Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/8U_xJjhQLITRW_Rva96hlgvtFfo.roa
File: 8U_xJjhQLITRW_Rva96hlgvtFfo.roa (raw, json)
Hash identifier: Y22eA0+IT3M3O/Bw7WCr0RuSWT11jxNqBx5I42TIMCs=
Subject key identifier: F1:4F:F1:26:38:50:2C:84:D1:5B:F4:6F:6B:DE:A1:96:0B:ED:15:FA
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01856F42F1766B3CF184AD0902ABC9E17F1F
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/8U_xJjhQLITRW_Rva96hlgvtFfo.roa
Signing time: Sun 01 Jan 2023 21:35:36 +0000
ROA not before: Sun 01 Jan 2023 21:35:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209544
IP address blocks: 46.209.101.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:f1:76:6b:3c:f1:84:ad:09:02:ab:c9:e1:7f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:35:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f14ff12638502c84d15bf46f6bdea1960bed15fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b7:e9:30:b5:1c:2f:ca:8f:4b:b2:22:66:c2:
a2:fb:bc:15:92:81:3f:f1:79:21:81:76:12:32:67:
4b:b0:cc:80:ca:f8:2c:2b:c3:c0:b8:54:23:4f:3e:
e3:44:98:ec:e6:18:0c:1c:e8:5d:99:26:95:80:21:
e1:3d:ac:33:12:68:f7:df:79:fa:e7:bc:3f:41:03:
1d:60:9a:60:ae:0d:80:61:b3:8e:2e:24:8a:76:a4:
62:1e:3c:70:b5:2d:52:12:d6:10:c6:20:8b:ad:9a:
83:d0:e2:64:1d:94:14:18:a2:c0:35:e3:58:84:65:
6e:4f:5c:30:ff:2c:52:08:cd:b5:ca:fd:58:e8:11:
40:30:2f:6b:b2:b2:69:7d:f3:73:96:51:5e:75:ff:
cb:42:80:45:52:ef:bc:ae:fc:58:29:6c:20:b3:e7:
01:d1:7e:c9:93:77:c3:15:20:23:85:86:1e:2d:bc:
b7:ff:a4:80:ea:64:78:a1:05:b8:f0:ea:15:0e:c1:
51:05:56:d4:42:4a:81:1e:47:28:fe:8f:3f:d4:46:
59:b4:f0:83:67:78:21:0e:69:8c:77:50:88:00:bc:
63:94:ef:b9:e2:ee:40:0b:66:33:6b:2a:63:ee:41:
4b:72:52:d0:93:76:d0:54:42:9c:b5:94:df:d7:0a:
15:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:4F:F1:26:38:50:2C:84:D1:5B:F4:6F:6B:DE:A1:96:0B:ED:15:FA
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/8U_xJjhQLITRW_Rva96hlgvtFfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.209.101.0/24
Signature Algorithm: sha256WithRSAEncryption
35:95:5a:da:a6:48:55:8d:4e:ba:80:0c:d4:85:48:2d:4c:61:
74:69:59:a7:a0:54:6c:18:c4:19:6f:6e:06:74:e9:11:b3:19:
a7:e0:08:f7:90:ed:0b:4c:a4:9f:fa:c6:0a:00:73:34:05:83:
92:bb:8a:b1:bd:7f:a3:58:33:bd:39:97:9d:ba:3e:ea:fc:e1:
3e:16:4d:aa:14:59:06:f6:97:4b:9e:fa:80:e8:e9:5c:7f:48:
9b:7e:70:57:c4:98:68:b7:64:d9:69:42:ea:a4:83:1e:39:58:
c9:0c:26:f8:86:26:83:70:1b:a8:08:09:12:2a:6d:ee:0e:64:
89:ea:6b:07:ad:b6:b1:f3:17:4f:23:c1:c2:51:ad:db:e5:52:
2c:55:15:d3:18:be:1f:4b:39:31:b1:0e:4f:f2:51:64:1b:35:
b9:5b:c6:ec:19:bf:e0:3d:bf:34:b5:3e:52:06:06:11:1f:c0:
79:4b:25:de:de:c2:20:26:c3:9f:14:56:f9:b2:2a:63:9b:5e:
e9:94:a9:8e:03:be:37:63:43:1e:c9:f5:81:c1:85:97:96:a7:
60:6a:bd:ed:58:c8:95:8c:7f:91:23:14:17:60:cb:c4:0e:5b:
11:e5:2e:9a:85:97:7a:62:1e:e8:0b:66:0e:68:4d:6d:a3:18:
64:2d:aa:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:23:49 2024 by rpki-client on console-fra.rpki-client.org