Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/RpG9_dm1SuhQKvOS-8qfgr9oPY4.roa
File: RpG9_dm1SuhQKvOS-8qfgr9oPY4.roa (raw, json)
Hash identifier: t8PIwXpZVaAyD5EPXr/cK9OMF1ZNAxco1k8oskxgoZ4=
Subject key identifier: 46:91:BD:FD:D9:B5:4A:E8:50:2A:F3:92:FB:CA:9F:82:BF:68:3D:8E
Certificate issuer: /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial: 018BAEF8B72455E1338225734879C7D2985A
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/RpG9_dm1SuhQKvOS-8qfgr9oPY4.roa
Signing time: Wed 08 Nov 2023 12:46:57 +0000
ROA not before: Wed 08 Nov 2023 12:46:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 46.17.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Nov 2023 13:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ae:f8:b7:24:55:e1:33:82:25:73:48:79:c7:d2:98:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
Validity
Not Before: Nov 8 12:46:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4691bdfdd9b54ae8502af392fbca9f82bf683d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bc:cb:34:d4:d0:fa:35:e1:a3:5d:b3:c3:2a:
da:97:ac:a8:d8:3d:b3:12:0a:11:be:0a:28:37:61:
bd:09:b1:65:11:b1:fe:57:18:e3:5f:f2:ce:5f:8d:
bf:85:04:62:3c:9b:0d:3e:c7:75:3a:31:15:a5:f7:
4a:5c:78:94:9c:6c:82:8b:e6:ce:fb:dc:a9:50:20:
b9:bd:d3:87:cc:14:10:b1:f7:a7:d1:f8:88:f4:a6:
0e:bf:db:5e:26:8b:24:6f:64:b5:7a:4a:d3:7d:b3:
ee:48:bc:aa:d4:9d:a8:1e:5c:03:8e:7d:86:c8:d6:
b3:a9:22:0c:55:0f:3d:81:fa:50:74:c7:40:df:fc:
2d:04:ed:49:da:d8:c5:5f:0e:8b:ef:ef:47:5a:ce:
86:b9:00:df:71:fc:21:ad:46:06:86:0b:e0:d0:d9:
29:30:ac:13:a6:97:7c:fc:5d:84:49:09:07:d6:bc:
9d:6e:23:0b:98:16:69:87:2c:c3:54:3f:d4:e8:ec:
41:65:10:7e:47:14:1b:56:0f:df:df:c8:bc:a8:76:
f6:d9:0c:e6:cb:cf:ac:cd:a1:24:2a:58:86:39:97:
67:0d:69:41:2a:3a:32:ab:74:cb:0d:2e:68:90:82:
a6:e0:c9:14:81:49:37:56:84:95:0e:78:6f:c8:fa:
21:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:91:BD:FD:D9:B5:4A:E8:50:2A:F3:92:FB:CA:9F:82:BF:68:3D:8E
X509v3 Authority Key Identifier:
keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/RpG9_dm1SuhQKvOS-8qfgr9oPY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.73.0/24
Signature Algorithm: sha256WithRSAEncryption
20:a9:38:ef:ae:c9:c5:4d:18:06:9d:91:c7:a2:6c:56:d8:6c:
f3:ec:9b:36:b0:ed:35:54:af:e2:3e:51:dd:61:e5:f4:a2:c1:
f0:f8:11:14:db:02:fe:db:7e:22:22:63:24:f9:75:55:2f:ad:
a4:10:8a:41:19:ea:3f:18:66:d4:37:15:87:d9:a3:bf:84:57:
4b:73:27:3a:57:20:fb:84:30:2b:b5:66:03:6c:7c:05:d0:89:
df:84:c5:16:fa:ce:8c:ad:2b:11:a7:48:4c:b0:21:5b:04:9c:
9c:19:ef:51:7f:f6:7c:b9:6b:fb:ab:0e:ab:e1:17:72:0e:fb:
97:f5:ed:a7:a3:2c:0c:e1:ab:29:de:a6:f6:4e:53:dd:71:2e:
1f:97:79:0c:4b:ca:e5:60:d3:5d:16:67:10:a5:ae:34:d3:43:
f0:08:79:7c:e4:3b:60:9a:0d:f4:56:e9:fc:ce:22:70:2d:d8:
f4:fc:3c:ff:69:d3:d2:a4:ab:c9:1e:da:b4:6a:b6:0a:e7:2f:
98:a7:cc:0c:a7:1c:7e:04:27:94:19:5e:21:06:6c:1c:e1:3b:
90:ab:bc:2a:fb:b2:c6:bb:01:a1:86:1c:6a:84:fd:e8:7c:73:
2a:c7:f2:d1:34:4b:48:d4:13:16:8c:be:aa:8e:41:90:e6:1b:
14:8e:1d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:53 2024 by rpki-client on console-fra.rpki-client.org