Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/mMAnFT14CV0r0Fqbdh_oP_obc7o.roa
File: mMAnFT14CV0r0Fqbdh_oP_obc7o.roa (raw, json)
Hash identifier: Ayyay7lRTAC/B1zg6dNJYRvAft7ARFnFeuO9/3IyvBc=
Subject key identifier: 98:C0:27:15:3D:78:09:5D:2B:D0:5A:9B:76:1F:E8:3F:FA:1B:73:BA
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 01856D93FA37DB04FBB3B7FF8C995388E9F0
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/mMAnFT14CV0r0Fqbdh_oP_obc7o.roa
Signing time: Sun 01 Jan 2023 13:44:52 +0000
ROA not before: Sun 01 Jan 2023 13:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51615
IP address blocks: 46.54.192.0/19 maxlen: 19
46.54.224.0/20 maxlen: 20
46.54.128.0/18 maxlen: 18
2a02:2590::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:fa:37:db:04:fb:b3:b7:ff:8c:99:53:88:e9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: Jan 1 13:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98c027153d78095d2bd05a9b761fe83ffa1b73ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5c:62:4b:e9:e1:88:8a:34:40:45:c0:90:69:
2f:6f:49:0a:0f:1e:a1:aa:38:94:e8:86:c5:fc:1e:
90:c0:c7:ec:6d:a1:e3:8d:89:f1:d9:ef:76:b9:6a:
4e:68:ac:9b:39:75:11:46:df:f1:cb:88:54:1c:70:
d1:a0:d8:86:df:c8:4c:f8:89:09:04:ad:89:54:36:
cb:15:d1:fa:39:d5:83:97:95:0f:14:79:95:8e:2f:
3a:00:1e:95:07:eb:19:49:eb:e4:57:76:d5:be:08:
77:fe:28:7e:2f:24:f0:ab:63:29:51:fd:3d:46:1c:
f9:1f:27:f9:d7:b2:11:d8:87:ad:b1:28:a5:48:f7:
0f:fc:42:a6:ce:56:b4:b5:e2:9e:15:8c:ec:64:86:
2d:7b:d4:8b:34:58:8f:9d:a8:12:c9:d6:d5:f0:07:
40:e2:ca:27:d8:1c:8f:09:c9:b6:0b:dd:09:d7:64:
ae:5b:d2:52:b1:3a:08:9f:aa:09:5b:9a:b7:b4:3a:
ef:4f:7c:c5:ed:2d:cd:6e:f7:4a:cf:88:a4:f6:37:
03:40:61:1f:89:36:50:fe:eb:22:1f:a6:1d:62:89:
af:55:51:88:15:f4:61:92:0a:05:55:46:62:57:e4:
ca:dc:13:da:0d:2e:86:f0:a6:4e:cb:99:51:ed:93:
a4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C0:27:15:3D:78:09:5D:2B:D0:5A:9B:76:1F:E8:3F:FA:1B:73:BA
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/mMAnFT14CV0r0Fqbdh_oP_obc7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.54.128.0-46.54.239.255
IPv6:
2a02:2590::/32
Signature Algorithm: sha256WithRSAEncryption
02:a3:c6:e9:3a:f4:51:b7:70:34:89:7c:b5:b8:8e:06:15:0a:
86:06:12:83:fa:4f:06:7f:b3:a4:46:1c:c3:da:0d:8b:30:38:
f5:33:11:05:aa:88:ff:8e:42:44:dc:29:b4:6d:13:f0:96:e1:
b6:82:6c:27:06:a8:f8:a2:81:89:ff:60:f0:e0:fa:f0:f7:8c:
1a:ed:9b:76:a9:1d:fc:da:f1:14:88:76:73:eb:3b:c3:b2:59:
4f:fd:ce:80:5a:51:2d:ca:d8:85:79:b6:c5:fe:3e:77:c6:2b:
fe:cb:5c:8d:7c:9a:e1:c7:b6:61:4c:ab:e2:e4:f8:85:44:ed:
e1:cd:ef:a9:1e:5c:4f:2a:23:7d:f0:cf:ba:20:09:56:f1:29:
72:b1:d8:45:46:f7:80:10:7e:7a:87:7e:eb:5c:cb:a4:3e:31:
e1:bc:cc:cb:c6:b7:40:ce:a6:2d:46:78:3f:c9:dd:74:a4:3e:
ab:ae:5c:3f:28:32:5e:84:14:51:3b:c7:18:ed:ef:1e:da:e1:
52:8a:1c:a0:87:b6:a4:03:7c:83:31:4d:91:b5:e2:da:b3:47:
13:43:ab:31:9e:ea:50:e2:35:fd:50:15:b0:39:ab:a4:c4:23:
ff:1f:ea:87:4a:4f:28:96:44:e3:11:81:3e:28:6c:ec:ef:b0:
06:67:a8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:03 2024 by rpki-client on console-fra.rpki-client.org