Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_Kjmgst-KynzbqJYyMCA90IGh0I.roa
File: _Kjmgst-KynzbqJYyMCA90IGh0I.roa (raw, json)
Hash identifier: x5wB32pxA4UPs3blb7W1akjWfhTNu3ekFFq8dtsGcdE=
Subject key identifier: FC:A8:E6:82:CB:7E:2B:29:F3:6E:A2:58:C8:C0:80:F7:42:06:87:42
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01857247041CD05C43D6D994E2899903A60D
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_Kjmgst-KynzbqJYyMCA90IGh0I.roa
Signing time: Mon 02 Jan 2023 11:38:54 +0000
ROA not before: Mon 02 Jan 2023 11:38:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43350
IP address blocks: 46.161.27.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:47:04:1c:d0:5c:43:d6:d9:94:e2:89:99:03:a6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:38:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fca8e682cb7e2b29f36ea258c8c080f742068742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9f:22:78:32:ca:e7:01:47:47:2e:eb:69:c1:
5e:6d:2a:6b:b6:92:a2:49:e6:54:dd:dc:62:93:b9:
79:d0:10:4d:bd:d9:87:4b:4c:59:db:29:12:8f:80:
ec:f5:42:c9:3f:bc:f9:46:58:f4:cd:60:fb:46:d9:
7d:21:f5:50:c6:a6:bd:68:36:cd:94:4c:95:d9:31:
43:de:4d:00:3d:52:63:f7:5c:2c:17:4b:c4:12:a0:
0b:61:ea:34:6b:e3:5e:ca:93:4a:e4:c1:b5:2b:b1:
e1:59:4c:0f:f4:69:2b:ff:93:e0:9c:ec:d3:e8:7f:
18:f8:b7:b4:9f:28:1d:6f:86:ac:fd:c5:11:83:e8:
2a:32:98:e5:17:20:3a:8a:aa:8f:b3:55:28:61:c4:
81:2e:02:6e:d6:cd:82:55:df:16:90:3d:c8:8e:d8:
d5:c3:b9:66:cb:a9:54:c0:94:51:50:a1:2f:b3:6c:
48:85:17:e1:1e:0c:71:45:05:34:13:1b:83:9f:44:
2e:fd:85:c3:92:f5:54:99:84:4b:2e:dd:9e:49:26:
8f:8b:e1:8a:ff:29:a3:9c:3e:2f:23:35:fa:ca:41:
94:ce:41:69:5f:dc:3a:ad:9c:bf:2e:26:2f:cf:c2:
d2:88:48:30:0d:e1:08:1b:b2:24:a1:54:d3:1e:e5:
7f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A8:E6:82:CB:7E:2B:29:F3:6E:A2:58:C8:C0:80:F7:42:06:87:42
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_Kjmgst-KynzbqJYyMCA90IGh0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.27.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:c4:91:cf:4c:a4:09:f7:43:0b:60:d1:89:4c:88:28:8d:d3:
80:ef:6d:07:2e:43:5d:d2:2b:a8:0b:34:53:5d:24:58:5f:c8:
7e:bf:a6:6a:7d:cd:b9:0d:a5:28:43:ee:84:cc:de:46:21:19:
d9:dd:06:b0:65:ba:2a:f0:4f:ce:a9:20:f0:a0:6f:76:97:f3:
29:0b:f8:7c:ab:38:3d:92:e5:6e:eb:5a:cb:25:98:ef:c2:38:
3c:39:6d:34:26:3b:e4:8f:4d:f3:f1:80:c0:8a:fc:6c:37:2a:
6d:ac:ee:5a:dd:b5:fd:d0:4e:ca:d4:4e:f7:32:1c:a4:36:72:
46:00:8d:ed:8b:07:bf:2a:bb:41:c1:61:72:00:55:bd:e6:e6:
ad:94:fd:c2:01:39:26:a5:a6:5c:bd:a0:54:bf:ad:a7:86:62:
b9:f8:fd:7a:7a:1d:48:41:a8:94:18:e0:31:7f:81:ec:2a:f4:
4d:97:46:e4:ac:7d:7d:92:06:19:69:df:ad:02:23:78:99:2c:
38:fb:fb:9c:07:f2:45:c3:cd:ac:83:00:3f:4b:2e:c3:c1:6b:
6f:d3:33:48:cb:05:18:5c:a2:d9:74:6d:34:d4:97:f6:3e:87:
3e:50:52:df:c3:83:6f:8d:af:a3:eb:df:d0:a1:ea:69:0b:d6:
c0:53:d4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:47 2024 by rpki-client on console-ams.rpki-client.org