Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/06flrevorkBgBmFONJPXM5whFTk.roa
File: 06flrevorkBgBmFONJPXM5whFTk.roa (raw, json)
Hash identifier: 9vxo0pBu2sLB1jgmKh0DkB32vC60/kVLQunFwL2hafU=
Subject key identifier: D3:A7:E5:AD:EB:E8:AE:40:60:06:61:4E:34:93:D7:33:9C:21:15:39
Certificate issuer: /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial: 018BFB51C4449858F8374FD41707E4781BFD
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/06flrevorkBgBmFONJPXM5whFTk.roa
Signing time: Thu 23 Nov 2023 08:35:21 +0000
ROA not before: Thu 23 Nov 2023 08:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 46.17.72.0/21 maxlen: 24
46.17.73.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fb:51:c4:44:98:58:f8:37:4f:d4:17:07:e4:78:1b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
Validity
Not Before: Nov 23 08:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3a7e5adebe8ae406006614e3493d7339c211539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:34:4d:44:ce:2c:70:5d:96:52:63:63:ce:
57:cb:4c:52:d7:ee:9c:cc:40:84:90:65:ce:19:52:
ab:b3:7e:10:29:41:9c:0e:d0:01:6c:13:0c:23:97:
37:4c:7e:f2:36:33:67:97:22:f0:ba:0b:e7:0d:16:
14:4c:97:a7:94:e1:91:89:89:0b:d0:cd:48:46:1f:
07:a9:42:a3:94:e3:5f:16:73:41:50:92:10:c5:d5:
2e:2a:db:77:b7:9e:d7:de:02:d1:a3:ed:ea:01:a7:
0b:42:19:e2:85:3c:10:e2:f7:b8:2f:f0:14:c7:96:
53:e9:6f:b4:3b:e0:8a:aa:af:89:f1:ce:24:a8:1a:
ac:45:6a:9c:04:5c:25:3b:66:44:a1:0f:87:2e:bf:
3c:c3:d9:5d:bf:2d:e9:91:70:e5:fe:f5:6d:3e:4b:
9d:04:d1:41:09:49:f4:1f:ce:6f:8b:00:09:9e:47:
2c:5b:0d:69:aa:c5:5e:c6:35:da:82:26:24:74:ef:
73:07:c5:2b:16:0a:e7:6a:a3:2d:ed:5d:04:77:8f:
9d:78:2d:f2:6c:0d:08:af:f2:cc:07:e2:34:b9:cb:
ee:35:b5:a4:3a:e5:6a:bd:12:4c:77:fb:a9:06:a9:
6b:fa:98:f0:04:04:85:b8:d2:ff:bb:25:d1:d7:b4:
3f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A7:E5:AD:EB:E8:AE:40:60:06:61:4E:34:93:D7:33:9C:21:15:39
X509v3 Authority Key Identifier:
keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/06flrevorkBgBmFONJPXM5whFTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.72.0/21
Signature Algorithm: sha256WithRSAEncryption
18:25:2f:10:2a:1a:26:b5:14:c1:71:65:cb:ce:be:98:c2:7c:
9a:d4:bc:43:0f:53:a1:d6:de:c5:5b:29:e8:64:b4:09:29:53:
58:8c:3f:db:4e:fd:b2:b7:30:33:6d:d2:f6:0d:45:16:c7:90:
15:21:d8:16:dd:c0:7b:e4:7a:47:8b:6a:c4:0b:e8:39:16:4f:
79:12:92:da:c1:d1:45:82:c1:d8:c7:1b:22:94:ad:eb:d9:20:
f4:25:3e:ed:3e:24:8b:52:02:57:5a:92:60:3b:30:32:b2:e5:
56:bb:cf:c3:ac:34:14:41:ff:55:c0:1f:a3:56:20:a6:02:31:
db:c5:77:61:f7:25:8f:69:c4:ad:09:25:f5:46:16:4f:83:9f:
5a:a2:75:d8:8a:34:da:03:93:f2:b1:c6:16:12:4b:eb:4b:a9:
2e:4e:7f:e2:e0:2b:46:8d:fc:06:92:5a:c2:f7:75:06:ae:e0:
c6:c0:52:e5:90:ea:45:f4:27:98:ba:43:27:29:05:92:a7:34:
d3:95:de:04:db:50:e2:c6:03:aa:4c:74:5f:b4:8c:b9:ab:e3:
a0:34:99:36:e1:30:fa:21:ff:ea:c7:75:05:1b:5a:91:e8:0e:
b1:de:84:7f:94:cd:79:8e:db:a7:db:97:e4:3b:b8:30:25:53:
b5:bb:1d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:53 2024 by rpki-client on console-ams.rpki-client.org