Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/ciou5CT_Tmre5o30HSSwNP6xneM.roa
File: ciou5CT_Tmre5o30HSSwNP6xneM.roa (raw, json)
Hash identifier: iM9q/H2xd6mlf7ekBedNkBQG0TLub0jcGOxEPjJorA0=
Subject key identifier: 72:2A:2E:E4:24:FF:4E:6A:DE:E6:8D:F4:1D:24:B0:34:FE:B1:9D:E3
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 018B2A16711323073670E582D52C8EFE821B
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/ciou5CT_Tmre5o30HSSwNP6xneM.roa
Signing time: Fri 13 Oct 2023 17:29:55 +0000
ROA not before: Fri 13 Oct 2023 17:29:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48940
IP address blocks: 46.254.92.0/23 maxlen: 24
77.232.140.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2a:16:71:13:23:07:36:70:e5:82:d5:2c:8e:fe:82:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Oct 13 17:29:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=722a2ee424ff4e6adee68df41d24b034feb19de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:35:f4:72:e1:31:4f:ac:04:7f:84:53:a5:88:
a2:50:78:c1:d9:ee:f1:01:48:1a:4b:bf:a1:b2:bf:
57:62:6f:49:f5:9c:b9:6b:51:c9:d7:2e:c2:45:0b:
23:e0:25:fd:c5:88:99:a8:98:42:ff:01:3e:df:05:
bf:f6:d0:71:d3:ef:31:1e:60:ac:d5:00:92:fb:e2:
91:70:30:85:ff:94:3d:e7:86:ee:e2:aa:02:be:e0:
c2:d0:92:04:dd:71:e1:59:c7:bb:bd:3e:c0:a3:50:
bf:d8:42:19:eb:a4:ee:eb:d3:8d:f5:af:e9:2a:06:
02:19:c2:5b:a6:3b:49:98:dc:29:ae:f1:92:c4:13:
63:b8:88:5c:3b:af:3b:c0:0e:88:97:41:70:88:a7:
b3:d9:da:86:7f:7f:df:1f:b4:b0:e6:5c:4f:4a:58:
8d:29:a7:5a:d2:cd:ab:0b:be:be:70:c4:17:1b:2b:
6b:db:fe:a7:73:8d:bb:59:83:03:84:99:32:c6:40:
4a:5d:00:f0:3d:99:79:14:a5:fc:14:83:c2:ca:1c:
c6:59:72:de:2b:eb:9e:73:55:3d:ab:e7:b3:3a:f3:
86:d7:ab:fb:76:46:45:c0:e4:37:1b:71:ba:e6:d0:
85:95:b9:7a:93:22:cd:92:9d:9f:c8:c6:85:d7:76:
e4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2A:2E:E4:24:FF:4E:6A:DE:E6:8D:F4:1D:24:B0:34:FE:B1:9D:E3
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/ciou5CT_Tmre5o30HSSwNP6xneM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.92.0/23
77.232.140.0/22
Signature Algorithm: sha256WithRSAEncryption
64:37:c5:02:f7:7f:ed:6e:fa:8a:d1:d9:35:1d:4e:fc:80:2f:
56:bb:fe:d8:22:c8:aa:58:94:f4:64:27:70:f6:03:6c:3f:61:
74:82:1a:4c:03:af:74:db:9b:e6:bd:ef:f0:27:f2:2d:b2:30:
73:72:ed:82:5a:4a:15:d5:00:6d:bb:a5:32:15:d3:f4:a1:44:
c5:ff:94:56:81:92:c6:1e:21:d3:0d:9e:72:44:93:51:9a:74:
70:66:f5:4e:73:a6:41:3d:4f:4f:8a:83:bd:64:c4:33:b7:2c:
0a:3a:6f:d6:7a:83:6c:6b:74:e2:c1:98:e8:08:78:a4:70:d7:
be:7b:9f:28:2b:7f:50:4d:42:86:ca:00:03:bc:4e:20:2d:7b:
e5:e3:dc:02:f9:be:1e:69:66:2f:49:0e:79:57:9c:f8:e0:64:
76:a2:1c:b2:60:fa:4d:6e:7d:d2:4b:d6:a9:96:68:75:a5:92:
b5:b2:da:c0:06:c5:7c:b5:4d:f1:58:00:f7:cc:87:1e:3c:a2:
77:bb:0e:ea:87:09:01:93:cc:f3:64:85:bc:0d:3c:1f:7a:d0:
e5:a2:46:3a:13:65:cc:2f:0c:de:44:07:c6:d1:4f:a6:24:76:
f9:a8:a5:a3:9a:00:5e:99:e9:f7:22:ee:44:1d:83:8d:7a:68:
a1:08:7e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 15:47:20 2023 by rpki-client on console-ams.rpki-client.org