Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/52qqMcoXL4-GWvTZfFsE7s6_lgI.roa
File: 52qqMcoXL4-GWvTZfFsE7s6_lgI.roa (raw, json)
Hash identifier: JYuZBvNv2PsepHT7iJAgMWdYESRxCSAuM8oKotLYB+k=
Subject key identifier: E7:6A:AA:31:CA:17:2F:8F:86:5A:F4:D9:7C:5B:04:EE:CE:BF:96:02
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01856F42DE8E24C220C023A7D0917F970F7D
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/52qqMcoXL4-GWvTZfFsE7s6_lgI.roa
Signing time: Sun 01 Jan 2023 21:35:31 +0000
ROA not before: Sun 01 Jan 2023 21:35:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57241
IP address blocks: 46.209.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:de:8e:24:c2:20:c0:23:a7:d0:91:7f:97:0f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:35:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e76aaa31ca172f8f865af4d97c5b04eecebf9602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3d:07:e3:06:e1:65:79:0c:27:47:e1:8b:2a:
db:07:65:47:0a:bc:76:23:cd:13:3e:8b:33:10:63:
69:48:77:26:12:10:68:13:5c:6d:5f:e1:fc:b3:e5:
a4:f5:b5:ff:64:7f:06:1b:17:30:16:d7:34:38:5a:
1e:b9:24:53:55:a5:84:5e:9f:ae:e6:fd:4b:59:c1:
81:b7:25:db:6d:86:57:ad:f6:5f:ac:cf:ad:56:e0:
51:71:c3:e5:9b:5c:af:6f:72:6d:36:da:b4:83:31:
00:eb:17:12:68:e8:a4:00:8b:be:07:65:ae:76:e6:
11:c0:f8:f3:a9:21:50:c7:50:a3:56:53:7d:00:2b:
7b:db:60:b7:5c:35:02:59:df:92:4a:1f:bb:df:ce:
a5:0d:65:83:74:e9:b8:3d:ba:38:4c:71:fa:3e:e1:
7b:8d:c3:f0:26:47:23:8a:a2:e9:ed:a0:ee:c0:8c:
e7:33:0b:a9:d9:b0:a7:e8:04:60:d7:81:61:e5:4a:
bc:b0:ce:dc:be:b3:a8:a9:01:f6:1d:02:6c:04:04:
04:09:e1:d2:cc:ca:cf:79:43:0b:98:39:6c:a8:c2:
40:c9:c4:82:16:0c:c8:61:e2:61:e9:df:ae:bc:93:
80:da:a2:64:07:f6:bd:1e:dd:85:70:3d:1c:66:89:
6c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6A:AA:31:CA:17:2F:8F:86:5A:F4:D9:7C:5B:04:EE:CE:BF:96:02
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/52qqMcoXL4-GWvTZfFsE7s6_lgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.209.197.0/24
Signature Algorithm: sha256WithRSAEncryption
56:5e:5f:66:24:c7:91:ec:df:f2:51:31:ac:25:b4:4a:c4:47:
4e:09:8a:55:a5:e8:bf:ea:e4:2b:b3:e1:d7:c6:74:b0:73:26:
8b:e1:de:20:39:7c:b0:2f:b0:9d:33:57:5f:2f:e7:5d:d4:9e:
e7:0e:28:92:5b:37:00:52:a6:e6:c3:6a:8f:55:d5:fd:23:41:
90:8b:7a:a4:f7:87:7e:a3:78:46:00:94:f7:c3:68:41:af:60:
28:b4:cd:b6:84:57:6c:6f:43:0e:c2:d1:75:00:9f:fd:97:7d:
e7:ce:2e:f3:e8:f0:7f:cb:fe:fb:d7:08:74:25:71:1a:64:51:
48:58:96:b5:dc:99:70:7e:19:3e:a9:6d:4c:b6:bf:c1:4f:28:
96:63:8e:1c:b8:26:b5:7e:77:ce:88:78:86:34:2a:e3:53:66:
81:20:cd:45:ec:5c:57:80:1f:b2:ad:a2:ed:5b:e0:82:89:b5:
e7:7c:f2:b5:eb:4f:91:7e:ae:d3:e9:9e:3f:62:99:b1:39:19:
2f:b2:b2:ce:5d:79:9d:b3:82:1e:dc:fd:e3:49:df:52:98:41:
87:b6:9d:cc:7c:80:c8:4e:35:fe:4e:82:a4:fc:d0:c6:77:ca:
73:07:70:3f:86:b1:51:4e:88:a3:4f:d9:43:6a:68:ea:39:65:
e0:93:f9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:20 2024 by rpki-client on console-ams.rpki-client.org