Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/z4Dk87pPlksS92XHCw72exvr1Oc.roa
File: z4Dk87pPlksS92XHCw72exvr1Oc.roa (raw, json)
Hash identifier: RpIg34JGaI8m2Kvv06zfH1dlmokrmID7BQq4kmbwZOk=
Subject key identifier: CF:80:E4:F3:BA:4F:96:4B:12:F7:65:C7:0B:0E:F6:7B:1B:EB:D4:E7
Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial: 0185728C7875280B38EB593C34B0B4470602
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/z4Dk87pPlksS92XHCw72exvr1Oc.roa
Signing time: Mon 02 Jan 2023 12:54:46 +0000
ROA not before: Mon 02 Jan 2023 12:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197615
IP address blocks: 46.22.166.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:78:75:28:0b:38:eb:59:3c:34:b0:b4:47:06:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Validity
Not Before: Jan 2 12:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf80e4f3ba4f964b12f765c70b0ef67b1bebd4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6d:cc:dc:9d:64:71:14:b8:b2:66:6c:46:b6:
30:58:42:1a:9d:7d:36:41:2c:85:7f:d1:6c:e5:60:
0c:3d:b2:38:56:cf:a0:18:d0:01:71:04:b5:75:5c:
b1:09:ee:6a:30:9c:a2:05:b9:d8:4e:eb:a9:f0:d5:
33:48:4a:83:d4:cd:af:ce:bf:92:c9:ed:a5:82:00:
2d:73:b7:f2:97:56:d6:9e:cd:9f:1c:3f:f8:5e:b3:
4e:08:bd:1c:95:10:15:96:cd:66:12:35:b8:58:f9:
dd:94:d0:75:84:5b:63:79:32:04:39:a8:a8:10:46:
66:51:61:af:09:06:aa:91:10:09:3b:f4:11:86:14:
a7:e2:88:bf:56:67:6f:7a:fe:42:f1:39:82:13:b0:
f3:d0:7f:05:52:92:36:31:db:61:3a:c5:21:fd:1b:
10:6d:c1:3d:8d:67:10:f0:00:83:35:48:1d:5b:7b:
58:05:0d:7a:ab:a5:47:ab:03:3e:b6:0f:46:9a:91:
ab:ec:4f:f0:0c:b9:c4:f4:e3:6f:f0:0f:a1:7c:09:
39:e0:bf:31:85:40:e2:35:bf:39:a7:86:77:b0:13:
0c:ba:94:e1:2c:40:6a:83:48:b0:50:73:db:25:fc:
eb:33:25:95:ed:6d:66:f4:f8:7b:95:4b:5f:13:d5:
7a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:80:E4:F3:BA:4F:96:4B:12:F7:65:C7:0B:0E:F6:7B:1B:EB:D4:E7
X509v3 Authority Key Identifier:
keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/z4Dk87pPlksS92XHCw72exvr1Oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.166.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:e6:6c:8e:bf:96:b6:68:52:66:c8:9f:c2:3f:6c:a6:51:6d:
90:d8:15:76:16:5e:2a:84:6b:b6:e7:64:51:17:18:9a:b0:81:
72:c4:3c:bd:d2:fc:43:88:a6:0c:8a:b6:59:0a:0e:54:f5:f3:
61:e2:89:ce:c0:84:63:b1:68:db:d5:d9:62:fa:fe:c6:eb:09:
63:d2:eb:47:18:ea:ff:0a:35:f4:fe:fa:48:cf:10:1d:ca:7a:
23:39:a4:e1:c7:d2:42:e7:01:e1:06:c6:0b:cb:58:1e:9d:f9:
82:e0:af:e1:44:2f:5b:76:d7:f0:5f:98:34:d9:14:44:6e:e5:
65:56:bb:35:24:8c:cc:0b:6d:26:3d:ec:a1:48:b6:4d:a9:8b:
08:51:5d:83:7b:fd:c3:fc:ae:49:56:ce:6d:7a:f5:9b:04:9f:
13:c2:d6:b3:a7:d8:dc:b0:02:3c:a6:4e:1f:0c:5e:74:25:8e:
36:2e:73:ef:16:ab:ec:c2:51:4e:bc:06:92:da:d4:1a:af:8e:
aa:a5:d2:7e:9f:d1:cf:6b:0e:63:81:a7:bf:a7:8b:fa:4c:f2:
3e:76:01:42:13:bc:dd:e9:24:2a:0a:10:03:c4:00:fd:8e:ec:
75:d0:6f:fa:10:06:f6:b8:db:31:c0:2b:94:5a:a0:22:ab:03:
4c:b8:65:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:47 2024 by rpki-client on console-ams.rpki-client.org