Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/46Vsp_IQHpkFojNz2xM76VSR-ts.roa
File: 46Vsp_IQHpkFojNz2xM76VSR-ts.roa (raw, json)
Hash identifier: J4dSvHVCNCtnvG1bA5t5Dlh38z2f98IvGWkawT/uge4=
Subject key identifier: E3:A5:6C:A7:F2:10:1E:99:05:A2:33:73:DB:13:3B:E9:54:91:FA:DB
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0186849F413E53222F83E439446BF82B94BC
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/46Vsp_IQHpkFojNz2xM76VSR-ts.roa
Signing time: Fri 24 Feb 2023 18:11:14 +0000
ROA not before: Fri 24 Feb 2023 18:11:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.250.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:84:9f:41:3e:53:22:2f:83:e4:39:44:6b:f8:2b:94:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Feb 24 18:11:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3a56ca7f2101e9905a23373db133be95491fadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:76:de:f2:80:a6:49:1c:f9:e9:03:d2:26:ed:
58:ea:b4:d1:d0:c7:d0:20:25:ca:44:60:51:c9:b9:
bf:5e:29:a3:1f:65:b4:bf:60:47:f2:59:73:08:0a:
3a:9c:b5:55:55:6e:a8:cd:2c:a9:90:84:66:6b:0a:
23:98:6a:d0:8b:fc:ad:ae:32:ac:e9:31:ca:da:56:
f6:45:9b:a5:a1:d5:a6:91:31:f5:10:66:9b:9c:86:
30:bd:0d:51:de:af:ea:b9:c3:1e:a3:23:37:46:04:
00:0d:27:71:ab:70:ba:5d:b6:38:f9:cc:6c:34:19:
e9:4a:e5:1d:36:82:8b:10:98:3e:e4:d1:95:4e:85:
ab:bd:28:4f:80:95:3b:3c:bf:03:e8:a8:76:39:33:
62:b0:af:f7:ce:69:6a:3a:97:79:d9:bb:ed:4d:32:
d6:c1:48:59:35:25:90:e0:51:70:bd:17:23:df:b6:
e5:b3:c8:eb:a3:dc:84:fd:f1:75:c7:24:c2:06:f8:
81:09:c5:70:22:8b:3c:6d:52:fe:2a:ba:af:63:4b:
23:b3:5c:da:26:55:c7:1b:97:6d:52:1c:b5:14:ff:
d2:09:4e:18:23:30:01:e6:e9:95:47:b2:48:87:50:
cb:de:35:ac:69:a0:ac:f3:99:84:23:4f:27:c1:fa:
f0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A5:6C:A7:F2:10:1E:99:05:A2:33:73:DB:13:3B:E9:54:91:FA:DB
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/46Vsp_IQHpkFojNz2xM76VSR-ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.27.0/24
Signature Algorithm: sha256WithRSAEncryption
29:dd:9c:83:25:76:eb:e4:eb:c3:86:46:05:e1:93:82:71:ff:
cd:47:09:c5:ac:ee:f3:99:c1:46:37:b2:bd:b8:d3:3c:82:64:
f4:c1:1d:d2:9b:29:81:b6:49:8c:a7:55:fd:40:01:8a:fd:a1:
70:21:95:aa:68:a6:9d:52:b8:a0:61:2a:02:c7:99:44:22:ca:
3f:1c:c6:15:73:21:9a:72:d1:72:03:9c:25:d8:32:27:b4:ca:
29:10:55:2f:39:52:e2:b3:17:b2:2c:43:9d:c9:94:03:0c:42:
b6:73:76:29:62:2d:e0:04:33:f4:80:65:2b:9e:ff:12:fd:b8:
f8:0a:44:99:e6:54:43:2f:d5:02:00:38:c3:3e:0f:4e:2f:1b:
cc:7d:24:2a:a7:e9:7d:08:90:5c:5a:38:52:0d:96:da:52:89:
c5:59:e2:7b:27:6f:5b:ce:cb:c7:69:2e:0f:26:7c:fb:d0:91:
d1:18:cd:66:03:67:f8:6a:94:57:d3:42:56:fc:d0:a8:41:91:
b2:3c:de:77:40:93:04:52:e0:15:41:1b:02:36:ff:00:45:38:
c6:53:eb:9d:dd:8b:40:e4:ca:6f:79:d1:83:66:f5:ee:5f:cb:
89:87:2d:ee:db:8c:ec:cc:21:29:52:9b:3a:4c:77:c2:2f:b8:
08:eb:a9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org