Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_J3RK18Hoqk509d7CmTyp93wBmo.roa
File: _J3RK18Hoqk509d7CmTyp93wBmo.roa (raw, json)
Hash identifier: /oT7zi6PkMBmXblgKCb+sdbeQZX6kGhMHBL2CW+HVjM=
Subject key identifier: FC:9D:D1:2B:5F:07:A2:A9:39:D3:D7:7B:0A:64:F2:A7:DD:F0:06:6A
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018572471AD57C60700514279AB26A69B35C
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_J3RK18Hoqk509d7CmTyp93wBmo.roa
Signing time: Mon 02 Jan 2023 11:39:00 +0000
ROA not before: Mon 02 Jan 2023 11:39:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212128
IP address blocks: 46.161.4.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:47:1a:d5:7c:60:70:05:14:27:9a:b2:6a:69:b3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:39:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc9dd12b5f07a2a939d3d77b0a64f2a7ddf0066a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8f:d4:f5:2f:c0:dc:d4:c5:d5:e4:d1:e4:d2:
c5:cb:ad:aa:1b:f7:90:68:97:6d:82:b9:99:54:81:
f2:b3:3d:ec:74:6c:12:1d:5c:67:a9:d0:4f:b7:66:
12:00:56:2e:38:1d:b0:f6:b1:f7:1b:49:6e:c9:1d:
80:c6:93:f9:59:3d:f8:15:84:09:be:41:c5:15:04:
a6:1c:f6:b2:52:0a:ec:7e:6a:26:23:32:36:c9:e2:
93:37:20:08:aa:3b:4a:06:04:18:77:12:9f:28:ca:
cf:0f:6f:1d:5f:b1:46:a3:07:b0:9f:32:d3:e8:25:
2f:a8:ee:02:7c:c5:45:cc:dd:3e:ff:81:6f:34:51:
30:ce:51:12:3d:38:84:91:4a:ea:55:43:ab:7a:b3:
4d:7f:07:92:27:44:ff:c5:19:e4:dd:bc:c3:7d:ec:
af:d0:05:9f:69:92:d2:07:18:c5:01:e5:0d:8c:f5:
81:2c:a8:99:a2:c6:6c:bc:6c:89:a2:58:2c:89:10:
a6:2e:ab:8e:37:66:ac:07:91:18:e3:7f:8c:f5:f9:
dc:76:33:1e:8f:b7:eb:27:45:a7:25:b7:6e:20:b9:
6f:2d:30:f8:b7:5b:ef:a1:ce:fb:9d:95:58:eb:0f:
96:23:7d:3b:aa:87:58:7f:25:72:ee:ea:97:34:e6:
db:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9D:D1:2B:5F:07:A2:A9:39:D3:D7:7B:0A:64:F2:A7:DD:F0:06:6A
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_J3RK18Hoqk509d7CmTyp93wBmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.4.0/22
Signature Algorithm: sha256WithRSAEncryption
07:0e:cf:b9:34:67:56:1b:0f:1a:45:00:a9:3f:0e:2e:c1:ec:
bc:29:ed:49:b2:32:84:d8:7a:55:98:6f:d8:ad:c2:60:0e:4b:
64:e3:bf:8a:0b:96:30:93:c0:1c:b9:ef:f6:95:57:94:79:7e:
a0:1e:67:09:d7:be:a6:e9:d8:cc:bd:de:e3:86:9d:81:dc:c8:
a8:31:36:55:ef:1f:43:09:f0:1e:62:86:c8:8e:da:b5:67:70:
8f:d0:c6:7b:2e:44:30:04:12:93:92:3b:80:b7:ee:a2:af:52:
5f:29:3e:b1:2b:42:9c:df:80:1b:cd:d2:96:83:da:57:5a:f9:
b3:f5:8e:d9:fb:06:ee:5a:0f:2a:a4:cb:d0:75:5b:b5:9e:62:
d1:1b:1c:da:53:94:b9:d3:3c:9b:48:8b:4f:06:cd:99:57:db:
8e:d2:01:7b:51:d1:2a:4f:9b:02:c4:67:09:19:e7:9f:30:b6:
7e:c3:9b:75:98:ec:d2:a5:11:a0:45:23:e5:b5:2f:fc:2d:25:
90:8b:91:bc:87:4c:f8:af:44:0f:db:8e:59:1a:93:38:9c:b1:
c2:e7:75:a2:ec:41:6e:98:87:9b:c4:07:fa:ec:5b:da:89:84:
e1:9f:f7:81:82:be:b6:39:2b:b4:72:68:89:07:09:1c:bf:ee:
7a:0d:45:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:47 2024 by rpki-client on console-ams.rpki-client.org