Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/6cPdI-ELGM99MGJ3X2kr9Jic6z8.roa
File: 6cPdI-ELGM99MGJ3X2kr9Jic6z8.roa (raw, json)
Hash identifier: VvEYxIg8CyCi1ZO50TwFjSDNL3eSC2c3qFK4U1Hs/B8=
Subject key identifier: E9:C3:DD:23:E1:0B:18:CF:7D:30:62:77:5F:69:2B:F4:98:9C:EB:3F
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 01856FA6EE29FB658C11C8ECD8F66612F82E
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/6cPdI-ELGM99MGJ3X2kr9Jic6z8.roa
Signing time: Sun 01 Jan 2023 23:24:48 +0000
ROA not before: Sun 01 Jan 2023 23:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212567
IP address blocks: 46.226.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:ee:29:fb:65:8c:11:c8:ec:d8:f6:66:12:f8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Jan 1 23:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9c3dd23e10b18cf7d3062775f692bf4989ceb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:75:68:02:64:1b:54:a8:5c:aa:bc:97:58:74:
22:5d:38:11:ac:7e:d8:58:be:28:85:17:8d:54:eb:
b6:ea:86:4f:75:58:6b:68:e0:0b:f7:6e:7c:75:fa:
df:41:5f:f5:48:b2:5a:5f:5d:75:88:a7:f5:94:f2:
25:24:c0:ec:b7:ec:63:4c:46:76:6b:c3:4a:e8:79:
f2:83:14:5f:9f:a9:fe:33:08:7a:50:1d:71:54:b6:
4f:ff:1a:98:52:db:31:5d:39:bd:10:e6:1a:e6:77:
ef:be:df:c7:b8:94:41:50:3c:2d:06:46:57:14:53:
62:00:dc:40:95:ec:5f:3c:8b:97:ca:d5:b6:9d:2d:
ac:62:28:4e:58:f8:2f:99:3e:e3:0f:72:be:4a:b0:
e2:06:b3:86:fc:76:81:d4:3c:6e:5a:ab:37:52:97:
06:fb:ac:87:9c:1e:81:9d:c0:d9:52:d2:5f:c8:a9:
56:47:b9:a9:9d:c3:6f:97:b8:bf:e9:59:5f:5b:95:
c2:9a:f5:4e:4e:86:66:a3:b4:9e:7d:e5:cd:82:f1:
14:35:6a:b9:ea:31:a5:5d:b9:c6:23:08:47:01:d2:
0d:0a:f2:37:37:24:5f:90:06:5c:26:e6:ad:ec:1c:
23:be:0b:46:7a:f5:52:d7:4e:cc:4c:ce:17:be:84:
73:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C3:DD:23:E1:0B:18:CF:7D:30:62:77:5F:69:2B:F4:98:9C:EB:3F
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/6cPdI-ELGM99MGJ3X2kr9Jic6z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.127.0/24
Signature Algorithm: sha256WithRSAEncryption
21:83:29:f2:40:10:bd:6d:45:56:f9:3e:03:ae:d2:fa:df:0c:
0a:1a:60:19:bb:fd:9f:23:df:b8:0d:9b:18:50:91:24:b0:4e:
fb:a9:e1:04:66:23:18:47:08:d0:1f:b6:e3:25:e6:4d:a6:d0:
d1:74:54:51:1d:69:cb:be:50:a0:30:38:79:6e:c6:27:17:a9:
c3:3c:b5:6d:1c:bd:ce:cb:58:98:79:17:7d:1e:bb:61:6b:12:
08:9d:aa:34:8d:76:e9:5e:4d:40:75:d8:d4:be:35:2f:e6:02:
43:c7:28:e4:66:33:0e:b9:dc:90:4d:c4:7d:35:3d:e6:0d:bc:
65:4c:85:c2:ed:aa:87:be:54:fe:ff:82:8d:e2:55:4d:fc:05:
d0:32:6c:73:ae:a3:87:f9:31:53:4e:0c:5b:75:c0:85:f4:e8:
ea:58:60:fc:ea:b3:dc:db:0c:73:7c:80:ff:78:df:43:04:cd:
3e:11:bd:53:e4:4d:6e:e9:9e:4a:28:98:cc:f5:b9:f5:aa:6b:
41:a9:b2:0d:64:8a:68:a1:f9:7c:c6:0c:7c:30:18:ca:27:56:
50:a4:ca:21:73:d1:d8:fd:17:40:a5:e0:09:ce:3c:e2:0a:ba:
2a:61:b7:3f:70:a6:88:48:c0:8a:fe:0b:cf:4f:e4:38:1e:59:
c8:a2:1a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:28 2024 by rpki-client on console-ams.rpki-client.org