Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/IpIwUAsd7vSu34ZCKzl9fOOyKqQ.roa
File: IpIwUAsd7vSu34ZCKzl9fOOyKqQ.roa (raw, json)
Hash identifier: 4xngZccVcIjCyiBJqV3KGrMyt0GSX5NxA86zAYu1GSQ=
Subject key identifier: 22:92:30:50:0B:1D:EE:F4:AE:DF:86:42:2B:39:7D:7C:E3:B2:2A:A4
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 0189FE9F5FE04144F18006F01AC1085E34CD
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/IpIwUAsd7vSu34ZCKzl9fOOyKqQ.roa
Signing time: Wed 16 Aug 2023 13:53:24 +0000
ROA not before: Wed 16 Aug 2023 13:53:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 65989
IP address blocks: 46.221.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fe:9f:5f:e0:41:44:f1:80:06:f0:1a:c1:08:5e:34:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Aug 16 13:53:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=229230500b1deef4aedf86422b397d7ce3b22aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:c0:4a:e2:13:b5:96:89:a5:38:fe:44:e5:
d9:8a:9b:68:78:06:20:a9:2b:91:c6:f3:78:c0:7d:
55:97:5c:16:46:7b:03:21:41:ed:09:13:07:7e:6a:
89:46:36:2e:f0:36:46:22:fe:e7:08:ed:3f:ea:44:
ef:ce:f4:27:0d:21:05:68:aa:99:3b:7a:87:53:9a:
e8:39:cf:03:fd:03:b8:a5:87:01:87:9f:41:9e:25:
68:f7:c4:77:4c:8e:a8:ba:da:68:54:9e:29:98:7a:
8c:09:20:2f:ca:f2:02:57:93:4c:d0:5c:dd:cf:9e:
be:a4:20:df:12:4a:13:79:93:99:5d:32:73:b8:31:
78:34:42:9a:51:6d:12:7e:3b:66:ab:0f:9a:42:3f:
0a:a7:fc:3e:85:de:79:4a:31:da:74:d8:c9:91:dc:
ea:60:d0:59:53:ba:bd:b6:7e:4d:2b:7d:3b:63:37:
de:cd:4b:b6:ff:75:d4:ec:96:f1:ac:c3:67:bf:ec:
c4:95:2c:d9:9c:a2:c2:02:e7:21:24:4c:9f:36:17:
7a:26:e1:84:e0:42:a5:4d:26:49:ef:3b:20:02:21:
15:29:2f:ae:7a:54:f3:bf:df:7a:7a:12:a9:39:57:
6f:fc:fe:14:9e:29:88:a2:7e:61:6c:7e:f0:2a:6a:
10:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:92:30:50:0B:1D:EE:F4:AE:DF:86:42:2B:39:7D:7C:E3:B2:2A:A4
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/IpIwUAsd7vSu34ZCKzl9fOOyKqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.221.6.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:8c:90:fb:cf:86:a2:f4:be:ad:4f:bd:8c:89:ab:b0:5f:f4:
2c:81:7d:80:15:6e:18:b1:21:98:a2:21:44:ba:b8:42:45:b4:
21:b4:4f:97:ee:f8:13:16:93:70:f8:35:dc:f8:1c:68:aa:1b:
ba:63:1f:b9:54:43:c7:28:bc:3c:10:eb:24:ae:16:7b:22:d3:
78:46:e0:ab:48:83:80:2e:f2:cd:9e:00:01:fb:60:cb:ab:48:
d1:4b:df:3a:fc:b1:bc:71:f5:5c:a9:e7:23:9c:f6:2c:70:a9:
ae:83:89:23:9a:0d:4a:de:5b:68:66:8a:f0:50:03:e7:37:e8:
ba:f4:b8:0b:b7:37:90:80:d0:4d:c3:f2:c8:0c:b1:bb:ad:c6:
10:9c:5c:e1:92:33:9f:cf:82:4a:20:64:a7:01:f6:09:a3:bc:
e0:eb:6b:a2:a6:f0:8b:14:93:62:b4:c1:55:a6:c2:ba:12:24:
21:fc:6c:37:34:bb:f1:62:0d:25:be:f5:ff:ee:e1:5b:ca:cc:
a3:6e:35:23:8c:56:ba:4b:c8:20:6d:84:15:1d:d5:6c:fa:2d:
dd:1b:5e:f6:9d:c2:e0:be:af:d8:83:9d:5f:3c:59:dc:4c:57:
71:6a:fb:de:73:4b:b3:b6:af:71:81:c4:66:dc:d8:a0:9a:8a:
51:b2:5d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:10 2024 by rpki-client on console-fra.rpki-client.org