Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6GHH4AzmxhQVQpPsefssV4WD2Tg.roa
File: 6GHH4AzmxhQVQpPsefssV4WD2Tg.roa (raw, json)
Hash identifier: hGE+SVJFHJUR3UX/28NrLi3c1quQce3tvDPAoeAZOUs=
Subject key identifier: E8:61:C7:E0:0C:E6:C6:14:15:42:93:EC:79:FB:2C:57:85:83:D9:38
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0186CC92BB2C711A0B46C6D3D302E9C4BF03
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6GHH4AzmxhQVQpPsefssV4WD2Tg.roa
Signing time: Fri 10 Mar 2023 17:30:13 +0000
ROA not before: Fri 10 Mar 2023 17:30:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45054
IP address blocks: 46.161.16.0/22 maxlen: 22
45.159.200.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cc:92:bb:2c:71:1a:0b:46:c6:d3:d3:02:e9:c4:bf:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Mar 10 17:30:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e861c7e00ce6c614154293ec79fb2c578583d938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:00:53:2c:1c:ce:56:f5:e2:c9:02:63:a8:92:
f6:c5:b6:8d:ad:7b:6f:75:95:20:24:8c:27:6b:aa:
df:13:b2:72:91:e1:35:72:93:3b:15:a5:50:9a:44:
7d:8a:ae:7e:81:1b:8e:f6:51:85:b5:b1:07:9a:f3:
2e:31:81:67:46:89:84:c7:17:d3:5f:d2:4a:ea:f5:
3c:64:95:fd:12:84:1c:dd:b4:d4:3a:8a:37:ec:f4:
43:e7:04:df:8a:55:c9:4b:c5:4c:e7:70:81:ed:44:
3e:1b:cb:8e:68:a8:6f:a0:67:d0:f7:39:d0:4a:a9:
e3:78:95:fa:96:f5:15:5b:9d:9b:90:4d:1f:8c:9f:
87:07:11:f5:da:3d:d4:70:0c:1b:3c:90:70:7a:b8:
a5:b6:b2:4f:7c:98:9b:6b:33:65:21:c7:53:e6:e9:
94:54:7f:ac:71:dc:38:a6:01:98:5f:f8:99:9a:6e:
cb:30:23:57:25:b5:fd:28:e1:5d:1c:b9:0a:86:f2:
91:d2:ae:79:4a:5f:b9:9e:21:25:5c:21:25:25:74:
1d:77:41:d0:f7:e5:7d:3c:07:5d:ed:05:0d:e8:e5:
71:e6:59:ac:77:f7:80:fa:a3:08:e5:8e:c6:8a:8a:
85:5f:aa:53:13:54:6a:0e:10:44:36:a3:d8:fa:86:
87:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:61:C7:E0:0C:E6:C6:14:15:42:93:EC:79:FB:2C:57:85:83:D9:38
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6GHH4AzmxhQVQpPsefssV4WD2Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.200.0/22
46.161.16.0/22
Signature Algorithm: sha256WithRSAEncryption
02:66:30:c4:67:c2:30:28:5e:01:a0:7c:b0:57:af:93:6c:9c:
eb:9e:2f:84:69:bc:4c:11:7b:bf:7b:d0:74:c9:c8:f7:d1:17:
5e:de:9e:84:2e:c5:ab:ec:d0:dc:0a:c4:b8:22:87:79:c7:57:
2b:99:ad:0f:74:0f:02:d8:8c:6d:ff:0f:b4:32:d0:4d:9b:a0:
f7:10:53:b6:80:bd:49:1f:3a:61:e2:fe:f2:0e:1c:27:92:ab:
ab:e1:fd:3b:1f:84:df:cd:af:db:14:11:3b:b4:0a:78:1f:09:
26:be:46:64:0c:8a:eb:68:de:f0:c8:a1:53:56:bc:23:8e:04:
f7:4a:33:13:d3:5e:ce:92:65:cc:00:fb:cd:c3:0c:60:4f:c0:
1f:df:ea:0c:e3:f4:a9:92:b1:b1:70:5d:58:e9:48:be:29:7f:
fd:6e:b6:fc:e8:7e:14:fa:77:37:ef:80:f2:5f:fe:44:54:ee:
94:eb:fc:0c:4b:75:b8:eb:35:15:68:8a:cd:16:6e:63:f0:5b:
0c:79:11:c9:33:70:f4:61:a0:b3:17:5c:49:53:e2:a9:fa:4b:
34:7e:06:e6:3f:a0:87:5b:56:54:57:6c:40:37:c0:0a:4c:81:
a1:8e:c0:57:4b:ea:88:84:97:19:19:aa:2a:ce:66:75:00:29:
c0:28:67:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:47 2024 by rpki-client on console-ams.rpki-client.org