Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/KG2_0MEig9V5wR2A3DzncgPM1kU.roa
File: KG2_0MEig9V5wR2A3DzncgPM1kU.roa (raw, json)
Hash identifier: qUcQlXr/fdJ7AAMReACyPdPEB+AfN6gNmyv5kYhBJ/s=
Subject key identifier: 28:6D:BF:D0:C1:22:83:D5:79:C1:1D:80:DC:3C:E7:72:03:CC:D6:45
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018655D9F6FD04443FF7849C661A3D86EB80
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/KG2_0MEig9V5wR2A3DzncgPM1kU.roa
Signing time: Wed 15 Feb 2023 16:13:13 +0000
ROA not before: Wed 15 Feb 2023 16:13:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49536
IP address blocks: 46.161.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:55:d9:f6:fd:04:44:3f:f7:84:9c:66:1a:3d:86:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Feb 15 16:13:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=286dbfd0c12283d579c11d80dc3ce77203ccd645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:7d:c7:6d:55:ed:ad:88:af:18:91:d9:7c:
dc:63:b3:c3:73:b4:b6:e1:c7:34:ef:c4:d6:85:2a:
a9:27:87:f8:93:0c:e4:9c:bc:0f:ac:a2:4f:6b:3a:
44:f3:00:46:83:ea:96:e9:a3:01:0c:54:38:4e:0e:
8c:af:d1:5d:1a:f8:99:f2:9a:70:41:f5:ab:11:07:
bd:0a:23:b9:5d:15:0a:e0:98:8e:f6:1b:c1:5f:4b:
57:01:f9:6c:94:89:2b:65:e5:ed:56:47:74:fb:2d:
60:ca:4e:25:1a:7d:43:6a:f3:3c:9d:a1:4a:47:2f:
fa:c4:1d:ef:31:a4:a2:17:a5:60:a6:ea:64:4e:50:
6c:f8:38:eb:73:56:f7:3a:60:43:7d:cd:4d:79:38:
9c:3b:40:74:22:bd:97:9b:02:a1:9f:ee:b0:fd:7f:
8e:0d:dd:d7:3c:63:26:6a:dd:35:81:6f:fd:e1:13:
01:f3:74:76:34:2f:9e:f8:c2:ea:96:23:68:5c:bd:
f2:81:35:64:aa:7a:21:12:c4:48:b1:02:25:28:79:
4c:56:78:2e:dd:c1:b3:2e:62:7e:ef:de:04:75:34:
c6:15:ac:2c:9b:00:5f:c3:22:74:4b:5b:f2:81:04:
d3:34:49:93:31:b6:78:87:e0:c5:a2:dc:57:90:b9:
41:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6D:BF:D0:C1:22:83:D5:79:C1:1D:80:DC:3C:E7:72:03:CC:D6:45
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/KG2_0MEig9V5wR2A3DzncgPM1kU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.1.0/24
Signature Algorithm: sha256WithRSAEncryption
91:08:80:32:1d:bb:20:be:aa:40:19:6f:27:80:1f:49:fc:14:
98:43:2f:f0:e8:de:db:68:d7:68:08:f1:8e:e1:e1:19:49:76:
33:d8:9c:89:9a:c3:f1:8c:56:a8:18:c4:b8:5d:8c:be:49:df:
a2:45:c5:a7:14:60:79:ea:82:6e:39:1a:88:82:f9:51:10:e0:
10:54:5d:6e:48:5d:e4:cb:e1:12:03:f3:cb:9d:43:20:fe:1d:
b3:c9:6d:03:b4:bc:d9:d4:c1:64:33:1c:2a:cf:45:6a:bd:b8:
70:dd:a6:d7:58:d1:7c:62:82:d5:a2:b6:55:d4:29:d7:2f:df:
37:af:7f:4f:b3:db:2f:ae:c3:ad:5b:3e:87:78:d5:3f:e1:bb:
62:47:64:a1:59:83:00:9e:39:23:96:dd:bd:ca:17:87:b2:c0:
c7:45:29:bf:d4:f2:29:ca:68:cd:cd:c3:0c:f3:20:7e:58:e7:
b6:a3:35:07:04:43:ed:96:de:ed:06:3d:cb:95:02:27:c0:13:
84:81:90:18:52:d4:21:ed:38:98:12:32:a4:7f:09:15:2b:04:
fd:98:22:bd:07:4d:00:90:b4:e8:df:2c:fc:f6:e5:e5:57:0f:
67:e9:3c:ae:d8:47:14:b5:6a:81:76:8d:fe:39:46:18:57:e5:
17:e7:e4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:47 2024 by rpki-client on console-ams.rpki-client.org