Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/8LxjJuUg-7JzBj1-IfY5ZCDgSAE.roa
File: 8LxjJuUg-7JzBj1-IfY5ZCDgSAE.roa (raw, json)
Hash identifier: nUPSXE9dw4Bk67qsSXlGyAhSN567v5GhrqFt+f8rr+Y=
Subject key identifier: F0:BC:63:26:E5:20:FB:B2:73:06:3D:7E:21:F6:39:64:20:E0:48:01
Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Certificate serial: 01856CB82802DAE378B165DA7600B70A933D
Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/8LxjJuUg-7JzBj1-IfY5ZCDgSAE.roa
Signing time: Sun 01 Jan 2023 09:44:46 +0000
ROA not before: Sun 01 Jan 2023 09:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1273
IP address blocks: 46.190.137.0/24 maxlen: 24
46.190.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:28:02:da:e3:78:b1:65:da:76:00:b7:0a:93:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Validity
Not Before: Jan 1 09:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0bc6326e520fbb273063d7e21f6396420e04801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2d:a5:e2:0b:1e:2b:0f:f0:5a:a7:03:a9:ee:
e6:1a:72:84:8e:62:aa:48:d3:d5:90:9a:ec:99:f6:
1c:ec:4f:01:25:76:c9:00:7e:64:d1:aa:bf:19:f4:
80:8c:37:43:c3:cb:95:c6:7e:6c:0d:d9:77:59:16:
6b:ea:85:a9:fd:60:fa:36:de:e1:f4:43:91:f7:d8:
c4:ee:29:53:89:b2:c6:ab:3e:0c:ea:fc:9e:17:7b:
ea:66:1c:2d:79:0a:f7:30:e4:58:d3:2b:38:64:61:
d5:ee:70:7b:f8:21:80:8a:a7:32:f1:eb:d4:da:43:
c0:8c:68:e3:74:2f:0e:a6:b9:a1:42:88:84:bd:f7:
98:4d:56:56:31:a3:39:e9:01:c9:e0:7c:a8:04:3e:
f2:17:7d:e9:0f:0a:fd:ef:61:e9:fe:10:8f:62:e0:
16:ab:3b:de:82:55:6c:5a:09:f4:29:59:84:30:2c:
3e:d8:cb:c3:14:3a:a1:d3:a9:66:d3:4c:e4:d4:0d:
6b:87:7f:62:dd:45:01:de:44:d7:37:8d:a8:32:f2:
ce:06:2e:cf:e3:6c:ab:fc:bc:78:d4:ef:c6:8f:fe:
90:1b:d2:07:de:a2:ce:c8:f9:cd:dd:e7:6f:43:52:
ab:9c:c7:18:98:49:2a:6b:57:3f:13:9d:16:c9:56:
4c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BC:63:26:E5:20:FB:B2:73:06:3D:7E:21:F6:39:64:20:E0:48:01
X509v3 Authority Key Identifier:
keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/8LxjJuUg-7JzBj1-IfY5ZCDgSAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.190.137.0/24
46.190.254.0/24
Signature Algorithm: sha256WithRSAEncryption
90:42:81:ab:e5:68:88:e7:3b:c1:35:79:76:22:9d:49:9d:86:
53:c3:62:28:63:59:1e:a7:97:39:af:94:fd:04:fc:27:51:dc:
73:55:88:37:92:9b:03:1e:e6:f7:bd:d9:95:f2:62:88:45:c9:
31:6c:4b:3f:b9:89:86:8c:d6:08:bb:34:04:dc:ea:2f:fb:79:
f3:e1:48:06:9a:85:98:3b:af:1a:c8:0d:83:28:04:78:9a:11:
eb:2a:db:5f:28:6e:90:1a:5e:49:6b:d3:b4:35:e9:98:51:db:
50:cf:bf:98:cc:8b:fb:c4:f6:c7:57:eb:2e:21:1c:4d:f0:5e:
7e:a8:e0:35:36:3d:26:a2:ac:c2:c8:3e:ed:8f:9f:1a:2d:45:
c0:46:47:3e:d6:e4:d3:d9:61:05:e7:1c:da:8b:33:dc:20:f9:
38:c8:b5:ea:d5:54:88:a4:7a:67:eb:87:fb:bf:d3:81:dc:23:
86:9f:7b:8f:5b:99:b2:b3:33:d6:6b:0c:59:64:e0:51:ee:d3:
dd:1e:2d:e6:e9:14:e2:85:09:ab:6f:dd:6a:87:0b:0c:8d:c7:
08:d4:34:22:1a:2a:bd:ad:ee:a7:37:d8:f3:6c:ed:07:29:b2:
3a:4b:cf:20:19:be:93:73:55:56:bc:71:e5:15:70:e4:10:2d:
8a:83:61:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 15:49:05 2023 by rpki-client on console-fra.rpki-client.org