Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/eiGqmJUgjH4ENPsMGYtT9Ogx_Jk.roa
File: eiGqmJUgjH4ENPsMGYtT9Ogx_Jk.roa (raw, json)
Hash identifier: Rp31IFnTZzkwVq6PeffuFfBaoz8aGSpD5PFVEGA7ea0=
Subject key identifier: 7A:21:AA:98:95:20:8C:7E:04:34:FB:0C:19:8B:53:F4:E8:31:FC:99
Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial: 0185728C76C327C143C8DFF7ABD1E26665E2
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/eiGqmJUgjH4ENPsMGYtT9Ogx_Jk.roa
Signing time: Mon 02 Jan 2023 12:54:46 +0000
ROA not before: Mon 02 Jan 2023 12:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60816
IP address blocks: 46.22.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:76:c3:27:c1:43:c8:df:f7:ab:d1:e2:66:65:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Validity
Not Before: Jan 2 12:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a21aa9895208c7e0434fb0c198b53f4e831fc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5e:36:2a:64:14:75:df:d5:d5:6a:49:61:2c:
25:bf:74:b0:33:bb:8b:5b:e3:bc:d9:7e:c7:c4:a9:
23:70:38:b1:1e:5d:82:13:f5:53:e7:26:32:73:fc:
0a:fc:b8:9c:59:fc:ad:a9:72:11:7d:8a:a3:c6:2d:
99:94:f9:3f:d4:4a:3e:89:c7:db:b2:6d:fd:ca:be:
e3:a8:b7:07:2d:a6:46:5e:a3:09:15:f3:f4:b1:38:
e3:9c:81:f4:df:a6:ac:dd:cc:b0:cb:a7:e9:4d:76:
3b:19:18:ac:cb:b6:5c:90:24:dc:b7:0e:a0:0c:1f:
9d:96:6a:e8:ec:3c:5f:c0:fa:6a:bf:00:25:6d:c1:
6a:67:2b:7b:e4:b4:23:6d:90:da:5d:33:12:32:c4:
6d:38:04:37:f0:b1:8e:84:f0:99:40:3a:69:ce:cf:
31:76:3e:98:ac:d6:9a:56:79:63:5a:e9:e7:9e:9c:
c4:b7:d7:92:7c:18:34:28:77:25:70:11:3e:10:e4:
5c:29:af:e1:21:32:cc:61:26:47:b0:b1:9e:f4:33:
9d:28:4f:7f:98:27:0e:ce:8a:ba:7b:16:0e:fc:be:
4d:11:05:7d:aa:7a:2b:f4:bb:da:fe:50:5c:27:c8:
76:1b:d4:97:d7:6a:ce:ce:86:70:31:ca:db:10:52:
77:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:21:AA:98:95:20:8C:7E:04:34:FB:0C:19:8B:53:F4:E8:31:FC:99
X509v3 Authority Key Identifier:
keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/eiGqmJUgjH4ENPsMGYtT9Ogx_Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.163.0/24
Signature Algorithm: sha256WithRSAEncryption
11:01:ed:27:60:33:03:bd:b9:f0:ad:29:bb:e1:e1:5a:1b:34:
1a:54:b0:0e:c3:df:4d:df:db:34:f8:86:fe:cf:b7:46:93:cd:
ad:43:f0:aa:50:10:32:8a:15:df:f0:44:24:5d:e7:16:f1:ff:
9e:e7:93:2b:75:e4:42:f1:4a:76:91:96:09:26:ee:99:d0:e0:
43:c3:ee:16:2f:64:16:0b:1d:b7:41:c0:b9:b4:84:95:e2:f1:
56:73:63:39:8c:ea:c5:60:cd:b7:00:a6:1c:87:b6:ab:2b:58:
d7:bf:94:79:81:29:94:58:b4:dc:55:53:86:56:26:6c:20:d1:
17:66:25:8a:09:43:2f:ef:33:fc:ac:11:2c:5b:9c:2c:6f:27:
35:58:8c:9d:69:c0:c5:e2:d8:40:48:5b:da:15:4b:14:09:ae:
ba:5e:0a:68:3d:3e:0f:ab:88:8d:c0:c5:b1:0f:8e:b7:3c:84:
23:80:88:1e:62:7f:3a:3f:ee:97:16:66:41:ca:1a:5e:21:00:
04:66:bf:8e:1e:d2:93:4c:db:f9:cd:3c:dc:a3:c3:c0:27:73:
3d:80:88:ce:77:2c:81:b5:cb:1b:a5:99:a4:9f:e9:7b:36:e3:
1d:8a:50:a0:a4:52:36:f2:f6:2b:06:37:2a:16:84:d2:56:4b:
13:6f:7b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 12 11:25:55 2023 by rpki-client on console-fra.rpki-client.org