Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/mrqG8sWfgoPYdwOQYaSr0D8CDnU.roa
File: mrqG8sWfgoPYdwOQYaSr0D8CDnU.roa (raw, json)
Hash identifier: ZcmsDfC+BaBIsJOPRZu0GRsABkozXqIyXVYxzRieGB0=
Subject key identifier: 9A:BA:86:F2:C5:9F:82:83:D8:77:03:90:61:A4:AB:D0:3F:02:0E:75
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018890A945A5C9EA5C0E8AF2E240CE1E9BEB
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/mrqG8sWfgoPYdwOQYaSr0D8CDnU.roa
Signing time: Tue 06 Jun 2023 12:23:12 +0000
ROA not before: Tue 06 Jun 2023 12:23:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43278
IP address blocks: 46.161.11.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:90:a9:45:a5:c9:ea:5c:0e:8a:f2:e2:40:ce:1e:9b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jun 6 12:23:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9aba86f2c59f8283d877039061a4abd03f020e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c7:10:3e:69:74:93:b8:e2:f9:89:bb:66:37:
d1:36:d6:57:d2:a4:16:a1:80:8f:9b:08:68:19:8d:
e0:c8:c5:9b:e8:ca:3c:0d:9b:62:6b:4a:9a:ef:4b:
21:8e:45:46:9a:2f:ce:dc:8e:1f:be:76:61:07:2d:
55:b6:53:e7:f4:c8:52:e6:51:1e:a5:36:10:92:4a:
7c:b2:3a:5f:84:29:02:6a:a7:d8:1e:cc:ed:50:2f:
91:2f:a6:af:f6:ae:ff:73:e4:27:8f:88:da:35:8d:
81:8f:37:bd:e3:11:86:bd:4f:90:af:3c:29:c5:98:
1b:9c:bd:07:d1:c7:86:c0:32:31:7e:9b:33:55:a5:
53:03:4e:bc:bb:4c:80:0e:b1:93:d1:87:5b:6e:01:
ca:55:68:a7:6e:d7:5b:f3:40:ed:b3:62:f7:a8:68:
85:ee:03:13:f9:52:50:30:97:d4:ad:26:c9:2e:42:
3e:e0:fe:61:0f:e3:de:3b:18:25:31:8e:62:45:5a:
5b:1e:47:04:79:8e:00:eb:27:17:2b:24:77:a9:43:
a4:c9:5d:39:94:7b:f3:a0:a1:ae:6e:c7:35:1c:0c:
22:48:05:a5:c5:d5:97:8b:b2:35:18:eb:24:5c:79:
bf:51:8f:ba:a2:2f:83:63:60:43:68:da:6b:1c:00:
31:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BA:86:F2:C5:9F:82:83:D8:77:03:90:61:A4:AB:D0:3F:02:0E:75
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/mrqG8sWfgoPYdwOQYaSr0D8CDnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.11.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:fc:eb:ff:c3:e8:38:27:2c:97:1b:d9:34:f9:ed:76:46:5f:
07:05:67:45:04:34:6b:d7:9d:d9:27:2d:ab:b5:5c:36:ea:a0:
9b:89:5e:a5:ac:05:f7:7c:0a:71:4f:b4:02:b0:8f:69:ad:a5:
3e:a2:10:e6:30:6a:f7:46:1e:5c:ac:ef:bf:4c:0b:40:4a:37:
71:0f:87:94:e6:1a:5c:33:93:c5:4f:d1:67:2a:76:ab:90:91:
de:ef:8d:e2:f1:21:15:ae:12:70:20:84:ef:42:65:b2:6a:e6:
35:af:64:89:af:5a:c6:e9:36:73:41:81:a0:9b:b8:4e:38:fb:
39:4a:f3:2a:c7:90:12:30:70:b2:c7:33:b9:1b:62:c4:ab:6e:
21:11:07:49:d7:39:0f:90:80:88:ef:44:d2:a3:ae:7e:43:cf:
61:e3:ca:a0:23:7b:41:2b:2b:5d:fe:c1:46:fb:0e:bb:f6:a9:
d1:51:72:f1:a2:45:ff:b2:a1:65:d0:a6:11:9a:4b:c1:ee:f5:
84:f1:35:b3:bc:be:ab:41:3e:1b:4f:fa:0c:56:b7:e9:31:58:
b1:9d:1f:0b:aa:0f:c5:1e:92:bd:19:18:13:df:f8:b0:5b:3d:
e7:cc:db:47:6e:7c:65:cf:2f:49:45:32:c5:3f:9a:82:d0:e0:
64:cd:7c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:25 2024 by rpki-client on console-fra.rpki-client.org