Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/9044LA8AptiOHYkZpjc3ldJ8GFk.roa
File: 9044LA8AptiOHYkZpjc3ldJ8GFk.roa (raw, json)
Hash identifier: 2i1x1AqK/3r8IwJU1c6oDez/JPoarr/T8x2ZNECtf0k=
Subject key identifier: F7:4E:38:2C:0F:00:A6:D8:8E:1D:89:19:A6:37:37:95:D2:7C:18:59
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0185724718F03BB29CF9E71FDC086CBDF68F
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/9044LA8AptiOHYkZpjc3ldJ8GFk.roa
Signing time: Mon 02 Jan 2023 11:39:00 +0000
ROA not before: Mon 02 Jan 2023 11:39:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209272
IP address blocks: 46.161.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Oct 2023 06:28:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:47:18:f0:3b:b2:9c:f9:e7:1f:dc:08:6c:bd:f6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:39:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f74e382c0f00a6d88e1d8919a6373795d27c1859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c5:a1:92:10:7a:6d:8c:fc:bb:d2:0e:12:aa:
49:db:27:68:6a:20:dc:18:a5:3e:ca:60:87:9e:ad:
be:b1:85:b2:8f:07:80:28:a3:45:b2:bb:7f:92:76:
5e:90:03:33:b4:47:5a:e5:f0:a3:c4:7b:33:50:04:
b3:e1:94:59:3e:0e:0d:26:64:4f:98:ec:04:f7:4a:
52:35:3e:64:97:e7:8d:04:a5:cd:a9:5d:ee:ae:25:
94:d1:64:18:7f:6a:a5:14:03:fd:4e:90:03:3f:f7:
53:31:82:38:9a:9a:63:95:8d:9c:a2:04:09:48:06:
dd:e5:15:f5:74:ef:57:1a:89:56:cb:73:0d:1c:c4:
1c:e0:ba:28:5f:36:9a:65:28:80:e9:47:a3:0d:5d:
6e:68:8c:d1:bc:5b:7a:00:e2:e3:08:f1:20:8c:19:
ae:ea:d2:2b:7d:18:f5:b0:2f:a6:b9:bf:32:37:af:
56:4d:e7:d8:c0:ef:5d:36:1d:a5:67:f8:15:42:23:
e5:da:4d:3e:a9:53:3b:9d:f9:1c:85:94:b3:af:98:
b3:d1:7d:df:45:cb:30:6e:21:cb:3d:85:ad:3a:06:
db:ea:f4:c1:7c:57:e6:b8:bc:97:27:7e:91:1f:e3:
b4:11:b9:b8:f4:dd:68:ba:58:81:ee:60:17:aa:98:
a2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4E:38:2C:0F:00:A6:D8:8E:1D:89:19:A6:37:37:95:D2:7C:18:59
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/9044LA8AptiOHYkZpjc3ldJ8GFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.40.0/24
Signature Algorithm: sha256WithRSAEncryption
63:fe:df:63:b0:8f:f0:ed:26:c6:b9:d5:d9:ad:0a:99:94:e5:
68:80:67:54:8d:52:b3:1a:24:d5:e7:5f:41:a0:d4:62:72:a3:
7b:f9:03:45:80:01:cd:fa:7f:3f:b2:ea:67:11:72:e2:31:b0:
f0:86:8e:4f:b5:76:42:0b:6e:61:da:a9:7c:1c:e3:93:5e:ef:
eb:94:17:1c:d4:a5:41:62:b6:05:2a:ef:d7:72:f1:83:46:42:
29:2a:b7:d3:6d:24:e8:d4:1e:5f:13:0f:c6:04:ce:5f:94:af:
30:80:47:40:96:55:20:bc:de:5d:29:9d:06:48:e5:e5:52:e6:
d2:27:bb:b5:dc:86:46:c1:49:78:10:77:b5:26:43:d2:b0:c6:
99:46:12:ab:dd:5c:38:43:cc:0e:ab:f4:d4:d1:e0:40:32:a8:
b7:19:4b:97:75:a0:a1:cf:bd:23:08:9c:03:40:b1:a1:bd:6d:
a2:64:ca:46:83:61:2e:44:2a:c5:d2:4d:89:7a:da:bc:a2:58:
6c:2c:1c:f5:79:56:5a:84:54:c2:31:ae:c5:f6:e9:d7:a2:2f:
de:32:c9:72:07:5b:13:78:b5:e6:f5:5e:7d:b0:d9:93:a7:cd:
f8:03:51:d8:ef:08:d4:b8:51:e9:bd:ea:6e:96:ed:83:c2:78:
72:b8:44:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:28 2024 by rpki-client on console-fra.rpki-client.org