Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/eQ_VIPx-6JESeHxAVyebWhgcV48.roa
File: eQ_VIPx-6JESeHxAVyebWhgcV48.roa (raw, json)
Hash identifier: F74CqrDP4HOLeK7Gxi5KLwXMxg2mFtZoQDgsTjTSVTc=
Subject key identifier: 79:0F:D5:20:FC:7E:E8:91:12:78:7C:40:57:27:9B:5A:18:1C:57:8F
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01856F42E2CE70A41AE365E3C8522A2E8D16
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/eQ_VIPx-6JESeHxAVyebWhgcV48.roa
Signing time: Sun 01 Jan 2023 21:35:32 +0000
ROA not before: Sun 01 Jan 2023 21:35:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59962
IP address blocks: 46.209.32.0/21 maxlen: 24
46.209.168.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:e2:ce:70:a4:1a:e3:65:e3:c8:52:2a:2e:8d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:35:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=790fd520fc7ee89112787c4057279b5a181c578f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7f:23:05:5d:09:93:4f:0b:a5:39:f6:a5:fd:
75:c5:0b:91:ec:a9:99:46:3e:45:62:13:8f:48:d0:
0c:60:9c:de:d4:40:b6:0d:ed:c1:cf:d7:e5:41:3e:
a7:49:eb:f2:80:ce:a9:a8:6c:cb:21:8c:8d:12:4d:
c6:89:e4:85:b1:97:62:70:13:b9:93:5f:27:23:07:
57:5c:ea:e0:26:63:f2:46:f7:f1:50:f3:45:25:43:
ce:b1:f4:60:22:ae:b0:87:0d:29:c8:d9:17:f1:9d:
25:b5:2b:3e:98:10:04:d4:ce:50:5f:da:68:87:8d:
cc:1b:19:6c:8d:ac:39:1c:b2:56:1b:0f:c4:53:0b:
fd:43:bf:10:24:ae:1c:c4:ba:29:6c:a2:b5:ed:55:
1a:6e:b4:83:32:b1:ab:eb:83:f7:d8:d5:0b:76:08:
48:9d:de:69:77:a0:bd:fa:fd:21:26:76:fd:23:1c:
30:b9:ed:47:15:8e:24:2f:08:00:51:e8:54:c4:a3:
b9:20:92:ac:7e:9e:27:57:1d:fc:ad:8e:f6:7e:18:
02:ed:b8:66:51:ce:8f:c0:73:1c:27:7d:4b:0c:aa:
10:36:da:bf:d8:b0:d5:5c:80:c8:ef:70:21:bf:f8:
98:5e:be:f7:3b:19:82:43:81:e8:46:21:d0:c8:8a:
b4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0F:D5:20:FC:7E:E8:91:12:78:7C:40:57:27:9B:5A:18:1C:57:8F
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/eQ_VIPx-6JESeHxAVyebWhgcV48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.209.32.0/21
46.209.168.0/21
Signature Algorithm: sha256WithRSAEncryption
40:6e:40:69:3e:16:42:b6:c4:69:19:ce:59:cc:68:5b:0c:63:
2d:2f:3f:65:06:1f:fa:c0:51:df:f8:f5:70:5c:54:e1:d0:4b:
8c:8b:17:b5:f7:3b:19:6d:7a:74:b4:16:96:12:68:68:24:74:
9b:e6:d5:94:c6:68:38:dd:d0:89:2d:ac:ef:76:87:5f:eb:31:
25:ab:81:71:d1:98:ca:da:23:84:97:b2:a2:45:34:e4:17:cb:
16:ac:33:8e:37:63:80:24:42:82:e0:27:b2:22:93:55:f0:df:
86:c2:0d:75:7f:0b:d8:a1:4d:6f:19:d9:d6:ae:53:00:0c:64:
c9:42:2c:cc:81:2c:a1:f4:79:38:f5:26:e5:26:8b:fa:f2:b6:
24:51:07:df:59:26:63:d9:b3:9d:fd:ff:0e:2f:e1:14:a3:d9:
22:53:0e:8a:d3:b2:95:18:a2:ba:95:8d:fb:53:42:e0:dd:d8:
f8:1a:02:3a:97:8a:d7:a2:8a:d3:22:97:74:aa:75:b2:f5:10:
44:7a:ae:a0:db:e4:f6:27:9f:3a:ff:bb:af:04:dc:69:52:04:
76:92:26:f4:6c:69:11:c8:42:01:ca:4c:5f:ed:07:cb:10:be:
14:c4:05:27:07:f9:48:5b:23:b4:f7:9f:f8:68:31:d9:fb:1d:
6e:1b:d0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:31 2024 by rpki-client on console-fra.rpki-client.org