Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/v3O6J-0y3CWgDzKJ8qs256Y9F3Q.roa
File: v3O6J-0y3CWgDzKJ8qs256Y9F3Q.roa (raw, json)
Hash identifier: xRrT947sXuAdizgRppCmKxYhRMxn+LM+fLKBNrbGD/s=
Subject key identifier: BF:73:BA:27:ED:32:DC:25:A0:0F:32:89:F2:AB:36:E7:A6:3D:17:74
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01856F42E727E59BAC5F8504A7E6B0AABCB3
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/v3O6J-0y3CWgDzKJ8qs256Y9F3Q.roa
Signing time: Sun 01 Jan 2023 21:35:33 +0000
ROA not before: Sun 01 Jan 2023 21:35:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61209
IP address blocks: 46.209.185.0/24 maxlen: 24
46.209.184.0/23 maxlen: 23
46.209.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:e7:27:e5:9b:ac:5f:85:04:a7:e6:b0:aa:bc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:35:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf73ba27ed32dc25a00f3289f2ab36e7a63d1774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:67:5a:2d:ac:7f:0a:33:f1:c1:20:e7:5a:56:
b7:dd:35:d4:1e:99:27:2a:92:1e:40:26:d6:6d:ad:
99:0f:97:46:14:b5:82:7e:c4:48:12:89:65:fa:ed:
55:16:1e:07:7d:9d:07:b0:e7:69:68:ea:5c:28:73:
81:4e:65:9e:ff:a1:ca:78:5d:e4:11:99:08:67:4a:
29:7a:c7:7d:2b:d0:d3:ff:c7:45:2c:8e:70:64:17:
eb:86:46:4f:5f:52:cc:76:5d:36:58:9a:3a:86:03:
c5:bf:72:dd:1c:aa:8b:5e:90:c2:62:03:a6:55:5c:
26:32:a7:eb:35:07:2a:8a:22:03:58:1a:3c:fd:cb:
a4:04:6c:f7:ce:87:e5:c3:39:8c:11:4b:37:7b:ae:
3d:d3:49:52:02:43:3b:85:a7:1d:8f:ed:bc:ed:ca:
1e:87:0b:67:e3:86:34:4b:36:9e:63:85:bc:e4:46:
9c:39:f3:a3:29:6a:62:18:bc:32:e2:b4:91:a7:ac:
0d:cf:af:12:10:5f:7b:6b:82:c0:43:53:28:18:fb:
86:fe:e7:5f:a3:b1:d4:b3:24:7d:5e:ca:2a:a4:c0:
19:2f:1e:7c:2a:0f:51:e8:42:d2:93:38:2e:ac:a0:
0c:fa:7f:d2:1b:3b:5c:d9:2d:8a:56:4d:e4:cf:16:
d1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:73:BA:27:ED:32:DC:25:A0:0F:32:89:F2:AB:36:E7:A6:3D:17:74
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/v3O6J-0y3CWgDzKJ8qs256Y9F3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.209.184.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:a5:34:83:51:54:1e:11:97:0b:80:37:55:62:47:e7:13:7d:
24:80:ed:3b:12:b4:27:a5:5f:0a:eb:44:31:5d:e6:23:5e:13:
ad:82:b4:1b:49:5f:59:18:78:84:34:c0:98:ea:b6:41:27:d2:
a7:aa:4d:50:59:69:3b:98:e3:19:eb:00:b6:ea:e4:d0:91:2d:
b3:9c:9f:bb:d5:29:47:bb:b2:ac:c9:dd:c6:ee:37:a7:4c:9a:
8a:86:d8:ee:61:9d:ca:f7:55:42:a3:9b:ef:47:38:b9:be:a8:
76:c8:a4:e9:18:24:ff:5c:d8:b4:d5:ef:39:32:b9:51:54:0a:
61:36:14:93:8c:4e:16:a9:69:b8:7c:05:2e:5a:16:49:ef:90:
42:e7:90:86:40:e7:ab:16:a6:a1:d2:b4:d8:74:df:39:2c:55:
91:5c:97:2f:01:41:34:e9:f7:e6:a0:37:3b:ca:2f:e3:0f:0f:
57:e0:de:8f:cc:39:cd:f9:e5:95:b1:87:99:ce:1e:1f:92:94:
e2:bc:33:50:fe:40:38:c7:dc:25:ba:2d:d8:d8:a6:47:2b:c8:
e6:47:55:61:3f:be:bd:b8:b5:90:af:a8:22:0e:8e:a8:92:e6:
02:1e:8a:21:25:1e:52:b0:85:2e:66:d6:00:21:ad:46:13:e2:
f4:41:2b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:23:49 2024 by rpki-client on console-fra.rpki-client.org