Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/VklkHko-ID5OIAEvYIYw5n6U85w.roa
File: VklkHko-ID5OIAEvYIYw5n6U85w.roa (raw, json)
Hash identifier: rlelIfWVm585JE9H73tqx0sYdJMCJt6KYGHFlCdQug8=
Subject key identifier: 56:49:64:1E:4A:3E:20:3E:4E:20:01:2F:60:86:30:E6:7E:94:F3:9C
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 018CCAA8F09A2D66982562CDBA4E53EAC37C
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/VklkHko-ID5OIAEvYIYw5n6U85w.roa
Signing time: Tue 02 Jan 2024 14:51:58 +0000
ROA not before: Tue 02 Jan 2024 14:51:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216145
IP address blocks: 46.253.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Feb 2024 19:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:a8:f0:9a:2d:66:98:25:62:cd:ba:4e:53:ea:c3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: Jan 2 14:51:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5649641e4a3e203e4e20012f608630e67e94f39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8d:95:ae:91:7f:93:3b:ad:cb:9e:f7:20:d2:
80:1d:61:6c:11:06:fe:af:dc:09:71:35:9e:fa:91:
0e:2e:0f:aa:b0:d9:3d:db:a1:50:64:1d:4c:0b:82:
51:0c:19:78:6e:5d:08:24:9d:fc:84:84:08:e4:28:
be:d9:98:07:e3:66:0e:de:1d:c7:6f:fa:3b:58:60:
4a:98:86:00:b5:bb:52:64:6e:eb:80:14:07:7c:f2:
0d:b2:60:4a:5b:99:b5:ee:ef:95:99:ab:13:46:be:
8d:05:ed:13:cf:77:12:c7:e3:35:e3:ec:3e:22:d9:
11:fa:97:94:c5:a4:91:3e:5b:16:20:5f:72:05:82:
23:ba:6e:ce:1b:1f:43:cc:18:2e:8a:2f:15:a1:59:
12:26:b3:98:db:8c:0c:1c:81:6f:4c:db:ba:0d:b0:
3b:28:3d:29:25:6b:87:09:c3:59:48:e6:20:54:39:
38:b8:86:5c:c9:83:59:af:d8:40:de:4f:0b:fc:3b:
bb:93:c0:90:e0:3d:dd:6f:4a:bb:5e:4a:6e:17:81:
36:b9:38:ee:b1:c5:0c:fb:5f:4a:b8:2e:23:aa:a0:
f7:19:3c:70:3b:40:40:28:c7:8f:d4:4a:77:7c:bd:
be:b9:b4:f0:76:3d:89:3a:68:36:ac:98:d5:51:2d:
68:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:49:64:1E:4A:3E:20:3E:4E:20:01:2F:60:86:30:E6:7E:94:F3:9C
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/VklkHko-ID5OIAEvYIYw5n6U85w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.7.0/24
Signature Algorithm: sha256WithRSAEncryption
57:cc:15:a4:a6:b5:86:96:1f:d3:48:7f:a1:66:b8:b6:53:ad:
3d:2a:20:74:19:e8:fe:d6:e6:d6:d7:2f:43:dd:75:23:26:91:
b3:6a:03:30:1a:41:49:cc:33:c8:e9:2f:12:f8:66:db:9f:58:
8b:80:0b:f9:62:5b:e5:1d:e6:23:15:4e:e4:9c:50:ee:df:c3:
e0:d3:e8:90:90:89:cf:ad:ed:13:10:4f:6f:4f:3d:8b:69:d4:
aa:4f:92:96:60:fd:7b:cf:9a:c2:31:e5:37:c2:3a:f3:77:ff:
3e:f1:2b:de:82:bd:e7:3c:43:d2:68:a9:bc:42:a9:9b:fd:2e:
5d:2d:e2:a5:b7:bd:53:35:ac:48:33:cc:38:a1:71:ee:25:26:
dd:a3:88:ad:ca:09:ac:4a:6d:b4:3e:a1:c6:a3:2b:47:ca:f3:
b8:de:8f:a3:37:06:5f:68:d8:60:4a:71:ca:0a:c6:9d:c4:5b:
f3:4c:3b:3a:ba:8c:22:3d:24:ef:bf:19:3d:de:dd:11:c2:66:
e3:45:90:fa:f3:de:26:62:cc:1d:82:19:9d:dc:20:2c:74:51:
03:fb:30:5f:d4:62:bf:d7:49:9e:52:d2:af:99:71:3c:22:c5:
ad:6b:28:66:24:4e:82:19:7c:e9:6f:76:5f:93:25:53:1e:7e:
7a:b8:5f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 4 20:18:58 2024 by rpki-client on console-ams.rpki-client.org