Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/SyrlqulaoLDsFbyMBtk7_Nd7na0.roa
File: SyrlqulaoLDsFbyMBtk7_Nd7na0.roa (raw, json)
Hash identifier: UqjKZVFIxm67etSGc9SpUvWQz+rYQEUjLNHf3XNRnJc=
Subject key identifier: 4B:2A:E5:AA:E9:5A:A0:B0:EC:15:BC:8C:06:D9:3B:FC:D7:7B:9D:AD
Certificate issuer: /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial: 018BAEF6E28E51641133AE39266886F4595E
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/SyrlqulaoLDsFbyMBtk7_Nd7na0.roa
Signing time: Wed 08 Nov 2023 12:44:57 +0000
ROA not before: Wed 08 Nov 2023 12:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51910
IP address blocks: 46.17.77.0/24 maxlen: 24
46.17.72.0/21 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ae:f6:e2:8e:51:64:11:33:ae:39:26:68:86:f4:59:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
Validity
Not Before: Nov 8 12:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b2ae5aae95aa0b0ec15bc8c06d93bfcd77b9dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a9:2b:07:9a:5b:a9:44:ff:ef:94:f5:88:7f:
c8:1f:83:c6:8d:66:05:1e:83:66:eb:9e:6c:d4:f6:
17:de:83:a5:cf:1b:27:41:ac:88:ba:1b:b1:99:12:
05:4d:ab:51:81:42:41:85:03:82:da:bd:ed:97:f5:
1c:61:c1:ad:3c:74:f2:1d:67:a8:a6:14:77:da:12:
bd:70:d9:65:7a:98:d5:11:9a:2d:b1:de:82:bb:a7:
38:19:b6:b2:dd:2b:bd:0c:60:fd:40:17:25:3a:a1:
4f:65:cd:0d:1e:f4:a7:f0:9f:07:d1:b2:bf:e5:73:
6d:86:9b:9e:a0:9f:40:fa:b5:4d:f9:e3:19:20:55:
c6:ab:bd:b0:d6:5c:bd:a0:71:e3:e3:6f:bc:57:12:
45:03:a4:17:62:1e:99:6b:ef:bf:df:10:5a:88:a3:
7b:28:6e:d7:fe:1e:47:11:46:ae:6e:42:1b:98:67:
95:dc:66:25:97:d2:7f:12:0b:f6:35:d0:44:f0:f6:
ee:38:8d:ab:34:66:02:ee:f4:4d:51:72:4a:f3:a0:
37:2e:dc:db:a6:6e:57:7e:b6:1a:24:ab:8b:28:d7:
88:7f:97:1e:81:c1:fe:c8:ab:18:1d:25:a4:56:0f:
b5:69:4e:f8:f4:e2:df:8b:42:a7:05:44:46:72:be:
f9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2A:E5:AA:E9:5A:A0:B0:EC:15:BC:8C:06:D9:3B:FC:D7:7B:9D:AD
X509v3 Authority Key Identifier:
keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/SyrlqulaoLDsFbyMBtk7_Nd7na0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.72.0/21
Signature Algorithm: sha256WithRSAEncryption
78:22:94:6e:ed:81:c8:e3:f5:53:65:f7:15:3b:e9:38:6d:85:
2e:dc:b2:47:28:81:a5:41:f4:f5:12:d3:bc:62:92:0e:cc:e6:
27:2e:0b:35:14:06:05:15:43:ba:d1:e1:65:20:21:1e:f5:00:
3b:93:7d:ff:8f:64:09:70:dd:0d:43:be:40:ed:02:d5:79:27:
64:be:88:bb:5a:31:f8:37:cd:11:5a:4c:00:95:04:e8:b7:bd:
ea:42:d3:1f:b5:04:b2:b2:46:2d:59:3f:0c:cd:83:ae:48:3b:
34:45:79:ac:4f:9c:73:bc:52:da:0a:7f:3a:a8:9c:f5:c0:be:
2f:3b:40:48:c6:a3:6e:9b:cb:be:24:91:3d:2a:35:ce:80:4f:
16:0f:cb:f5:31:9e:5c:87:80:a6:ef:14:f4:0f:3c:16:b1:e7:
63:06:35:6d:3b:6c:f9:29:78:12:eb:de:07:8e:67:49:c2:87:
4f:d0:8f:ff:b8:22:57:e4:52:ae:3c:d2:40:d8:83:5f:6d:db:
9f:9e:65:4b:34:49:9d:dd:8b:49:20:91:67:55:bf:14:46:02:
ca:7f:dd:d0:f2:90:d0:f7:bf:a5:64:6a:41:ce:1d:e9:eb:03:
34:9b:ec:3c:83:3e:b4:d6:af:2a:20:e0:4a:7c:20:f8:12:b0:
f1:ff:df:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:53 2024 by rpki-client on console-ams.rpki-client.org