Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/Ikr0prRRewHZe3JpNuyaCQV5au4.roa
File: Ikr0prRRewHZe3JpNuyaCQV5au4.roa (raw, json)
Hash identifier: xQTd2hZlWUY7l4Dxswq4vTFqjWsq9zeMabhCZzqmx8I=
Subject key identifier: 22:4A:F4:A6:B4:51:7B:01:D9:7B:72:69:36:EC:9A:09:05:79:6A:EE
Certificate issuer: /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Certificate serial: 0187E741D17732A525CDAB5C876AC205969E
Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/Ikr0prRRewHZe3JpNuyaCQV5au4.roa
Signing time: Thu 04 May 2023 14:54:23 +0000
ROA not before: Thu 04 May 2023 14:54:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51625
IP address blocks: 46.31.112.0/24 maxlen: 24
46.31.116.0/24 maxlen: 24
46.31.114.0/24 maxlen: 24
46.31.115.0/24 maxlen: 24
46.31.113.0/24 maxlen: 24
46.31.117.0/24 maxlen: 24
46.31.118.0/24 maxlen: 24
46.31.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e7:41:d1:77:32:a5:25:cd:ab:5c:87:6a:c2:05:96:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Validity
Not Before: May 4 14:54:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=224af4a6b4517b01d97b726936ec9a0905796aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:be:52:80:a9:7c:0c:2f:ad:32:f8:d8:1e:6a:
cd:9f:62:11:9a:e0:60:23:53:78:e6:37:04:7f:3f:
ec:1c:e3:77:bd:6b:06:66:c4:f8:21:94:ff:34:38:
92:b7:3d:76:8f:cd:e4:7b:67:70:bf:89:2a:6a:78:
e9:c2:3b:4a:c5:aa:a9:b7:99:ed:55:f0:4b:1b:f8:
b9:6b:40:63:b0:a8:fe:90:38:a3:b1:f5:0d:a7:f3:
17:de:ae:5c:94:61:8a:ca:cb:e3:9a:23:ca:f8:16:
56:3b:dc:16:49:a2:4b:2e:0f:94:ac:a5:2a:4d:99:
8f:ab:29:af:90:19:1a:a8:ba:30:e0:f3:7d:22:62:
f7:3d:96:cb:75:70:ff:c9:a4:18:e7:cd:bc:43:12:
a8:d3:b6:76:3b:bb:90:44:45:5c:23:eb:db:24:6d:
43:d0:84:03:06:ba:76:1c:56:d5:c7:f2:b0:53:d0:
54:2e:41:af:f9:9e:79:96:70:00:7f:f9:ef:3e:f2:
38:0e:4c:4b:ff:82:9c:38:f1:7c:ca:89:91:d8:e2:
ad:23:36:c3:91:60:e4:8d:06:2d:2b:71:fb:4c:a4:
ab:a5:f9:a1:82:ab:c7:8a:03:9e:39:95:03:3b:18:
fb:ed:68:8a:99:7b:c8:0d:d6:57:3d:5b:b1:6f:9c:
0e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4A:F4:A6:B4:51:7B:01:D9:7B:72:69:36:EC:9A:09:05:79:6A:EE
X509v3 Authority Key Identifier:
keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/Ikr0prRRewHZe3JpNuyaCQV5au4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.112.0/21
Signature Algorithm: sha256WithRSAEncryption
67:ad:f1:d8:b1:4a:cf:d3:f5:a8:31:87:ed:2b:9a:a9:ba:8e:
6c:31:a8:1d:2d:12:54:32:dd:e5:56:59:89:62:23:5a:d3:db:
46:b0:31:02:b3:b1:90:0b:01:1d:a8:f5:ff:00:71:3b:02:72:
ce:f8:9d:fa:33:f1:34:44:7a:d2:6f:9f:f7:2d:f8:18:b7:52:
6f:7f:74:aa:97:3c:da:6b:ca:ec:b4:64:38:d9:1c:53:10:c1:
4e:fa:76:eb:fa:4d:dd:0d:a8:c6:05:6d:f7:42:27:98:ea:c0:
89:5f:17:62:a2:87:26:88:99:e8:8b:20:59:38:00:7c:23:dd:
10:e2:24:c5:a3:10:ba:27:1b:11:cb:32:34:6a:ff:15:2d:4b:
04:f1:7d:3b:ec:96:88:a6:3f:fc:c3:23:70:da:87:0f:93:5c:
d2:15:0c:68:fa:a0:92:95:bf:3e:c8:61:ae:2c:1b:74:5d:7a:
06:37:57:00:ee:af:24:50:71:12:05:a0:9f:9b:e0:ba:fc:8e:
56:75:08:9e:05:6f:60:7d:f8:71:dd:3b:0b:e5:c2:02:f6:88:
52:29:b5:96:1c:15:48:37:58:f2:c9:53:93:7b:4c:b4:c5:ec:
d6:cc:d2:55:3c:57:40:20:7c:f2:d9:0f:44:3c:02:07:1e:89:
9e:75:ae:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 08:11:34 2023 by rpki-client on console-ams.rpki-client.org