Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/VsWBAGkb2IYIW3gMygswHFGe6zs.roa
File: VsWBAGkb2IYIW3gMygswHFGe6zs.roa (raw, json)
Hash identifier: mMK8EPH+FHgLm2z9/4J+yEbiAqdipG/rneaVAuXaQtI=
Subject key identifier: 56:C5:81:00:69:1B:D8:86:08:5B:78:0C:CA:0B:30:1C:51:9E:EB:3B
Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039
Certificate serial: 01857102CEF496F4A639D5EC485070ABFD87
Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/VsWBAGkb2IYIW3gMygswHFGe6zs.roa
Signing time: Mon 02 Jan 2023 05:44:47 +0000
ROA not before: Mon 02 Jan 2023 05:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203980
IP address blocks: 46.172.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:ce:f4:96:f4:a6:39:d5:ec:48:50:70:ab:fd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039
Validity
Not Before: Jan 2 05:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56c58100691bd886085b780cca0b301c519eeb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:66:32:49:d9:cf:5a:37:52:a1:58:62:81:a7:
cc:c1:4f:f8:91:ac:1d:09:dc:85:77:d2:1e:4b:9f:
ec:2e:af:11:c5:c1:56:31:b8:15:fe:da:06:b7:25:
bd:b4:ee:74:b3:34:82:60:40:63:c2:64:ef:63:8c:
be:9b:a5:b4:c2:c6:06:17:e5:ff:d7:b6:f6:8f:3a:
d2:e4:6e:35:a3:61:04:62:0a:aa:d0:d0:f4:eb:d3:
a5:12:f0:0e:b7:ac:c7:e0:c0:e7:65:51:26:77:60:
eb:4d:ac:27:2b:e2:f8:98:1d:92:7c:5a:26:23:79:
ac:a4:44:f7:0b:54:33:f1:bd:91:24:2c:56:40:e9:
65:d7:6d:2c:34:a8:5b:7f:e4:aa:7b:9c:aa:18:3b:
d9:e1:f5:41:1b:28:02:21:6e:fb:3b:b2:e6:d6:f5:
25:07:07:26:da:29:bf:bf:56:44:9a:0e:e7:36:e9:
48:ef:50:ae:ae:14:51:4b:09:f9:eb:7c:9d:0d:38:
e2:50:e1:11:a5:f3:9c:e6:e0:f9:d6:df:11:db:13:
f2:f8:4f:59:ca:f3:5d:b4:27:56:4f:78:f4:b7:cf:
50:8a:d5:41:90:1a:ff:ba:5d:24:fb:a0:a0:0f:2a:
dc:b4:f8:b4:5b:79:8a:b9:ff:7d:a4:4d:4c:9e:a1:
20:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C5:81:00:69:1B:D8:86:08:5B:78:0C:CA:0B:30:1C:51:9E:EB:3B
X509v3 Authority Key Identifier:
keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/VsWBAGkb2IYIW3gMygswHFGe6zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.172.76.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:97:f5:ba:4c:f5:31:07:2b:84:b0:10:07:17:ff:ee:19:f9:
88:5b:d0:19:e7:aa:d1:cc:b3:be:af:2d:0a:76:ba:fe:46:99:
cd:9a:4c:70:3b:38:89:00:5f:62:62:65:a1:b7:37:51:e1:09:
47:f5:6a:cc:b1:47:db:c2:84:c5:a8:68:a4:04:22:a9:5a:a5:
51:91:6f:a1:ed:75:74:f9:1a:eb:9d:33:0b:db:01:fa:d8:8c:
27:bd:ee:29:27:00:0d:00:dc:2d:ad:33:0e:7b:75:ee:49:12:
82:0d:e7:fc:7b:64:ae:ef:df:e8:f8:76:be:1d:3e:58:d8:0c:
25:5d:7d:8d:4a:64:12:16:ed:3d:f8:3a:f8:65:62:b2:3a:81:
63:df:eb:27:14:b5:d2:42:08:65:fa:91:22:86:4e:46:83:27:
8d:f3:60:71:51:b2:44:c0:f6:72:8c:36:42:86:e8:da:fe:d3:
3b:a7:08:50:a0:9f:8d:8b:ef:6a:cb:d0:4f:f1:e9:e2:93:d7:
f5:7b:78:75:ce:16:91:5f:5c:da:0e:9d:85:0e:10:5b:04:f3:
13:1e:fe:de:fd:90:f1:14:4f:23:58:da:2b:3c:6b:28:7f:ab:
94:6e:99:52:56:4f:21:48:d3:ac:d1:e5:1f:18:64:53:1d:17:
87:66:2f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:26 2024 by rpki-client on console-fra.rpki-client.org