Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/4_irq6_lbnGvQ-GZ_wf2ifzd5tU.roa
File: 4_irq6_lbnGvQ-GZ_wf2ifzd5tU.roa (raw, json)
Hash identifier: LhquLDYs4LWf5H0QA+tVADJi78ifDRVGAaF7LExChjg=
Subject key identifier: E3:F8:AB:AB:AF:E5:6E:71:AF:43:E1:99:FF:07:F6:89:FC:DD:E6:D5
Certificate issuer: /CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Certificate serial: 01856CCAF9012412087F74559A64AF2BBCB0
Authority key identifier: 3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/4_irq6_lbnGvQ-GZ_wf2ifzd5tU.roa
Signing time: Sun 01 Jan 2023 10:05:19 +0000
ROA not before: Sun 01 Jan 2023 10:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49218
IP address blocks: 46.165.0.0/18 maxlen: 18
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:f9:01:24:12:08:7f:74:55:9a:64:af:2b:bc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Validity
Not Before: Jan 1 10:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3f8ababafe56e71af43e199ff07f689fcdde6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c2:4a:cc:39:ab:12:42:45:37:7a:eb:53:4e:
a9:1e:58:6c:1e:b4:90:b3:ef:fe:a3:98:f2:c2:30:
c6:4e:1c:7e:d6:02:6d:cb:d8:03:e8:11:c9:c0:ae:
58:84:43:9c:61:d0:76:e2:fd:2f:2b:dd:33:1a:10:
17:12:36:4f:22:05:c8:8e:61:4c:7f:a6:b2:a8:c8:
b7:08:69:ce:be:28:be:55:fc:91:8c:2c:31:8b:81:
98:e3:61:eb:84:00:70:d7:4d:83:bb:89:06:25:8d:
e5:83:8d:c0:1e:7e:fd:be:24:3f:00:9b:dc:97:9d:
63:8c:9f:84:19:2a:11:a0:e2:c3:6a:6c:1b:f5:18:
65:d7:42:18:db:da:f3:7f:9d:41:c9:cb:ca:42:57:
8e:10:77:65:af:88:88:ba:90:65:26:09:dc:05:74:
8b:47:9e:a6:c1:3c:0f:24:b2:8f:a3:3c:2e:10:b4:
15:65:76:b4:be:29:bf:3a:89:c1:de:a6:6a:c1:af:
d8:e1:e2:4e:e3:1e:cd:5d:53:d7:bd:0e:dd:58:f4:
45:bd:a3:55:76:a2:cc:10:3a:25:22:d1:67:40:f5:
fd:32:0f:f8:99:82:48:fa:61:90:75:d9:38:21:29:
97:df:72:aa:ac:84:62:34:c9:72:5b:28:15:4e:85:
4b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F8:AB:AB:AF:E5:6E:71:AF:43:E1:99:FF:07:F6:89:FC:DD:E6:D5
X509v3 Authority Key Identifier:
keyid:3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/4_irq6_lbnGvQ-GZ_wf2ifzd5tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.165.0.0/18
Signature Algorithm: sha256WithRSAEncryption
48:47:0c:cd:98:5e:8d:ad:16:18:21:cf:cf:48:b5:67:a1:b4:
95:4f:2b:6f:09:04:76:c5:c0:b3:9e:b2:fa:86:da:27:ea:4a:
d3:11:c6:31:be:22:c1:1f:91:44:65:f4:39:87:19:d8:12:5c:
fb:b7:a9:87:f1:54:34:15:eb:d5:3b:1b:fb:af:05:d7:4a:d8:
ae:17:bb:93:d0:57:65:ca:98:c8:a6:29:05:83:eb:72:82:03:
90:7e:10:cc:ab:74:94:eb:bf:10:52:3e:03:65:08:93:ec:44:
a8:2f:b1:f9:fb:fe:10:7b:e4:e5:95:ef:10:aa:a3:3d:14:ec:
66:e7:05:6b:27:c5:b1:db:ce:f6:61:73:6d:4e:0b:57:89:cd:
cf:e5:f5:24:45:90:f5:7e:4f:ed:ee:0d:22:1f:b5:b3:d6:16:
32:fd:77:05:bc:cc:06:53:59:8b:73:ec:fd:e7:fe:62:d1:9e:
0b:25:f9:a1:a9:8c:a5:ab:ac:df:d0:db:94:f4:be:6b:44:fc:
3b:fa:27:a7:a2:0e:99:bd:22:c9:0e:48:a9:26:4b:0d:f9:b7:
a3:a5:bc:8e:18:1a:66:48:b2:5d:7a:51:21:9a:7e:2d:f0:1f:
70:c5:de:ca:44:83:03:00:45:ab:e7:bf:d8:8d:db:b5:45:96:
d2:d0:84:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:49 2024 by rpki-client on console-ams.rpki-client.org