Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/L-RVblvy89qhpSBsCIQp-JanQdQ.roa
File: L-RVblvy89qhpSBsCIQp-JanQdQ.roa (raw, json)
Hash identifier: u0mixwSkGHkiGOMz2mKcLaKG0m7eVox2sSulcV2OTbo=
Subject key identifier: 2F:E4:55:6E:5B:F2:F3:DA:A1:A5:20:6C:08:84:29:F8:96:A7:41:D4
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0189D33E8B15B824D01EF3AB9BDE6CB491B2
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/L-RVblvy89qhpSBsCIQp-JanQdQ.roa
Signing time: Tue 08 Aug 2023 03:43:58 +0000
ROA not before: Tue 08 Aug 2023 03:43:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201776
IP address blocks: 46.161.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d3:3e:8b:15:b8:24:d0:1e:f3:ab:9b:de:6c:b4:91:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Aug 8 03:43:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fe4556e5bf2f3daa1a5206c088429f896a741d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8c:2a:21:df:50:0c:3d:0a:71:70:44:86:8b:
c2:d5:40:12:a4:77:55:7d:fe:84:0f:99:c3:a7:6b:
1d:6e:27:50:ce:d3:b4:c6:dd:f2:86:fe:36:75:e8:
40:f7:4c:22:2f:cb:02:90:44:ce:ca:64:03:6d:ef:
80:a1:4d:56:0f:1f:db:e5:93:0a:03:11:07:c2:c2:
69:c6:01:67:b7:6f:af:b6:44:05:6b:e1:8b:3f:6d:
c9:ae:6d:06:d3:21:d1:b1:6f:1c:fd:0f:72:8d:7d:
ca:5e:21:23:0e:85:ab:a2:37:79:81:2b:a9:19:65:
8f:9a:36:4c:e2:f2:fe:c8:b9:30:38:02:44:14:7b:
d2:0b:84:34:cf:0a:70:fe:63:32:4f:0b:19:58:13:
79:d9:8b:4a:a7:21:4a:e1:7a:12:5b:c2:79:00:ff:
4e:7a:d0:b4:6b:69:b1:25:76:14:5f:26:f7:07:fc:
80:a0:09:0f:f5:62:a1:73:a3:30:57:a6:99:a4:1e:
d9:48:5f:58:7a:e3:6b:54:3a:34:ef:7d:de:4c:fe:
cf:68:38:71:4a:8e:4f:1d:93:bd:2d:13:e2:e8:67:
b9:1d:2e:d0:cc:ce:b9:cc:d2:d0:a7:92:5e:4a:aa:
d2:1b:41:1b:ff:73:7b:5a:14:5d:99:a3:9c:aa:58:
92:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E4:55:6E:5B:F2:F3:DA:A1:A5:20:6C:08:84:29:F8:96:A7:41:D4
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/L-RVblvy89qhpSBsCIQp-JanQdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.9.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:c6:8a:8b:c5:d3:7f:98:cc:cb:5e:e9:62:ad:d1:9b:9b:ed:
2f:83:1a:fd:1d:d6:8c:3c:7a:bd:9d:00:88:10:e1:b6:34:c9:
f9:b4:ed:3a:d5:02:ba:6f:92:f9:61:16:dc:32:e0:09:cf:e8:
ba:38:38:a1:d4:98:45:14:06:62:d7:5e:5a:53:10:6d:06:2a:
40:7c:7c:3a:a4:bd:aa:4a:5a:a0:a1:a7:ad:63:48:ef:c8:75:
ec:05:5c:33:48:b3:5f:af:de:16:40:db:8c:6e:83:e7:69:bf:
a0:32:12:80:94:06:ee:c5:02:cd:25:8f:d2:3a:c3:7d:bf:fd:
24:6d:56:dd:b6:f4:01:d8:eb:81:9f:02:aa:5b:ff:7a:b2:bb:
3c:72:68:49:fe:cc:e7:4f:e0:10:4b:bb:bf:aa:b9:4d:c4:3e:
92:ce:2d:72:85:b5:cf:54:bc:a8:de:c5:96:7e:1a:96:44:3e:
72:af:a6:5c:c4:d1:3c:8d:02:9a:7b:7c:4a:45:91:76:1b:23:
43:8a:7e:ff:9d:a4:2d:fb:f7:80:be:48:a5:07:07:16:9e:12:
a5:d4:0e:af:ad:af:21:a9:87:5a:02:46:eb:8a:e5:f1:41:dc:
08:38:e9:d3:f4:46:a3:55:90:d5:20:5f:1f:44:3b:0b:9a:a4:
2c:9b:83:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:47 2024 by rpki-client on console-ams.rpki-client.org