Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/Xi5VsyZ3QNQi47y_MT-3WpMl5GM.roa
File: Xi5VsyZ3QNQi47y_MT-3WpMl5GM.roa (raw, json)
Hash identifier: tqJfQBLp89dyk1FrHy2EKoHqhEWcqUu9WYNYHUrFtGI=
Subject key identifier: 5E:2E:55:B3:26:77:40:D4:22:E3:BC:BF:31:3F:B7:5A:93:25:E4:63
Certificate issuer: /CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Certificate serial: 01874681560018DA4D01B501E0E944D964A3
Authority key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/Xi5VsyZ3QNQi47y_MT-3WpMl5GM.roa
Signing time: Mon 03 Apr 2023 09:44:53 +0000
ROA not before: Mon 03 Apr 2023 09:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15726
IP address blocks: 46.231.232.0/21 maxlen: 24
217.14.160.0/20 maxlen: 24
213.149.64.0/20 maxlen: 24
2a00:f88::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:81:56:00:18:da:4d:01:b5:01:e0:e9:44:d9:64:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Validity
Not Before: Apr 3 09:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e2e55b3267740d422e3bcbf313fb75a9325e463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ce:86:fe:1d:5e:0f:90:9d:a3:f9:1e:60:d4:
ce:eb:96:59:0e:70:ee:66:8a:bf:a2:f6:a7:c4:85:
33:e1:15:45:d7:db:96:4a:80:23:21:86:07:2e:c7:
72:28:f4:d8:a2:79:9e:54:51:7b:5d:03:f9:f4:a5:
c8:e8:07:d1:fa:59:c1:f5:10:60:34:6e:09:7e:c1:
27:99:55:05:5e:53:a5:68:4d:39:20:19:96:a2:c7:
08:cc:c1:67:d0:5e:a5:be:7d:f3:bd:8a:00:59:20:
f5:f6:83:13:3f:95:d0:5e:20:f3:c9:0f:70:19:44:
cb:54:4e:d9:96:59:92:1c:8d:ac:4d:37:0a:6d:a5:
5a:a5:cf:bb:5a:ac:eb:0b:83:96:c7:67:75:7a:96:
00:e5:62:8c:42:7a:e2:8d:a4:91:65:4d:8e:b7:8c:
c0:74:e8:76:93:99:d6:d1:90:80:01:c2:64:06:dc:
23:6b:16:15:04:79:7a:f2:0a:fc:e1:8c:ae:60:2d:
ba:69:09:94:c9:83:f3:16:6b:42:13:93:04:1a:1a:
e5:39:47:6c:ba:4e:f3:79:2d:93:d6:62:f5:74:7f:
7d:44:58:0a:2c:97:ac:90:a0:83:30:a8:77:1d:f3:
32:78:15:7b:3d:02:6a:3f:27:db:45:68:3b:80:aa:
23:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2E:55:B3:26:77:40:D4:22:E3:BC:BF:31:3F:B7:5A:93:25:E4:63
X509v3 Authority Key Identifier:
keyid:E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/Xi5VsyZ3QNQi47y_MT-3WpMl5GM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.232.0/21
213.149.64.0/20
217.14.160.0/20
IPv6:
2a00:f88::/32
Signature Algorithm: sha256WithRSAEncryption
5d:a5:39:8b:83:88:66:ac:d7:c8:8f:93:94:13:3d:82:a3:b5:
11:60:bf:0c:b6:aa:96:a0:8c:7e:38:0e:59:5a:50:41:46:b4:
1a:ff:c9:1a:b0:51:3e:62:eb:5e:8a:ee:97:a9:f7:6a:23:6c:
b3:b4:cb:5b:78:8d:6c:80:fe:eb:93:39:d3:96:f6:2e:6c:e0:
bd:1a:71:81:ee:c1:72:de:18:65:4b:2a:5f:2d:17:13:b6:0e:
a6:47:29:e3:b4:28:24:4d:ab:a5:ef:8e:5b:03:34:bd:12:d8:
9c:f3:53:e2:44:e1:25:2c:77:50:8b:3d:bb:d7:bd:4e:27:d5:
c6:44:96:13:ff:74:0b:c0:12:be:81:56:42:8c:e9:79:81:c9:
05:16:0d:45:32:c7:a1:5a:6f:c4:c8:dc:bd:31:54:3e:5a:03:
7e:4a:c3:32:4b:1b:43:06:20:fd:e4:12:86:96:89:44:5d:16:
0f:10:4a:f4:35:dc:0a:cf:90:09:1d:0d:b4:fc:ce:05:b4:1d:
f1:99:c5:2b:6a:4a:6b:e4:14:cb:e9:c0:93:b3:5d:aa:8e:46:
1f:f8:ed:c1:95:fe:b1:ef:8b:e0:1a:80:c6:8a:fe:52:28:79:
91:7c:ff:94:78:60:8d:ef:3e:f1:57:7e:fa:2f:1d:bb:9f:ae:
3b:66:6e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:05 2024 by rpki-client on console-ams.rpki-client.org