Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/jaFK7OkufE-jJokMUhig6FFhmdo.roa
File: jaFK7OkufE-jJokMUhig6FFhmdo.roa (raw, json)
Hash identifier: K8hR3qq9LP7Pz9+WcvU9MfiIjcH+WU9Bgz+/3NNAOWA=
Subject key identifier: 8D:A1:4A:EC:E9:2E:7C:4F:A3:26:89:0C:52:18:A0:E8:51:61:99:DA
Certificate issuer: /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial: 018BAEF8B7C4E3AD6DB01ECD39EDCACC3593
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/jaFK7OkufE-jJokMUhig6FFhmdo.roa
Signing time: Wed 08 Nov 2023 12:46:57 +0000
ROA not before: Wed 08 Nov 2023 12:46:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 46.17.73.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ae:f8:b7:c4:e3:ad:6d:b0:1e:cd:39:ed:ca:cc:35:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
Validity
Not Before: Nov 8 12:46:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8da14aece92e7c4fa326890c5218a0e8516199da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ee:61:dc:e9:10:f3:b1:f6:a0:39:68:30:55:
94:f4:ea:d0:2f:4f:75:ef:36:c8:42:dc:1f:75:61:
e1:bb:32:c8:ed:e8:8c:59:ca:56:92:c8:7f:1a:23:
90:c7:48:71:0d:7b:50:2c:5d:d4:b0:fb:44:3f:fa:
40:e9:ba:ed:cd:d3:8f:80:d9:f2:90:18:04:27:0c:
88:91:a5:3f:b1:65:4c:ff:c7:9e:47:cf:ab:80:d6:
55:02:c8:ce:53:20:b6:cf:52:a9:01:e7:7d:82:a2:
91:01:57:dd:a3:39:a0:62:1a:b2:56:10:5d:e6:57:
4b:8a:99:8d:42:51:4a:4f:d0:ab:79:7c:7d:ff:a4:
b8:18:e5:48:77:82:01:66:be:14:a3:35:26:b6:d9:
52:59:6d:6c:ff:f1:64:b6:86:a7:9e:32:36:83:2c:
74:20:ca:36:22:95:c5:a7:46:e1:13:0d:26:a4:11:
dd:e4:8d:e5:d1:8b:a5:0a:da:6f:55:c1:f1:f5:9b:
af:d9:51:93:1c:ec:c0:5f:3d:73:12:5f:80:e3:e4:
11:8e:42:ab:33:75:ee:e0:b9:cd:be:c5:08:97:e6:
2e:2a:5d:b9:93:41:ca:4d:34:ed:26:2b:ab:5a:13:
36:14:60:10:b6:ac:26:60:f8:b1:5d:14:ae:64:f6:
43:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A1:4A:EC:E9:2E:7C:4F:A3:26:89:0C:52:18:A0:E8:51:61:99:DA
X509v3 Authority Key Identifier:
keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/jaFK7OkufE-jJokMUhig6FFhmdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.73.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:4d:2c:74:ef:5e:af:38:ac:5c:49:c6:6a:3c:ff:37:99:38:
d3:9b:15:16:0f:94:7f:9d:65:f5:d4:76:8b:30:83:af:b5:9d:
c3:fd:21:67:23:13:d4:7d:e9:c1:5e:5e:80:83:ab:ee:bd:b7:
fe:27:d7:9c:cd:e1:20:3d:be:95:ef:ca:3a:c2:46:a9:d8:d2:
4d:19:95:93:ea:97:3b:a8:66:78:c9:1b:12:27:77:7a:29:a7:
e3:7b:e0:b0:ef:cf:f2:6f:d9:a7:a8:4a:b7:0f:1e:6f:36:15:
ac:f4:ee:de:58:c2:d0:e2:7e:0a:77:21:ba:7e:28:4c:64:a6:
85:1e:88:b0:e0:07:41:b0:02:68:2f:12:b2:0d:bf:a1:06:41:
27:dc:43:8d:62:f2:35:94:c8:86:39:3b:6c:a7:8d:15:61:e7:
f6:fa:e1:f7:b9:b2:ab:f0:5c:a5:b1:8d:7a:38:07:d0:4d:01:
fb:47:6b:64:34:d0:43:d3:65:ee:63:15:ca:ac:e7:1b:16:a9:
df:cd:5c:f3:d8:ae:a2:99:14:e0:e7:c4:d1:a6:7d:f1:22:90:
b1:7a:d1:05:3c:e8:b8:b0:c8:e3:9a:1e:a9:6f:80:ed:8b:ec:
b8:ba:ca:7c:94:11:d2:10:2c:5a:ad:fe:9f:e1:ad:5f:5d:b6:
7c:e8:d0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 14:03:17 2023 by rpki-client on console-ams.rpki-client.org