:3e:9c:14:e8:75:20:e2:
00:4c:ca:e1:1f:c5:1c:18:b8:22:9d:34:e8:be:68:bb:98:2b:
96:03:1b:15:55:be:3d:46:9d:2a:de:4c:e4:99:7c:ff:2d:39:
f4:05:c9:1c:19:57:fb:77:51:1b:64:c2:5b:b0:11:3b:46:60:
50:a6:d1:67:0d:6a:ec:2b:1c:0a:a4:18:a2:34:59:5c:3d:4f:
c1:5c:f5:f4:64:92:99:a1:e2:25:b4:76:12:d0:52:1e:a9:69:
5d:64:38:c8:f9:73:e1:d0:6e:c4:82:1a:03:c3:4e:40:ab:8e:
dc:68:1a:60:03:94:bd:f9:27:5b:ec:bc:3a:2c:16:2d:75:39:
a6:db:25:f8:a9:04:a9:f5:df:5d:dd:37:01:36:46:63:e6:63:
dc:28:c9:b6:a7:00:c3:d2:e4:f0:dc:6e:fb:b9:5f:10:4d:9a:
08:39:50:0a:38:98:4d:ac:a0:fa:c9:92:20:e1:3e:dd:f4:45:
15:c5:3b:b2:6c:47:92:83:8f:bf:4a:9a:fc:ff:32:9d:54:1a:
4a:5f:97:af:50:88:6d:b7:c1:98:12:10:29:23:5c:d9:d6:18:
10:6e:88:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:28 2024 by rpki-client on console-fra.rpki-client.org