Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/J15bKjPutmLrn-foaNqsCu8RQ90.roa
File: J15bKjPutmLrn-foaNqsCu8RQ90.roa (raw, json)
Hash identifier: gi95ya/86E5LJIFT142LP7rCb7Y27O2OyUO2VvXDgpo=
Subject key identifier: 27:5E:5B:2A:33:EE:B6:62:EB:9F:E7:E8:68:DA:AC:0A:EF:11:43:DD
Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial: 0185728C75F219F9B05EDA23A6DB0F45824E
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/J15bKjPutmLrn-foaNqsCu8RQ90.roa
Signing time: Mon 02 Jan 2023 12:54:45 +0000
ROA not before: Mon 02 Jan 2023 12:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49785
IP address blocks: 46.22.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:75:f2:19:f9:b0:5e:da:23:a6:db:0f:45:82:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Validity
Not Before: Jan 2 12:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=275e5b2a33eeb662eb9fe7e868daac0aef1143dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:65:b3:59:91:2c:3c:26:37:5d:ff:8e:71:f4:
5a:e9:02:0a:8d:e8:e2:58:c5:3b:69:b7:52:de:82:
40:9d:fa:e3:f7:26:04:d2:6c:3e:8c:70:48:6b:df:
b0:a5:0f:60:55:1a:8e:6a:14:17:25:91:a8:1e:07:
39:7c:02:f7:6c:23:5e:e6:77:fe:70:d3:77:82:79:
e6:35:8c:fd:c7:15:da:44:b9:ac:e8:56:4e:53:83:
37:cb:a2:8a:35:10:52:73:93:45:f2:e7:d1:34:2c:
ec:4d:54:f8:c8:95:b4:34:53:f9:c8:b7:80:c7:fe:
6e:ba:d4:e3:fa:a3:7a:12:43:90:07:a0:43:1e:b3:
c9:28:8b:11:94:b3:83:24:cf:4b:f4:26:35:34:96:
cf:69:5a:de:cd:ab:89:7f:a9:62:fa:07:fd:4e:52:
c0:e8:73:6e:b7:ef:f6:2a:e6:e8:ad:be:10:98:ee:
f1:89:52:02:24:2d:71:36:95:c8:79:26:66:4d:80:
88:9a:47:6b:b3:69:f4:20:a2:61:c2:73:4c:dc:08:
c9:c0:4b:c2:bf:77:89:d7:23:2c:9e:fa:6a:6a:52:
8b:28:28:a8:37:ba:59:78:a5:3d:4a:4a:bf:d1:29:
52:28:23:f7:a0:3d:5b:95:1c:ec:0e:ea:ec:8f:44:
ad:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5E:5B:2A:33:EE:B6:62:EB:9F:E7:E8:68:DA:AC:0A:EF:11:43:DD
X509v3 Authority Key Identifier:
keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/J15bKjPutmLrn-foaNqsCu8RQ90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.174.0/24
Signature Algorithm: sha256WithRSAEncryption
67:ba:00:03:db:1c:c3:b2:54:ad:27:e3:c7:59:cd:b1:29:68:
24:fe:3c:af:0d:13:6a:7c:8c:ba:93:e9:df:06:4d:d3:b2:df:
2a:af:7c:71:ff:1e:e0:cf:7e:f6:cb:e3:42:0e:02:56:8b:24:
f4:2f:70:b7:5d:51:45:80:13:86:06:58:99:08:9a:39:6a:1b:
13:7b:51:fd:9e:ea:16:6b:dd:1a:e0:2c:2a:cc:4f:bc:49:3f:
ee:f9:36:25:cb:40:37:7b:dc:22:de:23:07:49:9d:20:08:ae:
84:d0:20:00:28:2a:ff:db:86:fa:8c:b1:ce:83:d6:f0:c5:8c:
3d:00:4d:0e:60:cf:3c:3e:dd:9d:9a:6a:bc:7f:f9:32:c8:7b:
f4:37:f2:62:92:e1:c7:a0:74:ca:a2:5c:a7:4f:f1:db:b4:00:
45:b1:3d:cc:d9:d2:6c:34:76:4a:81:04:89:4b:1f:9d:47:c7:
15:15:97:13:d3:ec:d3:a4:b2:a5:2e:32:87:c9:10:58:b7:51:
cd:b2:74:ff:ae:6e:12:dd:3e:9c:d3:5b:17:18:ea:9b:e6:bf:
22:a2:82:62:3a:3b:a3:b6:1f:ef:4f:09:c5:05:ab:df:3e:64:
a5:91:53:10:f5:02:b7:ae:f7:a0:54:cc:62:62:8f:71:48:ea:
fa:96:82:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:47 2024 by rpki-client on console-ams.rpki-client.org