Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ngrKxT67g0cltcvOu8tvmyxzQ1M.roa
File: ngrKxT67g0cltcvOu8tvmyxzQ1M.roa (raw, json)
Hash identifier: p60UkNaac5Xy45GOML3rTOQSj0aCooHsAw/hFTyFQsQ=
Subject key identifier: 9E:0A:CA:C5:3E:BB:83:47:25:B5:CB:CE:BB:CB:6F:9B:2C:73:43:53
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018572470719D95FD92FEB16D16A186C5DD8
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ngrKxT67g0cltcvOu8tvmyxzQ1M.roa
Signing time: Mon 02 Jan 2023 11:38:55 +0000
ROA not before: Mon 02 Jan 2023 11:38:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45054
IP address blocks: 46.161.16.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:47:07:19:d9:5f:d9:2f:eb:16:d1:6a:18:6c:5d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:38:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e0acac53ebb834725b5cbcebbcb6f9b2c734353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:44:6d:06:82:27:a2:1e:fe:bc:23:ec:3b:33:
99:55:35:de:f6:5e:75:83:e7:9d:24:8b:35:b4:01:
2e:d1:53:b4:17:03:9b:69:02:68:e2:2d:ad:79:dc:
5f:e6:54:58:db:45:eb:77:1b:d2:ce:13:e1:c7:5a:
b4:4c:bd:5e:0a:6b:cb:44:52:17:63:52:f2:7b:fb:
dc:d0:02:4a:eb:af:13:8c:50:3b:fb:9e:78:9d:11:
d9:71:ee:d8:ca:8e:e0:c5:60:e6:e4:36:3c:5b:22:
7a:7c:4c:19:d5:79:86:ac:06:2f:8b:c3:d7:02:83:
89:32:dd:2d:ca:50:f9:cc:a9:e7:07:56:d6:53:c9:
38:de:1b:cc:3a:25:c9:70:3d:bb:9a:12:da:75:03:
9d:ad:a7:c6:29:7e:af:ac:40:6e:72:6b:7c:0d:c7:
99:b4:f0:06:84:5f:ba:46:5a:8e:e6:8d:2a:91:1a:
64:e9:94:4e:30:d4:e8:4d:51:5b:cd:c8:5b:c9:46:
12:97:3d:e1:33:16:ff:9f:ff:44:45:25:44:2f:05:
4f:36:ca:40:fe:37:33:8f:2b:c2:87:06:02:58:fb:
bc:f7:a5:51:32:a5:c5:5f:ad:d0:9b:63:d9:c9:62:
de:7b:01:24:07:73:a0:23:de:ee:31:a8:4b:6b:bf:
03:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0A:CA:C5:3E:BB:83:47:25:B5:CB:CE:BB:CB:6F:9B:2C:73:43:53
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ngrKxT67g0cltcvOu8tvmyxzQ1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.16.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:84:e8:b5:36:3e:f8:f4:d7:2f:c6:ee:b6:4a:a0:19:81:20:
e8:01:cd:b6:93:e3:cb:99:12:94:77:4b:ba:39:4f:88:4a:3e:
c5:ac:92:d2:a0:eb:28:9b:bf:e2:91:75:f3:24:1d:76:98:9e:
f5:8b:47:c6:88:25:0a:c0:e7:52:fd:71:78:96:1b:2f:6b:ad:
0f:84:15:bf:ed:93:c0:40:52:17:be:8e:7f:d0:62:65:ad:ef:
67:8f:5a:c8:a6:52:1f:37:6e:70:71:fa:2e:9e:1a:07:db:97:
40:5c:42:cf:e8:67:f9:47:60:8c:34:a4:ca:d4:dc:15:4e:42:
b6:5f:6e:ec:ce:7a:9c:c2:9a:80:17:2c:13:8b:15:9f:19:6a:
16:2b:66:7a:80:a3:b7:f9:c5:bb:74:bb:82:23:ab:fa:4f:eb:
0b:66:8b:d6:67:4c:db:bc:b9:b2:fb:76:c8:e5:9a:7e:8f:41:
0d:ad:85:9f:99:a4:8e:c2:44:23:91:da:0c:c7:c7:42:50:40:
86:46:2f:c3:a2:1e:c5:3c:3a:94:68:6c:11:39:0f:64:6b:65:
ff:8d:f2:59:81:fc:5b:81:86:62:10:1a:6a:78:73:28:26:4e:
1d:26:a2:2d:66:1c:7e:52:e5:8d:01:d3:22:36:e4:97:ce:05:
e9:1e:8b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:56 2023 by rpki-client on console-fra.rpki-client.org