Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/_kYkj0559VA4uKT2tRQGyn0MfaY.roa
File: _kYkj0559VA4uKT2tRQGyn0MfaY.roa (raw, json)
Hash identifier: 3lWsmhP+rSPz8pDK2ZGIk6pvihsfWtVBuhCFCBZmDtY=
Subject key identifier: FE:46:24:8F:4E:79:F5:50:38:B8:A4:F6:B5:14:06:CA:7D:0C:7D:A6
Certificate issuer: /CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
Certificate serial: 018C10D67DF1A8424ABEEE1C9E4D937C0BB3
Authority key identifier: 7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/_kYkj0559VA4uKT2tRQGyn0MfaY.roa
Signing time: Mon 27 Nov 2023 12:52:21 +0000
ROA not before: Mon 27 Nov 2023 12:52:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31727
IP address blocks: 46.175.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:10:d6:7d:f1:a8:42:4a:be:ee:1c:9e:4d:93:7c:0b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27
Validity
Not Before: Nov 27 12:52:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe46248f4e79f55038b8a4f6b51406ca7d0c7da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fd:b5:26:4a:b0:f8:18:b7:fc:c9:67:12:5b:
14:5a:f4:b6:de:3e:e3:74:e2:dd:37:da:be:e5:d3:
3d:aa:54:c2:99:64:e3:b2:77:ba:bf:e8:11:77:1c:
64:53:73:d2:6d:84:ee:64:c8:a7:94:6f:55:05:e7:
74:d1:c6:eb:36:05:d7:e0:65:96:42:8d:e9:57:6d:
49:b2:8c:71:08:8b:e0:5e:d0:25:fa:9c:17:8b:bf:
4c:da:92:8b:94:9e:f7:54:d1:d3:f2:c2:8b:cd:24:
57:3c:63:f1:c0:f4:c3:13:84:7c:a9:62:ab:01:8b:
4a:02:22:c1:8f:6d:2d:5a:30:bc:07:ed:f2:0b:68:
79:dc:95:5b:45:3f:5e:65:ef:9c:cd:42:8f:75:6d:
0a:b0:de:8a:2a:27:6a:24:ee:1a:80:fa:ba:51:3b:
f4:fd:e5:47:91:43:bf:9e:db:90:cf:d9:92:09:03:
4a:a2:82:ba:19:7b:8d:be:f3:84:f9:67:f7:a7:ad:
66:e3:77:f1:8d:8b:5d:fe:69:23:9e:c4:d1:c0:ea:
a4:0a:82:01:99:df:c3:86:9c:31:70:aa:70:eb:61:
5a:fc:e2:d7:cb:69:a1:6e:5b:70:e3:ee:18:68:8d:
94:72:0c:3c:18:aa:44:6b:bc:88:e7:46:65:a4:be:
37:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:46:24:8F:4E:79:F5:50:38:B8:A4:F6:B5:14:06:CA:7D:0C:7D:A6
X509v3 Authority Key Identifier:
keyid:7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/_kYkj0559VA4uKT2tRQGyn0MfaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.50.0/24
Signature Algorithm: sha256WithRSAEncryption
60:d8:bb:d5:4d:4e:45:a3:a1:a7:05:10:71:8d:3d:05:8b:88:
94:03:5b:a1:99:8c:48:01:22:52:72:b8:f7:e2:7f:34:e0:c2:
4e:a0:78:6f:95:bf:87:32:2a:60:90:6f:0b:fa:ed:3c:41:0c:
ff:7f:c7:82:c0:53:4b:9a:e5:0a:77:0e:17:50:72:88:fd:f5:
68:31:82:69:69:1b:7a:6c:b8:67:f5:81:81:b1:df:8a:85:93:
15:98:a3:7d:ed:21:93:0e:4e:89:13:56:a0:53:5d:56:24:3a:
43:21:ed:b6:6f:52:04:3b:45:86:08:d8:07:d3:25:24:90:b9:
d4:09:34:08:ef:89:a0:77:e9:7d:8c:39:f1:0e:93:e3:a1:4d:
fe:7b:50:92:f2:4c:20:11:4e:a3:7f:84:18:f6:b5:d1:c3:3b:
9c:4f:59:32:9d:27:94:63:00:ad:88:7e:10:a9:d7:32:44:95:
b2:d2:9e:da:4a:ad:f3:5a:5f:ed:01:8f:0d:0e:fa:77:84:a1:
0b:33:e6:01:5c:8a:61:22:63:2c:54:4f:2f:13:60:ad:8c:a9:
c9:53:22:dd:4b:63:d6:58:b2:89:ce:e8:b5:05:e1:14:d7:d8:
43:22:b6:51:11:da:ef:92:26:1b:7f:61:2d:ee:ab:8e:57:a3:
b9:cf:4e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:34 2024 by rpki-client on console-ams.rpki-client.org