Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/nj7xB79l02t6DXz-PY0MtjbbpYM.roa
File: nj7xB79l02t6DXz-PY0MtjbbpYM.roa (raw, json)
Hash identifier: 8asPnOY6Ah7NeEo1FwR+vHnwxz3QrB283C78dmYDYOE=
Subject key identifier: 9E:3E:F1:07:BF:65:D3:6B:7A:0D:7C:FE:3D:8D:0C:B6:36:DB:A5:83
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01876FD874130AD11DC98CB454CBDCB2BCA3
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/nj7xB79l02t6DXz-PY0MtjbbpYM.roa
Signing time: Tue 11 Apr 2023 10:24:29 +0000
ROA not before: Tue 11 Apr 2023 10:24:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50738
IP address blocks: 46.161.11.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:d8:74:13:0a:d1:1d:c9:8c:b4:54:cb:dc:b2:bc:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Apr 11 10:24:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e3ef107bf65d36b7a0d7cfe3d8d0cb636dba583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1a:bf:bf:9e:c1:9f:d0:44:05:43:31:e9:52:
c7:28:6f:a5:f2:99:57:ea:03:74:7c:cc:56:2d:41:
1a:30:36:b1:cc:41:17:1a:1d:62:d0:7a:4d:d3:65:
62:65:73:37:35:d4:35:8a:ec:31:c5:55:cf:cb:0a:
8f:ca:90:d8:2f:f7:a5:3a:0a:c5:de:17:68:73:46:
c7:0b:c6:1e:59:31:68:38:4b:42:0f:7d:b1:07:2a:
e7:84:80:2f:ae:2c:8d:b9:80:88:7a:ca:2b:42:2b:
a7:e1:fb:57:cc:97:96:76:81:67:40:2c:f9:3c:bd:
90:54:6d:f1:a7:33:05:51:9e:90:27:85:d0:11:23:
dd:9a:cd:ab:3f:cf:4f:03:55:b4:d9:69:68:58:de:
38:30:58:5c:ad:22:7c:70:85:28:79:ef:80:41:3a:
f9:d1:21:c6:17:eb:7d:a1:21:35:3c:b7:d3:f0:99:
73:2b:e0:2a:7d:c0:e8:4a:6c:32:7a:09:03:2b:90:
d4:2a:c0:bc:d9:c2:48:8f:5b:7e:8a:c6:48:81:55:
58:a6:3c:ee:63:66:b5:a9:8d:2b:38:c3:2d:69:46:
8a:98:66:7f:9c:8e:75:c6:59:9a:8e:9d:f6:07:d9:
e0:09:00:c3:cd:2a:ea:5e:d0:8f:38:e9:86:65:b3:
7a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3E:F1:07:BF:65:D3:6B:7A:0D:7C:FE:3D:8D:0C:B6:36:DB:A5:83
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/nj7xB79l02t6DXz-PY0MtjbbpYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.11.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:22:7b:ce:58:8f:85:8d:de:ee:de:d2:15:52:3a:a1:b1:fc:
71:2a:5f:3f:52:9e:d2:f0:85:d9:4f:b6:34:e7:a0:aa:9f:fd:
e6:59:bb:2e:52:0a:30:74:e2:e5:50:5c:cd:1c:60:b5:8f:c1:
ef:b5:4e:6b:23:98:0c:52:bb:75:d0:cc:1e:ef:c8:58:78:9b:
e8:41:34:b5:2c:35:30:59:d2:fc:da:e4:1c:b1:86:36:da:83:
be:14:97:61:48:8e:0b:22:28:8e:04:51:4a:2d:63:b3:d9:f6:
3c:35:cc:09:f0:f6:70:60:00:39:87:24:ed:7a:89:6e:40:65:
79:cc:17:eb:ff:fd:bc:9d:76:b1:16:93:10:77:23:42:2b:28:
53:b9:9b:f6:4f:a5:06:0a:5b:41:7a:20:8c:ea:df:a0:3b:85:
b5:26:c6:f5:9c:8c:e7:46:1c:0e:e8:e0:0f:b2:46:9c:fb:f3:
3f:56:6f:16:5d:dd:5b:4f:2f:89:1e:ed:81:f3:85:be:5f:02:
c1:22:53:ea:d5:68:9c:70:89:ce:5c:d3:02:ad:1d:1e:14:3b:
2d:0a:85:26:9f:7b:52:af:24:69:e6:0b:c4:69:47:17:f4:a9:
c8:21:29:a4:bf:45:4e:41:9a:4f:82:3d:90:25:b6:75:5b:9c:
33:96:81:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:56 2023 by rpki-client on console-fra.rpki-client.org