Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/V6zFkntBMwV1rBU2SZyHVhOi18g.roa
File: V6zFkntBMwV1rBU2SZyHVhOi18g.roa (raw, json)
Hash identifier: XTK66ccBHKYP88wVHoLEMnTtaOHzVr3jHk/+bglZXsI=
Subject key identifier: 57:AC:C5:92:7B:41:33:05:75:AC:15:36:49:9C:87:56:13:A2:D7:C8
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 018578035287457C00613B63670BF61FAACE
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/V6zFkntBMwV1rBU2SZyHVhOi18g.roa
Signing time: Tue 03 Jan 2023 14:22:41 +0000
ROA not before: Tue 03 Jan 2023 14:22:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202864
IP address blocks: 46.16.197.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:78:03:52:87:45:7c:00:61:3b:63:67:0b:f6:1f:aa:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Jan 3 14:22:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57acc5927b41330575ac1536499c875613a2d7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:37:1e:9b:77:a6:90:06:02:cb:f9:82:6f:89:
69:c3:8c:d3:d6:a5:e3:61:36:fe:f5:68:c0:ba:f9:
bf:f0:7f:d7:60:ca:ea:45:06:96:15:a3:2d:62:da:
d1:ba:9f:05:1c:46:df:ee:88:37:0d:70:5b:8f:2d:
eb:a3:76:68:38:cf:05:d1:8a:59:5c:f7:5d:65:40:
e0:fb:ec:23:40:31:50:f7:83:56:14:98:cf:47:89:
30:c9:b6:bc:0f:b7:be:fb:be:ee:63:41:1f:1f:97:
4f:2e:67:aa:30:67:e9:bc:c9:72:33:d7:74:09:29:
65:c3:13:cb:16:4b:d6:a4:7a:64:b0:77:af:34:c1:
84:cc:f3:a9:65:11:25:f7:cb:a9:15:c3:0c:44:49:
1b:96:1b:f0:7a:eb:43:56:0a:4a:6c:e7:2b:0e:41:
01:6b:06:db:23:b5:48:4b:bf:ec:c7:14:8d:7a:d0:
35:be:e5:d0:4a:5e:b3:d7:2f:65:4c:77:a6:0d:65:
e0:5e:45:a1:48:73:1c:a3:b8:a5:75:be:cb:f9:a0:
89:09:5a:77:3a:b9:d0:d3:ad:60:29:57:73:4c:7a:
60:b5:46:05:1b:52:14:5d:94:e9:3c:13:d2:74:bf:
07:00:cd:89:b2:f2:6b:46:15:0d:95:ea:9c:d0:39:
4f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AC:C5:92:7B:41:33:05:75:AC:15:36:49:9C:87:56:13:A2:D7:C8
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/V6zFkntBMwV1rBU2SZyHVhOi18g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.197.0/24
Signature Algorithm: sha256WithRSAEncryption
86:23:d4:07:2c:91:26:29:5b:57:68:31:0c:31:d3:0e:48:37:
38:6c:57:2d:34:c4:c9:f1:f6:f2:76:9a:e1:94:5c:55:54:3c:
c0:d0:27:56:bc:d2:7a:67:d8:0c:d3:0e:c5:fa:4a:86:d4:06:
65:83:e7:2c:1a:0f:bb:39:43:04:ad:b1:5f:24:90:53:2a:2e:
ac:dd:28:b1:0d:12:73:53:bd:3a:0c:43:1c:6e:b9:58:b2:4c:
da:79:a2:97:64:1f:bf:bd:23:bc:e4:5c:64:f6:14:cd:87:16:
a7:b5:5c:89:8c:66:1e:70:64:a9:7a:f3:7c:6a:d2:8a:4c:63:
a6:c9:1e:ac:f0:29:86:3b:30:7a:fb:f9:99:92:20:ac:fa:12:
b5:52:2f:78:8b:0e:cc:53:d0:4b:1b:94:c1:80:8c:66:5b:51:
27:82:ed:84:09:4d:ee:91:26:38:f2:8d:ea:24:b6:43:56:ab:
e8:46:71:65:be:37:10:85:35:15:f5:12:e3:bc:b3:e9:3a:8d:
e3:08:e7:a3:6c:1f:45:cd:07:0f:fe:41:98:e1:a3:29:1b:cd:
63:89:44:28:ad:a1:01:e4:a6:7d:ee:ea:2f:ae:fa:61:2d:b7:
38:69:ae:9a:3e:26:74:85:c3:eb:11:6d:14:17:52:99:4d:b7:
cf:08:6c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:29 2024 by rpki-client on console-fra.rpki-client.org