Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/7Of3CVytB7Jr4Bf40RC_5lOeGLY.roa
File: 7Of3CVytB7Jr4Bf40RC_5lOeGLY.roa (raw, json)
Hash identifier: MrZAz4RiejoWMnQfZ9556HaQmp+I/iKMKwNATIgXrzA=
Subject key identifier: EC:E7:F7:09:5C:AD:07:B2:6B:E0:17:F8:D1:10:BF:E6:53:9E:18:B6
Certificate issuer: /CN=f676887f22ecda8d074815a0bcf91faf81942abd
Certificate serial: 018CC2DB63D4581343F94ACBBECC02FA00AF
Authority key identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/7Of3CVytB7Jr4Bf40RC_5lOeGLY.roa
Signing time: Mon 01 Jan 2024 02:30:07 +0000
ROA not before: Mon 01 Jan 2024 02:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44694
IP address blocks: 46.16.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 10:43:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:63:d4:58:13:43:f9:4a:cb:be:cc:02:fa:00:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f676887f22ecda8d074815a0bcf91faf81942abd
Validity
Not Before: Jan 1 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ece7f7095cad07b26be017f8d110bfe6539e18b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:04:74:2f:4c:36:33:00:8b:17:82:56:f2:a9:
1a:f6:4d:ee:71:b6:f2:b7:3c:64:31:60:e1:96:69:
90:bc:38:32:ec:0a:87:f2:89:cd:30:fd:df:5a:18:
7f:56:c2:77:0f:2d:ef:1d:29:6e:08:ff:95:83:ef:
43:ea:63:98:d0:3d:ef:09:fc:2c:c0:17:4a:f3:ae:
4b:8d:0b:12:4a:46:f6:7b:df:f8:f1:f2:58:59:24:
c2:6d:b9:46:99:54:53:0a:00:ca:a0:6c:73:18:d1:
58:6c:07:35:84:02:5b:ad:35:cc:9e:b8:6d:8d:1d:
61:2e:90:c2:fe:d0:8e:a9:c9:90:03:5a:85:12:85:
02:63:6e:3a:e8:a3:60:60:66:e9:f7:f9:db:bf:3d:
7f:5c:54:91:d1:77:95:9c:17:87:d3:01:0f:ac:50:
04:db:43:53:c2:6f:1e:0b:d1:18:52:37:1f:b1:35:
03:8b:75:09:7e:a3:a7:44:f5:e5:68:07:24:fc:8c:
23:a4:f2:7e:6e:ce:ad:d9:bb:8b:13:1d:81:87:31:
d5:69:1c:23:e8:ad:66:72:e3:53:47:fe:d8:22:ed:
59:c5:2d:ea:1a:c8:38:e3:77:79:25:14:eb:51:50:
47:e2:3a:5c:bd:c5:e7:7e:31:b9:d7:6a:f9:6b:bb:
c3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E7:F7:09:5C:AD:07:B2:6B:E0:17:F8:D1:10:BF:E6:53:9E:18:B6
X509v3 Authority Key Identifier:
keyid:F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/7Of3CVytB7Jr4Bf40RC_5lOeGLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.38.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:23:39:02:51:06:71:55:ab:10:fc:46:c2:42:9c:97:5c:2c:
95:03:74:d0:88:44:4d:4f:17:db:8e:e8:e0:43:3d:6a:c5:42:
79:30:56:08:74:f2:64:0d:c0:bd:85:34:d4:2c:b4:8c:b1:76:
a8:97:2a:85:1c:e3:3d:d7:fc:1b:76:ba:18:42:ef:ec:b7:c2:
89:e8:a9:a3:2a:c2:30:c2:60:2b:4f:e9:10:19:3b:95:3e:13:
3b:9a:6a:87:71:70:5d:87:c3:99:b6:76:6c:23:45:0a:06:72:
79:63:0c:11:7c:b2:31:b1:92:ea:69:db:40:9e:75:ff:dd:f1:
f5:a7:74:50:99:43:65:fc:90:9e:fb:94:53:ea:54:7c:6e:a5:
3e:b8:31:1d:ea:80:62:58:19:d8:60:c9:07:84:64:a5:06:9e:
f2:de:4f:ad:9a:50:a5:e6:1c:d1:22:0e:2c:1b:e7:0b:f8:a6:
84:3a:15:bf:53:1b:b4:72:4b:ca:1d:0e:be:20:b8:fa:c5:58:
37:44:8b:5d:7e:1d:f0:80:b3:20:c2:dd:d9:ae:6d:77:96:55:
fe:c4:24:8a:46:b2:7f:5f:7d:ab:54:a0:aa:a6:96:79:c8:e3:
c2:76:f3:02:b1:8d:20:eb:24:03:db:8a:aa:75:d8:3d:e7:1a:
36:cf:70:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:13 2024 by rpki-client on console-ams.rpki-client.org