Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/8O8eJkp-ZFErPIKWyO7asUl5O1M.roa
File: 8O8eJkp-ZFErPIKWyO7asUl5O1M.roa (raw, json)
Hash identifier: oSP3JcVmUwZQKa6Z+QOUBjvRHrq1Yjts47/zbOc8OEY=
Subject key identifier: F0:EF:1E:26:4A:7E:64:51:2B:3C:82:96:C8:EE:DA:B1:49:79:3B:53
Certificate issuer: /CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4
Certificate serial: 01856CCB081CDE8676A43EC571479F0931A5
Authority key identifier: A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/8O8eJkp-ZFErPIKWyO7asUl5O1M.roa
Signing time: Sun 01 Jan 2023 10:05:23 +0000
ROA not before: Sun 01 Jan 2023 10:05:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207209
IP address blocks: 46.149.64.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 08 Dec 2023 15:52:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:08:1c:de:86:76:a4:3e:c5:71:47:9f:09:31:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4
Validity
Not Before: Jan 1 10:05:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0ef1e264a7e64512b3c8296c8eedab149793b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ac:7c:51:07:1b:e0:a0:85:23:fb:92:88:f6:
3e:08:6c:b2:49:af:83:9f:a2:be:05:98:5c:3d:ad:
af:9f:c0:1f:ec:11:c9:14:a8:46:84:2e:c9:82:b1:
c1:14:1e:75:7b:3c:9a:31:7d:31:98:e5:d7:f8:e4:
86:7d:16:18:b5:94:2d:44:ee:bd:1e:23:3b:55:1e:
58:9e:60:cc:b2:a3:4e:e2:85:68:74:7a:c8:c3:a5:
14:e1:58:73:13:79:99:24:62:e9:50:71:da:94:35:
d5:8c:0f:15:a0:e0:1e:74:4a:97:13:b8:e8:24:51:
0a:5c:b6:fc:5f:25:6d:48:b5:a8:87:c7:1d:ac:e7:
dc:b5:fb:72:c1:c6:4a:d3:db:5c:83:d6:fa:b0:34:
2d:86:29:c6:5b:f5:b1:89:8e:91:b8:0b:cb:a4:60:
14:cf:5c:8c:6d:a3:57:57:df:15:0b:a2:25:88:6b:
c9:e8:3f:af:76:34:bd:c2:4a:64:52:5b:d8:c3:f5:
6b:82:56:94:10:75:4e:71:52:ac:a0:ea:6e:fb:a8:
39:af:95:33:8b:d3:b7:bd:71:32:ab:39:65:74:55:
54:5f:4f:b5:cf:4d:53:0b:4a:ba:c6:00:3f:11:dc:
c5:de:44:b3:68:29:78:c0:95:4d:fd:0f:36:e0:d0:
a6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EF:1E:26:4A:7E:64:51:2B:3C:82:96:C8:EE:DA:B1:49:79:3B:53
X509v3 Authority Key Identifier:
keyid:A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/8O8eJkp-ZFErPIKWyO7asUl5O1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.64.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:6b:04:0f:93:1e:50:df:f7:d3:d4:0d:ff:c7:9f:8f:e4:08:
ba:90:4b:b3:60:04:3b:30:24:49:d9:62:a1:e0:b9:1c:5d:ba:
f8:3a:48:b7:70:f0:ab:fc:9e:35:ec:01:73:fa:b9:08:1c:73:
18:04:ac:5c:29:41:d8:d1:92:a2:d4:a1:7e:cb:39:c4:ef:2d:
44:d7:5e:73:7f:7b:64:d2:91:fa:99:0a:d0:82:5d:15:8c:3a:
c1:f5:ff:5d:5a:f0:36:29:0d:b8:d0:73:8c:b8:29:44:2b:fa:
91:a3:b0:f0:f7:67:9f:9f:ad:cd:9d:0f:93:c2:71:1e:fc:ba:
c5:e6:d4:f8:a0:10:9c:ef:43:21:2c:b2:7e:6c:21:a3:7f:12:
ac:88:cf:7e:e9:0a:94:47:98:07:4e:46:1e:d2:34:f3:16:f1:
a9:6f:92:26:8a:5f:1a:8c:a8:d2:45:36:85:b9:b1:a4:b4:bc:
2a:4e:cc:4a:49:91:88:cc:40:11:65:85:f1:a3:c5:ad:b2:45:
1b:61:75:69:0d:c1:ab:18:b4:e8:08:9d:30:6f:ce:1c:a4:51:
74:91:4d:6b:a6:40:a8:56:67:e0:9f:51:a2:42:38:c7:91:eb:
e0:e3:84:be:ac:39:b4:ac:7f:16:43:1f:e1:0f:27:33:44:f3:
fb:27:46:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:20 2024 by rpki-client on console-ams.rpki-client.org