Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/46dGYHWdTPuu-WAHgrl0J697zU8.roa
File: 46dGYHWdTPuu-WAHgrl0J697zU8.roa (raw, json)
Hash identifier: XSkO7J+U+Wl1c143EXfLMwk/c9Ap6/KHNmmWrwDl//Q=
Subject key identifier: E3:A7:46:60:75:9D:4C:FB:AE:F9:60:07:82:B9:74:27:AF:7B:CD:4F
Certificate issuer: /CN=f6413486886b56231dec573fad4f8ab32cbf92a4
Certificate serial: 0185715E64BB6E24D20C2081F2919CD2FCB3
Authority key identifier: F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/46dGYHWdTPuu-WAHgrl0J697zU8.roa
Signing time: Mon 02 Jan 2023 07:24:49 +0000
ROA not before: Mon 02 Jan 2023 07:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203311
IP address blocks: 185.139.252.0/22 maxlen: 22
2a07:1180::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:64:bb:6e:24:d2:0c:20:81:f2:91:9c:d2:fc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6413486886b56231dec573fad4f8ab32cbf92a4
Validity
Not Before: Jan 2 07:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3a74660759d4cfbaef9600782b97427af7bcd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:99:ea:df:de:d9:18:ed:19:9c:6d:46:81:a4:
e1:9b:77:c6:49:b8:a0:a1:fa:fa:78:42:1f:3b:00:
92:b6:21:ab:24:68:3d:e0:88:60:55:92:13:8b:80:
16:6f:f1:43:79:a9:27:48:e4:16:93:22:8b:51:61:
c2:f1:97:bd:31:a5:5f:f1:76:cf:04:85:8f:2a:6b:
b4:91:06:7c:35:af:c3:49:0e:ff:54:3c:67:95:66:
b7:da:20:61:76:48:49:ed:73:b9:f8:24:cf:64:44:
47:ac:92:2c:69:1d:46:d7:0d:82:43:a9:17:57:78:
11:78:a0:0f:d0:e2:dc:70:65:4d:3e:92:b3:35:38:
ab:74:13:5f:5a:9d:33:d3:f2:21:f9:48:c5:95:24:
83:3d:ac:cd:7c:57:94:70:f9:7a:d1:80:ff:d2:91:
b7:8d:33:b1:07:fa:f9:12:4c:76:f1:3f:46:da:b0:
13:e6:97:a6:b5:4d:c7:10:91:17:c8:8a:4b:c2:55:
56:e7:14:8f:fb:f8:40:14:b2:2f:6c:a2:e7:e8:7b:
8f:1a:62:a0:1d:59:8a:a8:66:3f:48:fb:c6:4a:a6:
a4:06:f2:48:47:04:38:7a:6e:4c:8c:86:5a:ed:48:
27:45:af:00:f3:89:07:87:f3:aa:50:60:a6:c1:8f:
56:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A7:46:60:75:9D:4C:FB:AE:F9:60:07:82:B9:74:27:AF:7B:CD:4F
X509v3 Authority Key Identifier:
keyid:F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/46dGYHWdTPuu-WAHgrl0J697zU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.252.0/22
IPv6:
2a07:1180::/29
Signature Algorithm: sha256WithRSAEncryption
25:b1:1f:79:08:be:6b:07:76:cf:be:c8:9f:18:25:a2:38:b3:
46:0d:62:40:e4:42:35:58:ee:e3:0f:b1:d3:7f:50:f8:42:9a:
b9:87:89:bc:b9:0f:b1:52:66:28:7d:6e:a6:e5:ab:75:6e:19:
c9:b6:1e:4b:4b:22:ce:d2:e6:df:74:36:6e:80:3b:74:cf:15:
51:ce:b2:dd:fa:f8:4c:09:cf:55:e6:c9:4b:69:28:2f:ec:23:
54:37:87:b5:da:05:69:66:1a:67:14:ff:09:7a:05:da:ca:c8:
49:2b:cf:16:42:ff:0f:3a:ae:63:ac:ce:80:02:5e:a8:df:d1:
3e:0d:e0:ae:44:63:57:af:72:8d:b2:5c:7d:e8:4f:4a:11:31:
b8:e4:41:ab:b4:c6:6c:78:74:0b:cf:25:09:0a:9a:c9:13:43:
aa:60:9d:36:6e:15:56:ac:a8:f2:72:87:be:30:64:01:57:e7:
b6:9d:88:eb:cb:36:bf:5a:06:6c:0c:a6:74:e1:12:f4:0a:fa:
8b:ac:da:f2:79:f4:28:29:88:83:39:17:b6:27:9f:aa:89:89:
89:5d:9b:55:c6:90:b6:bf:e3:15:44:1a:89:95:d0:d0:e7:89:
71:08:9d:f5:35:e2:15:8a:28:2a:b9:78:c0:fd:7d:e8:45:6e:
0a:eb:6d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:28 2024 by rpki-client on console-fra.rpki-client.org