Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/xDGQq2MXjCTJxkrSpCLAdrD7OAg.roa
File: xDGQq2MXjCTJxkrSpCLAdrD7OAg.roa (raw, json)
Hash identifier: wtWmzVWg8Vgs2y98UxWkte6TbIKDAPz3HWz0DeFR+sA=
Subject key identifier: C4:31:90:AB:63:17:8C:24:C9:C6:4A:D2:A4:22:C0:76:B0:FB:38:08
Certificate issuer: /CN=1f2fbb037b2d98c474b62a60ec88da0cd2e37c61
Certificate serial: 0185710C13F06290B139F0B54680B18899CB
Authority key identifier: 1F:2F:BB:03:7B:2D:98:C4:74:B6:2A:60:EC:88:DA:0C:D2:E3:7C:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hy-7A3stmMR0tipg7IjaDNLjfGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/xDGQq2MXjCTJxkrSpCLAdrD7OAg.roa
Signing time: Mon 02 Jan 2023 05:54:54 +0000
ROA not before: Mon 02 Jan 2023 05:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 212.46.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:13:f0:62:90:b1:39:f0:b5:46:80:b1:88:99:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f2fbb037b2d98c474b62a60ec88da0cd2e37c61
Validity
Not Before: Jan 2 05:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c43190ab63178c24c9c64ad2a422c076b0fb3808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ed:b0:e2:83:35:91:19:2d:25:10:07:53:04:
4d:df:d6:89:f1:40:9f:53:05:a5:57:df:4b:0a:b5:
68:b3:5a:e6:15:33:f5:5e:3d:10:fe:07:2f:ec:bd:
c5:af:8c:4a:f7:70:52:f1:34:1f:5e:1c:eb:a0:74:
69:e6:99:57:2a:47:51:de:16:94:70:e7:8f:fd:b1:
7f:19:7f:97:1c:e5:85:7e:d5:fa:a2:6f:19:57:1a:
cb:5f:9f:05:73:71:d1:cb:32:f0:a4:17:56:a1:a6:
2c:6a:06:4f:aa:97:7e:96:c8:68:cd:0b:a8:a4:80:
2a:35:64:ac:b7:dd:b9:68:b6:33:78:97:43:55:93:
b0:cc:77:85:f2:85:50:b8:9a:b7:e1:70:f1:b6:d7:
38:f4:b9:10:a5:45:fc:ed:92:d3:99:83:78:7f:63:
96:a6:48:ac:86:ab:33:17:87:02:95:32:88:b2:48:
7e:b6:40:f1:3b:6b:ff:c2:06:ce:ad:aa:28:66:6d:
61:dc:1f:eb:50:71:d7:46:fa:58:de:97:46:16:63:
96:4f:b4:42:91:52:63:b9:9a:31:04:a7:25:7d:e0:
5e:8e:c5:55:da:de:d1:1f:39:09:20:8f:c6:37:ec:
31:f5:25:68:5a:96:d8:4b:0d:b1:02:5d:ed:1f:2e:
4e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:31:90:AB:63:17:8C:24:C9:C6:4A:D2:A4:22:C0:76:B0:FB:38:08
X509v3 Authority Key Identifier:
keyid:1F:2F:BB:03:7B:2D:98:C4:74:B6:2A:60:EC:88:DA:0C:D2:E3:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hy-7A3stmMR0tipg7IjaDNLjfGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/xDGQq2MXjCTJxkrSpCLAdrD7OAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/Hy-7A3stmMR0tipg7IjaDNLjfGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.39.0/24
Signature Algorithm: sha256WithRSAEncryption
06:d7:10:5f:8a:0f:bf:c8:51:1b:96:fc:17:3f:cb:6b:e2:a1:
d6:f6:a5:15:75:28:60:92:47:16:97:6a:33:25:82:f1:04:6d:
9e:df:83:80:0b:8f:86:e6:ac:d9:05:11:c4:c3:7a:54:d2:ff:
88:1e:a2:cf:cd:3b:6a:6b:4a:24:29:ce:b6:81:ee:fe:08:7b:
d7:56:3d:39:78:c6:c4:fb:c4:13:62:5c:ea:ff:24:44:8f:45:
2c:20:18:d6:fc:29:18:d2:bc:44:84:60:e1:d8:cb:a9:18:c2:
0e:e0:66:7f:19:ad:61:d6:7c:5f:4f:08:4b:92:87:e1:cf:1f:
15:d3:db:c4:d3:ed:72:37:72:71:a1:9f:55:15:7a:bb:6b:d4:
8f:12:1d:17:0e:44:cd:20:6f:28:e3:01:6e:cf:10:ae:34:6a:
43:f7:ff:e5:4b:75:a9:40:b5:c1:f7:64:31:a8:b0:3c:00:85:
42:ea:5b:05:2f:f5:bc:1f:7f:81:e4:89:a9:d0:22:32:f2:5a:
b0:59:91:bf:61:80:86:2b:d3:f4:44:f0:5c:f9:4a:00:c5:a1:
a5:ec:8b:d4:f2:77:3b:7f:9f:9a:1a:cd:77:75:ac:28:c5:a4:
d3:c8:d3:b9:ed:67:66:bc:da:90:0b:d1:a9:70:c9:02:a4:43:
ba:aa:21:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:15 2023 by rpki-client on console-ams.rpki-client.org