Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/rsSkP2INeUyZXzkbQ0V_3BZ6JP8.roa
File: rsSkP2INeUyZXzkbQ0V_3BZ6JP8.roa (raw, json)
Hash identifier: 3bMo3sFg+nuwFxdSUEIPM0jyUH+3uJ8rk+eylxb+LTc=
Subject key identifier: AE:C4:A4:3F:62:0D:79:4C:99:5F:39:1B:43:45:7F:DC:16:7A:24:FF
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 01856C01415B9F1DC7100E862EBAD3ECF1F5
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/rsSkP2INeUyZXzkbQ0V_3BZ6JP8.roa
Signing time: Sun 01 Jan 2023 06:24:59 +0000
ROA not before: Sun 01 Jan 2023 06:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208498
IP address blocks: 46.253.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:41:5b:9f:1d:c7:10:0e:86:2e:ba:d3:ec:f1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Jan 1 06:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aec4a43f620d794c995f391b43457fdc167a24ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:25:e4:4f:fd:96:4f:f0:fb:65:85:0c:c0:
dd:6a:aa:17:cf:05:d3:c9:53:64:60:e4:66:55:e7:
89:89:4d:ee:6a:51:eb:a3:e0:23:e1:4a:e5:f3:e4:
7b:5d:d6:98:ea:64:ac:af:f7:e6:ce:ef:8d:ed:c4:
0f:50:48:69:07:90:28:2c:62:86:66:6b:4c:e5:58:
2b:43:93:f3:f6:6c:71:f1:ff:da:51:86:fc:e1:9a:
3b:35:e8:60:06:53:29:8b:ee:db:31:74:11:50:55:
c1:b5:2e:3e:bc:17:11:50:9c:1e:70:12:c1:98:06:
d9:a5:47:6e:de:61:48:c6:6e:c5:35:b8:13:f4:d9:
bd:c4:4c:6c:80:c6:d9:c0:bd:c5:f0:28:10:3a:25:
b4:76:d7:97:56:75:7e:da:9d:97:7f:1f:e0:70:3a:
af:01:f3:c9:05:bd:ab:73:72:cf:e0:80:3b:0b:93:
59:25:dc:69:32:88:18:69:a3:cf:0d:f2:03:2a:98:
3b:01:04:14:ec:5b:46:85:4d:af:fb:e4:8b:bf:7b:
61:57:bd:eb:07:12:26:03:5e:a6:63:78:00:80:6e:
48:42:99:5d:e3:6c:8a:6c:63:d0:51:a3:61:d8:fb:
a9:97:76:ff:7b:f1:04:82:7a:af:01:c2:0f:cb:93:
d0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C4:A4:3F:62:0D:79:4C:99:5F:39:1B:43:45:7F:DC:16:7A:24:FF
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/rsSkP2INeUyZXzkbQ0V_3BZ6JP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.119.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:f7:ac:a1:c1:b2:8f:ba:05:80:a5:79:96:ea:d9:1a:57:7a:
0e:39:eb:01:f6:66:24:86:c4:6c:cf:02:f5:1f:1a:d7:b1:0e:
69:92:4a:50:70:1b:c7:ad:48:69:89:23:ad:fc:e0:9d:e3:14:
33:52:e9:6b:56:33:4d:c7:0d:f6:3d:10:42:04:6a:08:f5:1a:
d5:de:60:07:88:7f:f2:e9:66:b1:08:a1:3e:95:29:74:64:b7:
82:68:0f:84:5a:78:48:92:48:17:6f:d3:8a:cf:1d:76:7c:54:
ce:07:33:d8:ab:74:be:0d:d5:1a:d1:ef:11:5c:85:2c:a0:b9:
5b:17:cc:45:e8:24:51:2a:f4:7e:02:b3:17:72:3d:bd:01:32:
0b:53:79:8f:44:af:a6:60:65:2a:1a:8b:56:3d:94:11:65:46:
a9:0f:da:5d:0d:d9:04:67:67:16:0e:36:c5:60:b8:73:65:0e:
0a:5b:25:9e:35:bb:5c:be:b4:62:39:c8:98:bf:0f:01:9e:f3:
aa:32:92:22:80:5b:67:90:40:71:13:75:03:d3:00:fc:e7:e1:
44:bd:ac:08:6a:2b:ca:ea:27:ec:06:0a:58:dd:21:c3:e8:6f:
51:e0:42:ba:e8:a0:35:78:f7:84:ee:c6:b4:a5:26:e0:34:a0:
f4:12:2c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:12 2023 by rpki-client on console-fra.rpki-client.org