Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/sBb07QfYiG1VaSP41KI3MNTszyM.roa
File: sBb07QfYiG1VaSP41KI3MNTszyM.roa (raw, json)
Hash identifier: rtnWuaXi4ZvTgn0F/47s0I+dVrzNHNiyIlpkwjvDj+4=
Subject key identifier: B0:16:F4:ED:07:D8:88:6D:55:69:23:F8:D4:A2:37:30:D4:EC:CF:23
Certificate issuer: /CN=311867bba7eeccf2b04c122ab8ec2cf1e72fc5ea
Certificate serial: 018570303068A296600A98F0E12C590E92C1
Authority key identifier: 31:18:67:BB:A7:EE:CC:F2:B0:4C:12:2A:B8:EC:2C:F1:E7:2F:C5:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRhnu6fuzPKwTBIquOws8ecvxeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/sBb07QfYiG1VaSP41KI3MNTszyM.roa
Signing time: Mon 02 Jan 2023 01:54:44 +0000
ROA not before: Mon 02 Jan 2023 01:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39591
IP address blocks: 46.17.12.0/23 maxlen: 24
46.17.8.0/22 maxlen: 24
2a02:2870::/33 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:30:68:a2:96:60:0a:98:f0:e1:2c:59:0e:92:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311867bba7eeccf2b04c122ab8ec2cf1e72fc5ea
Validity
Not Before: Jan 2 01:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b016f4ed07d8886d556923f8d4a23730d4eccf23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:db:82:74:58:41:4e:95:16:90:32:82:78:bb:
b8:4b:35:14:f8:29:92:98:15:28:c5:30:fc:f6:af:
2f:e1:8e:0c:47:66:d7:c9:35:5a:d3:6b:21:bd:77:
91:26:e0:9d:a2:f4:f5:48:9c:33:4a:b5:1b:90:bb:
8f:20:3b:da:23:de:e1:74:e6:dc:bc:79:48:f2:95:
bb:e9:f1:2e:2f:75:86:e5:5d:85:e2:cf:fb:a3:81:
f0:48:90:8f:fc:9a:89:9f:9e:5f:ce:dd:89:91:3c:
74:f6:48:2b:72:4e:18:11:bb:95:61:1b:ea:2a:38:
47:d9:30:e1:1e:85:a4:01:55:34:04:ab:b6:41:2c:
f5:27:54:e8:04:6a:40:ef:b1:af:dd:cb:88:31:e1:
99:a3:3d:e4:39:b3:a7:ed:c1:99:5d:c4:64:35:07:
6f:17:f1:a8:80:dd:bf:1b:35:a8:8c:f7:4b:62:2e:
18:45:c9:80:ae:40:0b:8f:53:74:c2:d8:d6:1b:b2:
17:6c:bc:d5:27:2f:e2:0d:d8:6b:d2:0d:42:de:0c:
d2:80:b7:2d:42:05:62:27:16:59:24:91:50:2f:91:
af:7c:ea:61:b8:ad:08:b5:4f:82:3c:2f:45:d9:cd:
f4:cb:96:38:75:18:25:60:a0:cd:52:59:48:83:a3:
a7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:16:F4:ED:07:D8:88:6D:55:69:23:F8:D4:A2:37:30:D4:EC:CF:23
X509v3 Authority Key Identifier:
keyid:31:18:67:BB:A7:EE:CC:F2:B0:4C:12:2A:B8:EC:2C:F1:E7:2F:C5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRhnu6fuzPKwTBIquOws8ecvxeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/sBb07QfYiG1VaSP41KI3MNTszyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fe3d1a-ec07-4033-b40c-ca24361e7e4d/1/MRhnu6fuzPKwTBIquOws8ecvxeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.8.0-46.17.13.255
IPv6:
2a02:2870::/33
Signature Algorithm: sha256WithRSAEncryption
93:64:3b:d8:9a:f1:e7:8e:b7:55:35:03:71:6d:0f:70:41:c6:
e0:fb:49:0c:de:02:cc:d2:31:12:9b:f5:db:61:7a:96:ee:e8:
63:44:fa:e6:b1:ac:bc:a6:11:b6:67:5c:bb:6c:21:0b:e2:3a:
26:95:48:6e:32:6b:e1:33:c8:20:61:74:a5:52:4d:35:35:ec:
02:6c:da:0f:92:1a:36:93:c3:3b:7f:f4:7a:f5:fd:f2:cc:ff:
2c:7c:89:56:e6:d3:78:41:d2:67:db:3c:9e:ad:cd:63:c6:f1:
40:30:f2:d9:79:83:c4:72:e5:bb:b8:d0:08:3e:d8:6e:e2:f8:
7d:40:e0:97:fe:e6:1c:0f:d5:84:63:cc:92:b6:09:50:83:9a:
b4:4f:76:fe:21:f4:ba:93:3d:8c:7f:90:93:5c:da:99:d2:d7:
9d:74:47:94:76:ca:9a:18:7e:41:b6:db:02:4c:de:53:6a:bd:
9e:f5:46:0d:fd:46:f8:10:45:6b:1f:23:03:72:5d:37:68:8e:
a0:49:e0:d7:4d:8f:ba:4b:fe:af:00:48:19:f3:13:84:75:76:
1a:91:40:e9:39:f5:2d:30:9f:50:fa:74:41:da:46:5f:ca:ff:
73:66:f0:65:24:19:c7:9b:14:68:94:73:2c:74:d3:db:7f:5e:
44:d6:8c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:06 2024 by rpki-client on console-ams.rpki-client.org