Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/MTxT-s6mTMw8gDmzbYZeUUrlrDs.roa
File: MTxT-s6mTMw8gDmzbYZeUUrlrDs.roa (raw, json)
Hash identifier: DodczK9KP0+2Ih78KbW4dOzbxLyKxVlLpTAUJ3Np/Ps=
Subject key identifier: 31:3C:53:FA:CE:A6:4C:CC:3C:80:39:B3:6D:86:5E:51:4A:E5:AC:3B
Certificate issuer: /CN=1495c6f815c70ef1910d37493963445af918ab59
Certificate serial: 01856B5340B0656BB515D197371875B23887
Authority key identifier: 14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/MTxT-s6mTMw8gDmzbYZeUUrlrDs.roa
Signing time: Sun 01 Jan 2023 03:14:56 +0000
ROA not before: Sun 01 Jan 2023 03:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199226
IP address blocks: 46.35.96.0/20 maxlen: 20
46.35.112.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:40:b0:65:6b:b5:15:d1:97:37:18:75:b2:38:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1495c6f815c70ef1910d37493963445af918ab59
Validity
Not Before: Jan 1 03:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=313c53facea64ccc3c8039b36d865e514ae5ac3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:70:dc:fd:f2:58:9f:da:ce:8b:84:28:1e:0d:
f1:46:d2:cc:29:6a:9e:60:a3:11:b3:42:21:b5:56:
83:7a:1a:bd:eb:80:8d:38:3d:2d:c7:4e:47:6e:be:
12:86:e8:81:cb:6a:a3:c4:ff:aa:e8:97:57:f5:1e:
27:f8:23:3b:82:d4:9a:21:24:46:fa:7c:16:bb:a6:
bf:a3:9c:11:41:30:ba:b1:e0:22:35:79:cd:47:15:
66:37:b5:41:c7:ba:ac:c5:e0:ff:88:d0:70:00:14:
61:fd:de:7f:91:1c:6f:8c:68:75:75:3a:08:4f:ee:
4c:cb:de:35:44:2f:06:77:ec:cd:88:8b:e5:4a:00:
a5:a0:3a:6e:5a:22:3f:18:48:46:ca:a5:40:73:fd:
07:48:4f:82:59:62:04:b3:ba:72:fb:ef:34:b6:98:
c5:2e:72:34:81:c1:bb:58:84:5f:3a:98:52:3a:84:
c3:9e:64:42:00:2b:e6:e4:ed:07:1e:f9:dc:64:8e:
8a:e5:ac:22:48:4b:3d:27:30:6e:c6:fc:c4:e1:ec:
ee:df:eb:54:bc:77:d6:99:fd:b7:a5:58:df:0e:82:
1c:ce:06:2f:81:b8:91:da:1b:a5:cb:96:e1:c8:6b:
d4:5b:41:e4:89:a3:32:72:39:cb:88:ea:56:d2:fe:
61:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3C:53:FA:CE:A6:4C:CC:3C:80:39:B3:6D:86:5E:51:4A:E5:AC:3B
X509v3 Authority Key Identifier:
keyid:14:95:C6:F8:15:C7:0E:F1:91:0D:37:49:39:63:44:5A:F9:18:AB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJXG-BXHDvGRDTdJOWNEWvkYq1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/MTxT-s6mTMw8gDmzbYZeUUrlrDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/3efda5-be8f-486d-b08f-2500420366fb/1/FJXG-BXHDvGRDTdJOWNEWvkYq1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.96.0/19
Signature Algorithm: sha256WithRSAEncryption
32:23:af:91:94:e5:35:5b:a7:e9:72:f5:a6:ed:b3:50:e8:7d:
a4:93:b4:4b:cf:55:bb:43:f6:4c:9a:5e:11:c2:15:0d:d6:8c:
6d:11:e2:86:cb:06:7d:47:87:17:8f:0a:67:db:f1:74:0a:13:
48:39:df:83:98:51:99:46:e3:63:9c:3b:07:bf:eb:51:fd:e6:
ae:aa:6f:3a:03:4c:fc:71:75:55:30:48:18:68:d6:a7:11:07:
29:6b:19:33:12:47:68:bd:39:83:80:5a:41:8f:a7:64:d7:56:
b5:1b:9e:60:7a:78:44:81:90:5d:da:47:53:03:15:a1:4c:4b:
47:87:ab:6e:43:63:cd:2f:e6:81:df:0f:7a:b4:9b:3f:0a:4c:
e4:c8:20:22:93:3c:81:43:ca:94:79:0e:bf:29:8d:08:b2:d1:
70:6f:dc:f8:be:c6:8a:8c:18:dd:ab:10:7a:1a:76:fd:cd:c8:
1c:d9:f3:bd:01:4c:b6:8d:1a:cc:38:f2:7f:f5:e5:9d:45:21:
83:89:f4:75:22:ba:1b:9e:ee:21:9e:d0:8e:44:68:5b:eb:96:
ca:00:e6:2d:01:d1:16:14:b2:46:35:25:ed:a7:29:bb:99:e1:
85:0d:49:8b:c1:8b:03:62:69:ef:4f:a4:77:f5:3f:8c:a4:73:
04:e4:ac:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:24 2024 by rpki-client on console-fra.rpki-client.org