Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/sFdxEvE7GAKly9GHTQExNxI9F5c.roa
File: sFdxEvE7GAKly9GHTQExNxI9F5c.roa (raw, json)
Hash identifier: ddxbhc7+WI+vvauniG+FGZXN6ySYGzIFrGdOVnfh0ro=
Subject key identifier: B0:57:71:12:F1:3B:18:02:A5:CB:D1:87:4D:01:31:37:12:3D:17:97
Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial: 01856D93F99FB1E6BAAB383EE3BEB78BC168
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/sFdxEvE7GAKly9GHTQExNxI9F5c.roa
Signing time: Sun 01 Jan 2023 13:44:52 +0000
ROA not before: Sun 01 Jan 2023 13:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24631
IP address blocks: 46.54.139.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:f9:9f:b1:e6:ba:ab:38:3e:e3:be:b7:8b:c1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Validity
Not Before: Jan 1 13:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0577112f13b1802a5cbd1874d013137123d1797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:90:c7:de:7c:0e:b0:d6:f6:db:72:c8:09:c6:
2c:37:c4:1f:48:49:dc:9f:85:0b:28:8a:66:6a:d8:
8b:f3:34:d2:cc:7d:19:02:27:85:b8:e8:cb:54:b5:
45:18:eb:1a:ee:ff:bc:4b:ce:47:cc:52:e3:8a:6f:
63:8c:89:7f:5e:4d:45:60:80:2a:83:06:02:3b:83:
37:5d:af:97:8c:40:bf:53:01:94:32:1c:00:a2:d3:
a9:30:18:90:f7:14:b1:5d:3e:b9:69:5b:1e:6f:4b:
a1:16:ae:9f:65:1f:cf:aa:2a:31:ea:28:fd:c5:e2:
35:60:ba:27:d2:18:5c:af:38:71:5d:ef:df:07:68:
e4:86:dc:7e:d1:5c:32:2a:1b:92:43:be:9c:fc:1a:
58:26:43:26:5d:53:29:ef:f7:7f:88:bd:87:44:1f:
0a:f2:5c:51:cb:7e:ee:23:0f:45:6b:3a:11:8f:17:
01:c2:d0:65:8f:3c:35:b2:3a:d6:04:9b:a9:2e:3a:
9b:f2:68:43:8f:1b:5e:ea:63:c0:34:a0:0b:26:1a:
aa:56:e6:15:0a:1d:f5:77:c3:df:4a:43:2e:eb:91:
c0:c4:f0:7e:32:2c:fd:2b:59:63:45:4e:56:9a:22:
b7:07:e8:50:fb:bf:73:2c:94:6f:69:da:77:3a:d0:
c6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:57:71:12:F1:3B:18:02:A5:CB:D1:87:4D:01:31:37:12:3D:17:97
X509v3 Authority Key Identifier:
keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/sFdxEvE7GAKly9GHTQExNxI9F5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.54.139.0/24
Signature Algorithm: sha256WithRSAEncryption
87:1a:fd:1e:d7:1f:d1:92:bb:f1:0d:ed:8f:46:d1:23:a5:3b:
5a:f7:b7:20:43:60:4b:7a:0e:a2:12:a9:2f:42:88:57:6f:ec:
93:19:0b:0a:fc:a7:53:c1:0c:eb:7b:90:df:71:66:42:be:62:
3e:7f:d3:53:72:ef:d6:a4:a7:34:b3:11:d2:0a:86:ba:7d:2c:
9f:f7:70:15:ef:ab:ea:8d:92:53:83:b3:24:2e:4b:1e:53:c4:
3f:7f:c2:89:86:61:e3:ff:94:ea:ac:b6:12:ea:ea:b0:7a:0c:
94:f9:d1:52:73:96:70:ff:9c:bd:81:36:58:88:a6:ba:61:fc:
0a:4d:ef:84:c1:05:6a:f0:34:aa:2c:43:23:fb:d4:ac:dc:c4:
74:82:69:63:9c:a8:c4:67:73:c2:f5:d2:09:fe:b3:9e:68:9b:
91:a2:36:4a:91:17:ff:48:a5:6d:74:91:a3:37:96:57:b2:03:
52:b2:0a:78:a4:e7:b0:cc:f6:ed:99:fe:c3:ac:4d:29:56:f5:
7a:e8:e7:fc:55:b5:66:d2:7a:98:41:0e:d5:9f:29:30:ca:c0:
91:cc:d0:4a:cf:1b:01:fd:1c:02:3c:8d:40:72:b9:55:98:a4:
12:6e:93:bb:28:0b:29:a0:11:4a:17:7b:d4:0a:19:4b:e3:80:
d1:42:95:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:24 2024 by rpki-client on console-fra.rpki-client.org