Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/kmJiN1Jl2hWJZiSRoVe43_cEq3w.roa
File: kmJiN1Jl2hWJZiSRoVe43_cEq3w.roa (raw, json)
Hash identifier: 6QmZZtIw8oGMh1jCuWpMgOa0nafks/FpEBX0It39Ils=
Subject key identifier: 92:62:62:37:52:65:DA:15:89:66:24:91:A1:57:B8:DF:F7:04:AB:7C
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018CC56E0849C36DAF033943BAE135C3BA48
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/kmJiN1Jl2hWJZiSRoVe43_cEq3w.roa
Signing time: Mon 01 Jan 2024 14:29:31 +0000
ROA not before: Mon 01 Jan 2024 14:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49536
IP address blocks: 46.161.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 10:53:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:08:49:c3:6d:af:03:39:43:ba:e1:35:c3:ba:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 14:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=926262375265da1589662491a157b8dff704ab7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:99:63:ff:7f:75:02:43:c3:3e:4c:dd:8d:67:
7f:22:23:98:ad:48:dd:9b:3a:31:44:e9:a0:5c:5b:
3f:46:cc:f6:2b:3d:a2:fc:20:f4:5f:43:61:39:e5:
24:99:d0:75:87:73:76:5e:f4:6c:d1:f8:a8:ae:0b:
93:2e:c1:32:d8:58:5a:7d:48:7a:a9:cf:2d:48:c2:
6f:22:9f:5f:1a:3e:58:7e:16:98:a3:fb:5d:1d:93:
87:92:82:c8:63:ec:3f:ea:36:34:3a:96:3f:26:83:
be:1d:8b:7f:b2:53:db:4d:40:b2:c8:4d:5b:c3:23:
1c:00:14:a1:f0:da:fc:9e:aa:e6:67:a2:9f:96:42:
0f:c8:53:c2:de:ab:9c:0b:d3:d7:60:bf:9b:0a:f3:
2a:ea:05:bb:db:31:98:d7:03:ce:d4:73:dd:28:a1:
f9:f5:ac:b0:28:7d:a5:54:64:ec:e0:14:14:6f:ba:
66:bf:81:74:92:5b:15:e0:4d:1a:61:c4:a6:29:bd:
89:47:20:67:c0:19:5f:9d:28:8c:9b:5d:73:62:c3:
8f:5e:b9:70:f2:63:a0:c6:b2:29:26:26:fe:b9:8e:
26:1f:5a:fd:a1:81:f4:e3:e4:32:b5:59:4f:b8:5c:
d5:5e:58:4f:4c:18:cc:73:39:a7:78:ae:62:66:85:
95:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:62:62:37:52:65:DA:15:89:66:24:91:A1:57:B8:DF:F7:04:AB:7C
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/kmJiN1Jl2hWJZiSRoVe43_cEq3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.1.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:76:5b:14:4a:59:a6:1f:ac:7b:4b:57:b2:c4:d4:ef:f5:62:
69:a8:87:9b:79:04:77:4a:ec:0f:64:8f:ed:0e:97:91:bb:4c:
7a:c6:f0:5e:9f:dd:28:98:87:ee:49:4e:00:03:b0:d6:44:74:
88:86:21:8c:e0:4c:fb:ec:e2:29:7e:2a:aa:2d:51:06:ec:db:
25:90:8a:c0:15:91:11:76:91:3b:85:ab:91:ad:8e:a1:15:e3:
73:bc:d7:26:bb:5f:6c:47:20:a6:3d:9e:37:4f:2e:6c:18:ea:
48:90:70:58:44:b9:93:bd:45:8e:a5:7b:9d:27:83:30:01:50:
6e:a3:77:d9:4a:39:5d:a9:da:0d:94:4c:78:d0:c0:e0:c4:4f:
a6:9d:36:b9:18:e6:45:87:7a:e0:7a:e3:95:ee:d1:db:47:3f:
4e:64:bb:ba:91:82:4a:17:d9:98:57:e0:d4:a4:31:45:48:38:
84:2d:ab:fa:1c:80:f5:84:fa:69:4e:d8:ac:e7:33:c0:38:ac:
a0:f1:4f:05:a2:fb:78:21:26:69:cc:9a:8c:d9:26:c4:c2:24:
c5:ac:6a:db:0b:ff:a2:9d:8c:16:d7:e7:85:e6:4a:b1:ef:c8:
72:1b:36:b1:99:65:70:34:15:64:e9:56:15:b9:92:f2:5b:8d:
2e:94:20:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 15:04:15 2024 by rpki-client on console-ams.rpki-client.org