Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_UcxnTtZrOHaG_TkPbH5AxcD3qQ.roa
File: _UcxnTtZrOHaG_TkPbH5AxcD3qQ.roa (raw, json)
Hash identifier: Cx3+yHB0IkVft2bOwHibefPlKcmYhjD1XCcVmqNSKcM=
Subject key identifier: FD:47:31:9D:3B:59:AC:E1:DA:1B:F4:E4:3D:B1:F9:03:17:03:DE:A4
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0185EF4EA9A97343A681852F6FD89205733E
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_UcxnTtZrOHaG_TkPbH5AxcD3qQ.roa
Signing time: Thu 26 Jan 2023 18:19:47 +0000
ROA not before: Thu 26 Jan 2023 18:19:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26548
IP address blocks: 46.161.56.0/21 maxlen: 24
146.185.206.0/24 maxlen: 24
146.185.200.0/22 maxlen: 24
146.185.204.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ef:4e:a9:a9:73:43:a6:81:85:2f:6f:d8:92:05:73:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 26 18:19:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd47319d3b59ace1da1bf4e43db1f9031703dea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7d:0f:ae:57:fe:75:ac:9f:8a:34:2f:8d:6c:
33:25:a6:eb:56:ba:89:d8:0b:a7:8f:0a:83:77:7e:
c5:40:0e:04:1a:fc:85:68:00:a5:a3:19:ad:90:78:
d5:87:dc:f7:43:48:e2:22:4a:b2:1d:86:27:b3:43:
83:f0:09:ce:fe:3c:94:a0:55:53:cb:14:c7:34:57:
36:d8:94:29:ad:64:18:78:9c:4f:33:75:c5:db:b8:
72:4f:09:1e:c3:13:b6:24:d1:8a:7a:cd:00:45:cf:
37:b6:a3:66:cf:78:64:61:ed:01:8c:b6:01:3e:da:
7a:fb:98:80:79:cf:c9:30:b5:0d:b0:a0:c9:c7:f8:
02:55:ab:e8:17:5d:6a:e8:c7:7b:90:60:e3:9c:7e:
53:88:e3:56:99:db:57:1f:b6:86:08:fa:ed:a8:81:
46:76:75:9f:9d:c3:d5:6b:6d:5f:a8:85:95:41:25:
98:9b:64:49:a0:a0:ac:7f:cd:01:4a:63:c3:1e:2d:
fd:de:e6:99:14:48:2b:d3:36:bf:b0:2e:e9:90:39:
e5:13:e0:f4:c2:31:53:82:ac:c7:04:d3:08:2b:47:
c5:e6:4e:82:c5:a9:9c:49:4e:6d:68:76:bc:60:d8:
cf:10:7f:02:17:1c:3e:f8:0a:cf:67:88:45:c5:6e:
8b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:47:31:9D:3B:59:AC:E1:DA:1B:F4:E4:3D:B1:F9:03:17:03:DE:A4
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_UcxnTtZrOHaG_TkPbH5AxcD3qQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.56.0/21
146.185.200.0-146.185.206.255
Signature Algorithm: sha256WithRSAEncryption
91:95:c4:e2:6b:68:4d:06:2c:49:d0:45:e3:9f:01:06:d4:ac:
34:0b:8a:b4:d3:cf:f3:1f:bd:89:7f:cf:c2:5a:44:b3:13:43:
91:6a:f2:7c:c4:a3:9a:4d:66:e7:d7:fe:da:92:a7:c1:0f:5d:
62:ef:a9:0a:c3:45:93:29:87:e8:6e:7d:4a:0b:7c:80:e0:f3:
f0:18:7e:08:76:bf:eb:df:34:ff:dd:2b:ee:2d:32:30:45:0a:
96:52:88:32:4a:6c:04:2d:4f:3f:f2:ba:cb:ca:13:bb:fc:67:
27:e4:fc:9f:6b:dc:8b:0a:11:15:fe:a5:cd:c3:e1:70:b3:3e:
aa:76:da:a8:fd:b1:a7:46:b3:5b:21:37:54:45:d2:c7:c5:3a:
3c:0d:32:10:fe:77:49:cb:19:43:e0:0f:c3:00:a3:5e:19:b8:
4f:5b:b2:32:6d:13:8c:27:e2:c4:a6:94:da:a0:d6:ea:ec:bd:
35:b2:70:3b:07:d6:78:54:9a:ee:b5:e4:44:22:6d:51:da:57:
a7:d3:2e:c7:4b:b6:78:b9:38:ed:af:16:69:d0:ec:6d:54:c4:
3f:25:d5:48:b2:2f:53:77:d1:b9:73:60:4c:e6:ac:ed:ae:97:
ad:43:ef:05:72:c0:1a:e9:d6:27:ca:f0:2e:02:4c:21:79:ec:
d0:99:bd:a8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org