Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/R6Va70yJXCW4ARGNFW1uRquWmN8.roa
File: R6Va70yJXCW4ARGNFW1uRquWmN8.roa (raw, json)
Hash identifier: SS1GI/BWv6Ws+SVTuYVghPgY3lq/MdG8kPNZlhOQrT4=
Subject key identifier: 47:A5:5A:EF:4C:89:5C:25:B8:01:11:8D:15:6D:6E:46:AB:96:98:DF
Certificate issuer: /CN=8794395ac822dfe01165216c7781ffd61db28d5b
Certificate serial: 018F956168C6798F20831C82A468A0FEB8C5
Authority key identifier: 87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/R6Va70yJXCW4ARGNFW1uRquWmN8.roa
Signing time: Mon 20 May 2024 09:42:19 +0000
ROA not before: Mon 20 May 2024 09:42:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49824
IP address blocks: 185.46.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 May 2024 11:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:61:68:c6:79:8f:20:83:1c:82:a4:68:a0:fe:b8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794395ac822dfe01165216c7781ffd61db28d5b
Validity
Not Before: May 20 09:42:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47a55aef4c895c25b801118d156d6e46ab9698df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:ae:7a:c8:a9:79:62:16:5b:4c:a5:ec:1b:
2f:94:6f:f9:38:90:a6:f9:ff:cb:3b:7e:23:19:41:
d4:f3:72:e6:74:42:6a:5c:4d:c3:a0:b7:7d:83:60:
f6:0b:79:0e:73:b7:79:92:fb:ac:7e:be:5e:50:45:
14:aa:08:ae:a1:50:55:19:16:6e:81:bc:45:8c:39:
35:f7:98:0f:7f:68:48:51:e4:25:5a:87:74:ea:cd:
4a:79:a5:9e:f5:ae:78:b9:75:b1:8f:c7:e5:06:7e:
f3:da:de:fe:e6:bb:f2:19:2f:e9:42:5d:5a:ee:1b:
45:61:b3:45:a5:91:24:04:9b:6e:48:07:d0:bf:5e:
7d:6a:88:2a:07:e6:f8:d9:b4:d3:af:17:73:e1:90:
01:be:18:9d:3b:14:74:4e:b6:07:49:0b:71:2d:c0:
f2:6e:3e:96:d4:6d:e7:6f:19:a8:ad:43:cb:75:95:
ec:b5:ec:47:76:83:27:29:15:49:23:64:01:95:09:
e6:38:82:d6:94:99:40:6e:75:f4:8e:09:3f:44:67:
92:fe:d6:9c:88:c9:14:65:8d:de:59:5b:80:31:0e:
9c:f8:7f:21:73:bd:b2:24:3a:ba:d5:40:4a:f5:17:
08:fc:37:3b:b3:7f:cb:4a:f6:4d:47:95:b5:b2:f3:
ba:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A5:5A:EF:4C:89:5C:25:B8:01:11:8D:15:6D:6E:46:AB:96:98:DF
X509v3 Authority Key Identifier:
keyid:87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/R6Va70yJXCW4ARGNFW1uRquWmN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.143.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:c1:b5:02:28:02:3e:99:6c:3f:4f:9a:5b:09:43:16:09:b4:
d9:9f:c1:c7:13:a7:da:ff:c5:c1:3e:57:a9:3b:f8:06:3f:a8:
1d:ab:24:03:55:e5:01:ee:d1:75:31:6f:54:36:a5:a5:00:9f:
64:56:0f:92:84:0a:f0:e4:4d:d3:c1:60:8f:1e:f8:48:0b:9e:
7b:0e:d2:ab:ae:8f:66:f7:28:ab:5c:df:05:cf:bc:9d:10:8e:
db:be:4a:98:9c:d9:6c:d8:e2:d2:29:fc:8c:99:5f:aa:52:bb:
62:40:d9:19:36:0d:0c:79:c3:28:1e:41:31:55:8c:36:45:d4:
e3:84:47:af:00:d6:1f:fa:d3:74:9f:39:ed:7c:f0:8f:51:03:
a7:c6:00:91:17:76:53:31:31:3f:69:bf:4b:9e:00:62:c0:bc:
90:ac:c5:d2:6e:8c:45:d4:ff:ea:26:db:62:52:8d:65:ab:3e:
7f:b9:ff:5a:d5:6f:ae:f8:30:a3:c7:2c:65:b7:38:5d:e5:b4:
55:a4:cc:2f:3e:10:b6:e0:40:8d:6a:70:d7:3a:e0:07:8f:94:
a1:a4:08:1d:d8:09:45:a4:60:00:84:ad:48:98:14:8b:c2:d5:
7d:8c:0a:6f:a4:28:c7:17:4d:ef:db:31:95:1d:58:53:88:34:
c2:44:12:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:06 2024 by rpki-client on console-fra.rpki-client.org