Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/bk2-wpmtsQQrPADW1Gx6FWu9V5Q.roa
File: bk2-wpmtsQQrPADW1Gx6FWu9V5Q.roa (raw, json)
Hash identifier: 3mIZLJGiHtl0BxzPKq73ENZt6wtOKaWIaAcSvX2CPvg=
Subject key identifier: 6E:4D:BE:C2:99:AD:B1:04:2B:3C:00:D6:D4:6C:7A:15:6B:BD:57:94
Certificate issuer: /CN=9f96ae2770265af32e7d4be86bab07a07c2d3353
Certificate serial: 01856C4150C582198283C7264DACF9B7869A
Authority key identifier: 9F:96:AE:27:70:26:5A:F3:2E:7D:4B:E8:6B:AB:07:A0:7C:2D:33:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5auJ3AmWvMufUvoa6sHoHwtM1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/bk2-wpmtsQQrPADW1Gx6FWu9V5Q.roa
Signing time: Sun 01 Jan 2023 07:34:57 +0000
ROA not before: Sun 01 Jan 2023 07:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201600
IP address blocks: 93.159.115.0/24 maxlen: 24
46.227.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:50:c5:82:19:82:83:c7:26:4d:ac:f9:b7:86:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f96ae2770265af32e7d4be86bab07a07c2d3353
Validity
Not Before: Jan 1 07:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e4dbec299adb1042b3c00d6d46c7a156bbd5794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:12:a0:4d:e6:55:42:ba:98:d8:c4:17:4c:8e:
4a:5a:b5:f4:92:b3:f2:bd:31:f9:0c:6f:21:41:0f:
9f:b6:5d:7c:fd:a4:d1:35:27:9d:9b:9c:fd:b4:3f:
48:9e:19:84:9b:83:28:07:09:1c:d3:58:7d:57:23:
29:0a:c7:88:3d:2c:33:c9:c9:ca:61:af:f1:ed:88:
2f:5b:ec:91:81:d4:e0:49:c2:88:9e:79:5f:26:ce:
aa:5d:3a:7a:57:41:c8:8d:2b:0c:97:94:8c:fa:74:
0c:ef:1a:f7:c8:02:b5:d0:a5:b6:0d:08:72:98:a7:
26:d2:2d:95:53:98:92:fa:e2:be:e5:7a:b9:af:86:
11:62:8b:57:6d:e8:b7:25:25:75:fb:b3:5f:a2:4e:
a9:97:92:e8:4e:16:32:74:e2:f1:29:a9:df:16:01:
07:6b:7f:fb:3d:14:4e:9b:bd:34:29:c3:86:75:f8:
2c:93:37:ca:35:22:60:ca:6a:58:e5:4b:e9:ef:05:
70:3f:30:90:69:d8:46:14:e3:f9:d6:7d:db:38:2c:
be:6d:75:f2:0e:42:bb:96:2e:2d:b7:bf:42:7a:6c:
ce:dc:45:c8:71:ca:2f:38:74:9c:3f:68:8b:3d:85:
b6:f5:4f:9d:eb:1b:4a:31:91:d3:c5:86:68:e5:9e:
c2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4D:BE:C2:99:AD:B1:04:2B:3C:00:D6:D4:6C:7A:15:6B:BD:57:94
X509v3 Authority Key Identifier:
keyid:9F:96:AE:27:70:26:5A:F3:2E:7D:4B:E8:6B:AB:07:A0:7C:2D:33:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5auJ3AmWvMufUvoa6sHoHwtM1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/bk2-wpmtsQQrPADW1Gx6FWu9V5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6bb5b1-1e6a-4455-9d75-e64c885f62ce/1/n5auJ3AmWvMufUvoa6sHoHwtM1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.220.0/24
93.159.115.0/24
Signature Algorithm: sha256WithRSAEncryption
03:d6:8c:d0:46:10:71:8c:0a:56:4b:ea:c4:b7:e6:47:0b:f1:
0f:76:03:ef:89:ca:77:2c:91:ac:9a:f3:c0:dc:22:47:92:1e:
a6:d3:cd:d8:5f:ae:d5:e7:b3:ea:03:77:f9:a2:6e:70:75:f4:
5a:ac:f7:15:1b:5e:01:82:95:1a:35:01:2b:66:7d:6d:da:b1:
7a:6e:c1:82:74:a6:b2:a3:c7:8d:5b:8d:16:1f:b7:61:67:13:
7d:f2:e4:05:28:4d:e9:8f:19:72:ab:02:c7:46:ef:ad:c7:3c:
99:de:73:d4:e0:3a:ef:ee:4c:6c:cc:0a:c1:7c:b4:e8:1a:8f:
67:6c:6c:68:34:bb:28:66:bd:ca:6f:3a:39:3d:36:a3:52:1e:
bc:f2:eb:5f:cf:b4:c9:be:27:68:93:a3:ca:a4:bc:67:e6:73:
95:2f:2a:8f:06:be:01:89:10:10:ef:5e:6b:b9:fd:8b:72:22:
7b:31:3f:cd:65:a4:cd:33:ee:8e:5f:0e:50:73:33:20:4d:14:
f0:ac:39:01:ad:ab:e7:f4:83:05:a7:84:33:d7:d4:73:b9:74:
29:92:a9:0c:d8:59:40:85:6a:51:55:50:72:3b:d1:51:21:80:
e9:8c:7b:67:a3:28:53:c8:50:53:e7:3d:5e:30:ed:01:62:d4:
a0:8d:fe:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:03 2024 by rpki-client on console-ams.rpki-client.org