Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/bw1tfD4Y07qGPF4eXl5HROpWWzo.roa
File: bw1tfD4Y07qGPF4eXl5HROpWWzo.roa (raw, json)
Hash identifier: od3VR5XwMnPIWSzsIo+wnHWLPK36fB0FgpQReHjfZa0=
Subject key identifier: 6F:0D:6D:7C:3E:18:D3:BA:86:3C:5E:1E:5E:5E:47:44:EA:56:5B:3A
Certificate issuer: /CN=9caf9a0d78a6811cd1686deb117788af866c8091
Certificate serial: 0185701ED671D2A05C6935A336AEE9AF9B9C
Authority key identifier: 9C:AF:9A:0D:78:A6:81:1C:D1:68:6D:EB:11:77:88:AF:86:6C:80:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nK-aDXimgRzRaG3rEXeIr4ZsgJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/bw1tfD4Y07qGPF4eXl5HROpWWzo.roa
Signing time: Mon 02 Jan 2023 01:35:46 +0000
ROA not before: Mon 02 Jan 2023 01:35:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12494
IP address blocks: 46.148.212.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:d6:71:d2:a0:5c:69:35:a3:36:ae:e9:af:9b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9caf9a0d78a6811cd1686deb117788af866c8091
Validity
Not Before: Jan 2 01:35:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f0d6d7c3e18d3ba863c5e1e5e5e4744ea565b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b2:a2:0e:57:63:da:41:bb:5e:f0:37:a4:a8:
d5:db:46:16:b0:4a:34:e6:0f:e5:93:ba:9c:02:3a:
7b:40:74:29:36:e0:82:18:87:dc:95:bc:d1:06:fd:
29:a4:35:99:23:b4:d0:ef:e8:39:aa:71:b4:8a:97:
36:1a:8a:ed:10:dc:e0:e9:af:a8:2b:00:50:0f:4e:
0a:ee:a9:f8:67:89:e8:c2:0d:1b:0d:cb:f6:56:0d:
fb:84:de:05:01:f9:6d:2b:8d:d4:fc:7f:dd:5c:23:
23:c6:39:70:a9:e4:a4:87:ad:c6:49:73:1c:9f:5a:
88:62:b1:8d:5c:0f:3a:5c:42:02:4c:e6:be:e1:66:
0e:34:14:11:79:44:fd:9c:85:69:10:ca:b7:96:ad:
68:38:4b:6e:4e:36:ab:e3:c3:dd:52:17:b3:4a:a2:
15:82:a7:38:4c:62:36:be:fe:99:7b:ed:bf:a8:5d:
7a:22:db:1a:d0:1f:8c:d9:ef:a2:4b:2c:60:2c:36:
e7:24:64:02:11:e6:92:17:3b:d9:df:b3:5d:b4:ca:
1f:09:6e:cc:39:e0:c9:cf:b4:4e:0c:db:06:c0:c6:
a6:9b:df:89:cd:11:3b:08:08:46:db:38:00:89:dc:
2f:0b:b2:fa:6b:cf:fc:21:e1:e1:0e:7c:8a:82:50:
f8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0D:6D:7C:3E:18:D3:BA:86:3C:5E:1E:5E:5E:47:44:EA:56:5B:3A
X509v3 Authority Key Identifier:
keyid:9C:AF:9A:0D:78:A6:81:1C:D1:68:6D:EB:11:77:88:AF:86:6C:80:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nK-aDXimgRzRaG3rEXeIr4ZsgJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/bw1tfD4Y07qGPF4eXl5HROpWWzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6959c2-ee0b-42bd-b42d-bf7fdc29be6d/1/nK-aDXimgRzRaG3rEXeIr4ZsgJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.212.0/22
Signature Algorithm: sha256WithRSAEncryption
50:43:8e:c5:a7:84:48:d5:0f:0b:53:ce:81:3e:d4:e6:32:d5:
c2:58:ad:6f:54:c4:37:f7:ea:3f:f6:95:fa:d0:0d:73:76:b0:
a7:d2:ba:9a:95:01:84:29:e7:ea:c7:07:6d:87:74:12:55:4f:
1d:82:eb:15:75:10:23:f0:5f:e7:f8:74:e6:9d:6e:a9:85:2f:
bb:ec:a4:d7:d7:d7:76:c0:2d:73:32:d3:9a:73:c3:17:ba:15:
eb:b2:c5:24:d9:fc:85:58:5d:4e:47:23:a6:23:99:a3:80:eb:
d5:a4:28:72:0e:e5:26:7f:fd:cf:5d:6c:c3:65:e1:62:62:b2:
74:e5:03:54:2d:dd:78:eb:3d:0a:9b:27:5d:b0:8c:6f:03:5f:
19:4c:86:f6:c5:88:41:bc:52:81:dc:1c:8d:b5:de:d8:d7:da:
09:f1:d5:f3:73:98:e0:0c:ba:03:0d:f1:a3:c4:c1:58:3a:80:
dc:8c:61:d0:3c:94:a4:64:df:95:74:6d:cc:c2:55:e8:d7:5c:
81:42:d7:70:2e:be:ae:e9:64:a4:bd:48:d3:0e:ef:57:30:ae:
da:48:89:bd:7c:06:26:6c:ba:93:85:08:93:46:87:7c:a2:18:
c4:b3:b8:ba:fe:e3:ba:06:4c:4c:ea:cc:09:1b:23:61:8d:07:
da:9a:9e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:54 2024 by rpki-client on console-fra.rpki-client.org