Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/dvztKtQ62xlpRPBEX1NJBqBCPLk.roa
File: dvztKtQ62xlpRPBEX1NJBqBCPLk.roa (raw, json)
Hash identifier: xqkLei/1nnDOeeRnSKWYfKXdz4gifnHAM2T8ID+O6KM=
Subject key identifier: 76:FC:ED:2A:D4:3A:DB:19:69:44:F0:44:5F:53:49:06:A0:42:3C:B9
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 01856B40CA69EF6C39D1BBC82F372B39E217
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/dvztKtQ62xlpRPBEX1NJBqBCPLk.roa
Signing time: Sun 01 Jan 2023 02:54:46 +0000
ROA not before: Sun 01 Jan 2023 02:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206837
IP address blocks: 46.25.127.0/24 maxlen: 24
46.25.145.0/24 maxlen: 24
46.25.159.0/24 maxlen: 24
46.25.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Aug 2023 10:22:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:40:ca:69:ef:6c:39:d1:bb:c8:2f:37:2b:39:e2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 1 02:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76fced2ad43adb196944f0445f534906a0423cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:52:ce:0e:1b:62:10:81:a2:c4:14:35:06:b3:
6c:1b:ea:62:e9:51:01:14:08:09:eb:08:81:4b:d4:
55:b2:63:f9:08:6c:5a:cb:89:a5:e9:ad:e1:e2:ef:
45:d3:e5:d1:ae:18:0e:ee:d3:b3:30:d2:a8:35:ed:
af:6e:4f:58:2e:f8:70:2b:f0:a4:cb:56:d3:c5:6d:
e2:84:7d:db:de:fb:d6:0d:cd:d1:10:f2:d5:57:e7:
8b:08:32:70:01:2a:8b:a7:1d:dd:80:aa:48:e5:29:
de:a0:84:09:fd:35:a5:d8:a4:db:cf:27:03:ab:aa:
d9:35:5a:49:96:4b:2b:c1:8a:26:9c:6d:8c:27:76:
86:6b:67:cc:61:7b:df:00:47:8b:6d:6a:1c:c4:40:
72:45:a1:30:15:58:eb:d6:5c:8b:73:d9:04:f5:61:
3c:7b:1e:24:f8:85:98:2e:f6:59:31:a2:79:e1:1f:
c9:42:2f:78:fd:fe:ac:b2:15:b5:4d:24:0a:76:e1:
03:88:ee:18:f5:2e:ce:74:33:e3:c8:a6:0a:9a:bd:
be:6f:27:c1:c0:f1:5b:38:c7:34:fe:9c:28:29:95:
a8:41:89:10:e3:5a:c7:3d:bf:93:79:a4:ae:c7:6f:
6b:89:9a:3e:1c:cd:c8:53:e2:62:ea:db:9d:7e:9b:
4a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FC:ED:2A:D4:3A:DB:19:69:44:F0:44:5F:53:49:06:A0:42:3C:B9
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/dvztKtQ62xlpRPBEX1NJBqBCPLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.25.127.0/24
46.25.145.0/24
46.25.159.0/24
46.25.185.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:80:23:98:ae:a9:b8:bf:ad:b7:18:44:f7:b7:d8:63:05:21:
6d:49:b9:1d:d3:87:27:e9:a4:ff:ee:84:6b:e8:89:72:a2:71:
18:7b:b1:7b:0d:f6:e7:96:13:d3:cb:ea:34:07:f7:3c:98:8f:
72:b2:8f:e0:1c:5a:ba:58:41:c2:d8:38:d6:1a:92:b1:94:3c:
06:16:97:ae:25:d7:20:5b:d2:04:d2:e8:77:1b:f7:c0:0a:9c:
81:f8:aa:e2:ad:c0:f9:81:0b:f3:6f:72:89:9b:e1:93:25:04:
68:67:25:aa:52:fd:bc:a1:81:39:ad:29:40:12:02:4a:c7:3a:
1f:1e:56:7c:33:aa:67:90:8f:b1:7f:67:81:b2:6e:80:c0:22:
d2:40:45:c6:12:b9:2f:7f:07:d8:68:f8:e1:34:d4:11:10:8f:
6b:6f:42:9b:13:6f:c0:58:bc:0e:4d:1a:ed:a2:7b:44:41:ba:
34:a1:c0:6e:e9:1b:fa:36:85:05:af:a8:d8:69:59:b5:23:8c:
cd:04:f2:af:66:37:af:c7:5d:ca:03:4f:26:75:a6:32:49:65:
25:93:6c:99:0a:41:39:0f:16:36:58:98:4e:13:28:4a:98:32:
0d:e6:79:b2:e8:2e:1e:52:86:48:0e:44:a8:93:47:50:37:1c:
b2:19:94:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:12 2024 by rpki-client on console-ams.rpki-client.org