Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/pg5SqvFItcleEYcJzu8EIPasz_w.roa
File: pg5SqvFItcleEYcJzu8EIPasz_w.roa (raw, json)
Hash identifier: XRN8VphBzuiVAT0YkC7b5klZeBWE6edyuKnE3kmrCKo=
Subject key identifier: A6:0E:52:AA:F1:48:B5:C9:5E:11:87:09:CE:EF:04:20:F6:AC:CF:FC
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 0185780351F5D208981AC162E5CAAD485DDA
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/pg5SqvFItcleEYcJzu8EIPasz_w.roa
Signing time: Tue 03 Jan 2023 14:22:41 +0000
ROA not before: Tue 03 Jan 2023 14:22:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59746
IP address blocks: 46.16.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:78:03:51:f5:d2:08:98:1a:c1:62:e5:ca:ad:48:5d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Jan 3 14:22:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a60e52aaf148b5c95e118709ceef0420f6accffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:81:75:a4:ff:73:5b:65:b6:84:1e:63:ea:e2:
73:86:6c:eb:37:21:3b:75:d6:a8:c1:8f:ef:99:13:
99:53:bc:d9:00:0d:65:0e:2f:7d:47:01:17:e7:2b:
7a:cc:f1:0b:66:00:8a:75:50:8d:68:fd:c9:7a:49:
ac:50:a2:48:e7:43:58:81:90:5c:98:08:ac:d8:34:
95:b2:79:ce:94:88:a6:cb:06:db:45:bb:6a:a0:e0:
3e:00:eb:0f:b7:ed:fc:af:e9:e1:5b:97:a3:a5:56:
58:f5:5d:5d:1c:75:29:3f:80:98:d8:79:9c:26:b8:
19:c0:b1:1f:8f:3b:6a:b6:37:f5:ea:64:65:46:02:
dc:e0:13:7d:3b:0c:14:56:3c:51:11:ad:89:b7:da:
2d:52:89:4e:92:72:e3:d2:91:45:3e:24:bb:08:ab:
9e:46:1e:ea:7b:57:b0:a0:12:ca:30:03:c2:fa:bf:
cc:31:7e:84:e8:de:ad:15:bd:49:6f:90:19:08:14:
ed:25:9a:37:9a:93:dd:88:f8:4f:e5:e1:9e:8b:06:
ce:9b:64:58:0d:37:02:45:56:c8:3e:19:37:fa:25:
d4:00:ea:41:ae:e1:3c:0b:9f:31:dd:41:16:b0:93:
7f:95:1f:e6:b3:6b:59:10:f4:42:7a:9f:0f:36:64:
0b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0E:52:AA:F1:48:B5:C9:5E:11:87:09:CE:EF:04:20:F6:AC:CF:FC
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/pg5SqvFItcleEYcJzu8EIPasz_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.196.0/24
Signature Algorithm: sha256WithRSAEncryption
96:c5:f2:9b:f4:a8:1c:59:48:aa:ce:53:5e:fe:b1:3d:c3:1f:
a8:02:4e:7c:eb:af:0c:d8:33:34:6b:f0:c9:fd:ea:6c:d9:77:
bb:f1:be:68:27:89:54:c3:d7:18:11:dd:11:14:c7:74:29:d2:
24:14:e3:d0:10:06:15:83:7f:53:a4:4e:0e:aa:57:84:5a:71:
ba:4e:9d:3a:19:67:e6:95:69:71:a9:8d:c3:ee:7e:d6:16:3b:
61:25:dc:df:f1:5b:a7:31:8b:e6:44:d1:b5:b2:de:9b:ce:1b:
ce:9d:7a:7c:72:36:17:f7:7e:71:6f:cd:fe:88:d9:9a:1e:82:
86:ee:66:20:f6:dc:83:19:1d:83:97:16:ff:84:51:65:27:39:
18:9a:ff:10:c6:b9:27:79:8a:a4:b0:90:d3:c9:48:62:6f:aa:
ab:f9:7b:df:0d:bf:f0:3e:9a:70:aa:d8:11:f1:a5:49:f2:35:
d0:2c:b8:48:49:f2:8b:13:d4:3a:f8:ac:68:42:bc:5e:0a:31:
79:2b:03:40:d9:93:7a:c4:57:d9:d7:e6:85:71:8c:45:27:2f:
53:7b:28:ff:39:83:aa:e3:9c:15:15:71:f2:fa:c9:f9:32:7e:
23:13:0c:e6:03:57:55:5e:46:f6:59:f2:1a:7d:5e:67:08:6e:
9d:5e:a5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:38 2024 by rpki-client on console-ams.rpki-client.org