Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_cJVpNoXefNPpLXymE75PGlkzak.roa
File: _cJVpNoXefNPpLXymE75PGlkzak.roa (raw, json)
Hash identifier: 2CsVqd8JUesezxSFRcYAwLMDoor234etLORNodD/FXQ=
Subject key identifier: FD:C2:55:A4:DA:17:79:F3:4F:A4:B5:F2:98:4E:F9:3C:69:64:CD:A9
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0189B01EE820E02928CAEED6F8C423F909BB
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_cJVpNoXefNPpLXymE75PGlkzak.roa
Signing time: Tue 01 Aug 2023 08:02:42 +0000
ROA not before: Tue 01 Aug 2023 08:02:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200922
IP address blocks: 46.161.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:1e:e8:20:e0:29:28:ca:ee:d6:f8:c4:23:f9:09:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Aug 1 08:02:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdc255a4da1779f34fa4b5f2984ef93c6964cda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7d:de:f6:d1:6b:19:73:5a:44:16:01:77:2c:
b9:ca:71:6d:f2:ce:2b:33:97:4c:be:b2:ff:01:c6:
17:93:29:89:5e:cf:3c:31:30:96:ee:77:79:eb:5c:
a5:44:27:15:fa:90:df:91:f4:d5:e2:34:97:cb:9f:
9c:15:7c:01:a3:bb:57:1c:1b:28:76:cc:52:7a:c6:
2e:90:da:46:9a:78:7b:9a:88:1d:40:93:7f:ad:7f:
1b:57:21:99:9b:9e:db:49:dc:90:02:5d:7a:75:18:
26:eb:3e:f3:2c:32:b8:28:71:5a:d9:bf:0b:e2:aa:
af:69:e3:0a:7a:ca:c3:10:21:e2:df:0b:39:bf:48:
d6:f4:75:94:d4:09:f8:e6:1f:4b:e3:c4:7c:bb:6b:
63:ad:b8:eb:6d:eb:ab:57:00:57:fb:1f:03:6f:d7:
45:72:75:82:3e:d8:e5:81:e6:5a:38:31:56:6c:1e:
31:f0:fb:9e:e0:ed:61:be:0d:a9:11:1c:1d:7a:9d:
7b:bf:4c:b8:17:d4:04:db:78:97:0d:39:bd:e7:e6:
3b:21:50:bc:17:d8:0c:58:3b:12:b3:d3:a1:79:be:
c3:41:a3:61:34:a5:6b:45:38:f7:97:e3:3b:9a:cb:
24:6e:db:fa:08:a3:52:60:8d:88:c4:d1:3b:c7:c6:
1b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C2:55:A4:DA:17:79:F3:4F:A4:B5:F2:98:4E:F9:3C:69:64:CD:A9
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/_cJVpNoXefNPpLXymE75PGlkzak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.9.0/24
Signature Algorithm: sha256WithRSAEncryption
54:a5:56:92:31:12:68:df:15:be:bf:d5:30:cb:21:c2:56:a8:
35:ac:b9:45:ac:e8:b0:97:14:17:af:d5:d8:8a:61:2b:25:9d:
26:4e:89:35:25:da:5d:ab:92:e2:d9:72:29:7a:1c:34:95:6b:
de:61:6e:e8:bd:f2:7a:50:41:15:e6:ac:1c:b1:e0:1b:59:eb:
13:8f:18:d4:a1:2a:07:41:4e:a2:46:f0:c8:9b:04:f8:6e:77:
7b:6f:a3:6e:c7:18:d0:9d:e5:c5:5a:01:5a:c3:c9:44:00:f3:
68:ea:39:5d:5a:8c:1b:fc:d7:cf:b2:68:f3:f7:50:ce:71:44:
b7:e9:ad:d4:50:e3:11:3b:6b:6d:15:f2:10:8b:3b:f9:03:ce:
84:0b:25:90:bd:3d:83:da:59:47:69:68:84:7e:3a:44:a3:d8:
2c:47:2f:bb:87:6f:ad:37:ba:90:98:84:03:e7:00:33:81:e4:
1e:fc:f9:06:88:f3:63:e8:1b:c2:b4:47:ba:62:45:21:84:c0:
69:7a:3d:0c:41:73:bb:f9:b6:ed:23:2a:36:75:ce:e7:d4:a9:
0d:f4:b0:6f:b4:d9:3d:c3:51:e0:4a:a9:91:8f:b7:08:1e:b6:
04:90:8a:74:dc:b0:e3:9a:a4:24:c8:95:fb:66:e4:bf:f2:38:
b8:4a:a6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 04:12:29 2023 by rpki-client on console-ams.rpki-client.org