Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/xh49BL-DwTm5emk1vtXC2dWYahU.roa
File: xh49BL-DwTm5emk1vtXC2dWYahU.roa (raw, json)
Hash identifier: Jb7swLVWLQj49hqFczcfyQfFQgx6Upr1UvNRty7Q38Q=
Subject key identifier: C6:1E:3D:04:BF:83:C1:39:B9:7A:69:35:BE:D5:C2:D9:D5:98:6A:15
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 018572CCC782D46E1E8875E6B156871CAE5D
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/xh49BL-DwTm5emk1vtXC2dWYahU.roa
Signing time: Mon 02 Jan 2023 14:05:01 +0000
ROA not before: Mon 02 Jan 2023 14:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56910
IP address blocks: 46.227.61.64/28 maxlen: 32
46.227.58.96/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:c7:82:d4:6e:1e:88:75:e6:b1:56:87:1c:ae:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: Jan 2 14:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c61e3d04bf83c139b97a6935bed5c2d9d5986a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b5:3d:0a:25:76:e4:ac:d4:a4:be:03:25:fb:
04:6d:89:44:d4:6b:ab:57:4a:94:86:b0:1a:10:c5:
1f:f1:6d:08:62:8f:c8:9f:5c:36:26:40:56:d5:94:
44:43:1a:52:59:d0:0b:b0:85:a3:13:7c:2a:19:18:
d3:ee:c1:c7:95:c6:40:1b:28:c9:e3:47:32:ad:27:
88:eb:da:58:21:85:f3:13:a7:e8:45:8c:fd:37:33:
10:e0:18:68:1a:a0:ce:02:24:5c:75:78:5a:b0:d5:
f2:12:d6:06:96:87:04:56:57:36:2a:81:91:51:01:
28:34:06:8c:ff:2b:f4:50:a7:87:64:a7:32:4a:aa:
fd:79:4b:30:50:df:e6:86:6f:62:e9:06:a3:d4:b2:
82:8d:82:10:5e:f5:de:f9:ed:81:a2:7d:9d:73:ea:
d3:fe:93:42:25:68:dc:42:1f:4c:43:de:11:4e:85:
54:8d:b5:28:32:7d:74:47:02:28:43:98:6f:9f:cb:
b3:2b:8d:fc:e1:85:7b:eb:b1:76:77:b8:f1:60:00:
9e:82:c4:23:84:e1:d3:61:cd:18:37:02:49:25:0e:
ed:97:69:e6:d8:ec:fc:d8:c3:8c:5c:2a:87:0b:56:
42:d8:d9:2f:88:93:c0:51:f6:15:50:d8:26:13:1a:
f8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1E:3D:04:BF:83:C1:39:B9:7A:69:35:BE:D5:C2:D9:D5:98:6A:15
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/xh49BL-DwTm5emk1vtXC2dWYahU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.58.96/29
46.227.61.64/28
Signature Algorithm: sha256WithRSAEncryption
1a:3a:36:36:16:a5:4a:52:4f:d6:fa:16:de:bc:a4:8b:81:96:
f4:3d:05:aa:03:f4:ff:69:e9:25:01:4a:25:fc:25:01:60:d8:
c7:b4:77:ca:9f:ea:b9:ad:72:72:e0:c5:3c:d3:83:3c:a2:3e:
4b:ba:ea:69:07:3f:0d:e1:dd:c9:50:f5:58:48:23:37:28:ea:
72:6d:fd:fe:bd:9d:00:27:06:d4:66:d7:e3:10:a8:1e:cd:41:
d5:f7:b0:d3:a7:8b:e6:cc:3e:3a:9f:41:7d:94:5d:61:98:e9:
38:c7:eb:fa:dc:1e:5f:6b:e6:c0:35:94:15:4d:11:e4:31:30:
d3:23:e5:f4:4c:af:b1:27:ce:83:ce:74:d3:94:68:ec:1e:66:
4c:df:8b:96:6e:44:94:b6:a0:83:61:ba:da:e7:f6:b6:92:78:
13:e2:14:d4:15:8a:31:d1:b9:19:c0:1d:aa:8d:93:f1:28:d4:
ab:54:d6:76:19:04:fa:c5:e2:87:40:a7:39:4d:e2:22:bc:4f:
71:31:b7:fe:8c:9b:4a:fc:b3:56:e0:2c:84:73:62:bf:71:1d:
12:51:50:a2:bf:a5:5d:76:60:b6:e7:94:31:6d:38:2d:c1:63:
a8:dd:c0:d4:58:cc:7b:1b:17:f4:d9:68:a8:ee:fa:99:c4:94:
23:7b:08:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:54 2024 by rpki-client on console-fra.rpki-client.org