Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/b0s7TBZmOb-pMe5mlU1FHRuP-AU.roa
File: b0s7TBZmOb-pMe5mlU1FHRuP-AU.roa (raw, json)
Hash identifier: 4Pw+ixiM8DJgQndtyyd/OjiL387LVxI6xvtvvNiehqk=
Subject key identifier: 6F:4B:3B:4C:16:66:39:BF:A9:31:EE:66:95:4D:45:1D:1B:8F:F8:05
Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial: 01856E1D2C44C1EA74FF4A2B31971E8C502D
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/b0s7TBZmOb-pMe5mlU1FHRuP-AU.roa
Signing time: Sun 01 Jan 2023 16:14:43 +0000
ROA not before: Sun 01 Jan 2023 16:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212774
IP address blocks: 193.46.58.0/24 maxlen: 24
193.46.59.0/24 maxlen: 24
2001:67c:960::/48 maxlen: 48
2001:67c:478::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:1d:2c:44:c1:ea:74:ff:4a:2b:31:97:1e:8c:50:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Validity
Not Before: Jan 1 16:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f4b3b4c166639bfa931ee66954d451d1b8ff805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8c:4e:c5:ab:81:f0:82:58:77:98:7b:92:ad:
37:fe:ae:9c:a5:73:3e:6d:56:63:be:43:2f:67:fd:
17:a5:c2:42:dc:ae:23:61:24:fe:36:71:7a:f9:76:
24:b4:3c:e1:04:53:2e:a8:da:dd:04:1d:34:e1:8f:
94:95:8f:e9:72:1b:1b:fd:f5:13:01:54:45:6b:b4:
3d:27:4c:1c:0b:75:d3:98:af:9d:31:92:33:a0:39:
64:d3:e9:89:e8:a7:61:1e:d8:bc:fd:b1:db:5b:e9:
05:5a:57:0b:f9:c9:f7:7a:6e:0e:20:54:a8:c8:16:
08:6b:a1:12:0a:7c:47:a4:a1:49:b6:42:df:0f:23:
6f:ee:3e:c1:3c:86:90:54:b5:37:4f:23:cd:08:eb:
8c:83:40:a5:8c:ba:e2:1f:82:9b:d9:77:65:11:d8:
90:6b:a1:f9:0c:ad:dd:82:2a:4e:a8:fb:04:65:3a:
20:96:01:55:ce:44:68:4c:ae:84:3b:b7:30:3b:6e:
4e:c4:e0:b3:de:16:f6:40:4f:5b:fe:0b:fb:4f:c6:
d2:68:2a:39:ab:24:6d:ea:63:bf:b9:2b:f1:4d:97:
65:d1:cd:dd:19:7c:c0:e2:30:a8:b6:85:78:c6:d5:
09:bc:7f:ab:1a:20:9a:08:f9:86:6e:15:c8:d0:66:
aa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4B:3B:4C:16:66:39:BF:A9:31:EE:66:95:4D:45:1D:1B:8F:F8:05
X509v3 Authority Key Identifier:
keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/b0s7TBZmOb-pMe5mlU1FHRuP-AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.58.0/23
IPv6:
2001:67c:478::/48
2001:67c:960::/48
Signature Algorithm: sha256WithRSAEncryption
78:85:58:75:a2:00:97:f6:1f:9b:a9:de:b8:98:1d:0a:55:5b:
11:05:43:9c:32:16:9f:35:96:9d:7b:a8:4d:ea:30:99:b1:c5:
4e:f8:04:ea:42:53:9f:4b:6a:24:34:4d:f4:e1:14:4b:c7:c0:
c1:a4:3d:6c:88:6c:f9:24:ea:7a:84:a6:08:f9:dd:57:1c:18:
77:b4:8d:91:26:87:52:77:75:97:34:ba:8a:cd:29:5b:d8:ed:
3e:aa:1e:d7:86:15:4e:85:66:55:81:f6:dd:2d:35:06:3b:9a:
60:12:24:c5:2f:a4:ad:cb:03:e9:0f:8a:63:40:64:a8:08:eb:
7c:1a:cb:b4:fc:50:64:d4:bb:00:ce:a9:af:c9:df:a0:29:b1:
91:c6:32:5a:0a:53:9b:f8:05:bb:66:cf:2f:c4:bf:3d:24:86:
45:e0:d6:70:ad:a8:cd:d4:ce:24:77:36:cc:82:71:98:24:c9:
9e:9a:1e:ab:55:63:9d:f8:a2:c3:3e:1b:49:f5:1a:b6:0e:b2:
9a:56:cb:4b:de:de:ef:91:5f:ec:a5:d2:2c:76:2b:f5:b9:59:
88:56:3b:e7:58:f0:1c:fc:7b:14:1b:ca:bb:12:f7:9b:55:16:
22:54:44:ae:25:98:52:4a:3c:a0:71:91:48:ce:de:fd:ad:e1:
09:4f:9b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:21 2024 by rpki-client on console-ams.rpki-client.org