Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/46VW3Eanw5M7VUgmb1RN88ecCbU.roa
File: 46VW3Eanw5M7VUgmb1RN88ecCbU.roa (raw, json)
Hash identifier: zcfIYqNfDzMC+dj/mKr21Q1hl1SuuL4PzwQQu4vyMuk=
Subject key identifier: E3:A5:56:DC:46:A7:C3:93:3B:55:48:26:6F:54:4D:F3:C7:9C:09:B5
Certificate issuer: /CN=1b6828113bba3423d15731964fe57b5f252bfde6
Certificate serial: 01856F799500B529F34A00D9AB58826D44E9
Authority key identifier: 1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/46VW3Eanw5M7VUgmb1RN88ecCbU.roa
Signing time: Sun 01 Jan 2023 22:35:17 +0000
ROA not before: Sun 01 Jan 2023 22:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41294
IP address blocks: 194.176.104.0/24 maxlen: 24
193.134.112.0/22 maxlen: 22
2001:67c:90c::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:95:00:b5:29:f3:4a:00:d9:ab:58:82:6d:44:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6828113bba3423d15731964fe57b5f252bfde6
Validity
Not Before: Jan 1 22:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3a556dc46a7c3933b5548266f544df3c79c09b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ac:69:a3:d6:0a:15:ee:12:94:cb:56:fd:32:
f6:20:bf:ed:ea:8d:93:57:bd:83:de:fe:0a:d9:0c:
5e:a0:db:f4:6a:fb:d3:ad:0c:ba:e5:8e:81:ca:01:
34:40:09:73:f3:b2:0e:2f:1b:f7:fc:9e:8e:89:b9:
cd:a5:0b:15:8b:f4:36:b4:18:5d:de:fe:d6:d9:4c:
6b:33:69:cf:f8:a3:c6:fc:b3:84:12:33:8b:a2:1c:
d0:98:9e:e9:67:c2:61:0d:dd:a9:0f:95:2c:e3:0e:
dd:b5:99:d3:2b:47:68:e1:37:bb:c9:23:28:5d:c6:
e6:39:72:a4:9e:ce:b7:a9:40:3f:2f:44:16:b6:b0:
3e:dc:56:dc:00:9d:43:fc:3b:c3:b6:eb:60:aa:1d:
3f:31:fe:96:49:7a:b6:39:74:25:d9:7b:24:90:78:
33:d2:0b:d9:cd:28:9f:e8:2d:5e:0e:34:b2:63:29:
10:92:d5:13:32:02:cd:77:cd:2d:e8:38:ac:39:fa:
1f:82:5f:e6:a5:4f:3e:85:06:8a:9f:16:26:56:2b:
45:1b:1f:2f:fd:96:b6:9a:b2:1e:f2:b5:e6:1b:0a:
b3:e6:e6:26:46:47:6c:7a:99:21:50:07:66:17:13:
49:79:18:04:02:6e:2b:cb:c6:d8:f0:8e:f0:d3:de:
bf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A5:56:DC:46:A7:C3:93:3B:55:48:26:6F:54:4D:F3:C7:9C:09:B5
X509v3 Authority Key Identifier:
keyid:1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/46VW3Eanw5M7VUgmb1RN88ecCbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.112.0/22
194.176.104.0/24
IPv6:
2001:67c:90c::/48
Signature Algorithm: sha256WithRSAEncryption
2a:f5:46:8c:3c:25:5d:62:66:fc:46:89:93:8e:e0:97:e6:0a:
0a:93:46:28:bf:47:ce:2c:40:9e:8a:a3:13:a2:a4:b3:3c:9d:
99:e8:81:a8:40:f1:79:7b:cf:17:31:6c:56:b8:e0:fc:9d:fe:
35:f0:6b:78:d7:2b:b0:ca:5c:43:cc:8a:5d:5e:8d:b5:9b:a5:
08:b3:33:bc:1a:65:04:81:aa:74:80:9f:ed:88:2f:75:c1:13:
bb:6b:7a:74:24:b0:d1:4c:17:fd:f0:8f:f2:1e:85:6e:1c:fd:
25:0d:ff:61:9c:a0:35:52:7d:9e:58:b2:75:3e:71:80:63:b6:
2f:dc:aa:f7:f2:c8:ed:64:05:d6:b7:79:e1:7f:59:8c:6a:5f:
58:d4:da:60:e6:ed:85:f8:8e:29:ed:09:75:49:57:47:da:08:
f9:3c:05:98:9d:e4:9b:a1:47:55:98:50:60:bc:00:16:56:00:
4c:38:5a:34:32:e0:06:47:26:f6:b8:ac:1f:52:b7:ef:9b:16:
fe:ef:09:e3:25:52:89:29:87:98:a4:ff:8a:75:09:44:bb:cf:
c3:65:f3:f2:73:6d:5f:a3:5c:39:63:4a:83:4a:8f:b8:b9:ee:
8a:a6:f7:28:2f:7f:2a:af:3d:d0:93:87:01:39:1c:b1:01:8b:
f1:ca:e0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:26:58 2024 by rpki-client on console-fra.rpki-client.org