Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/q-jMuJML9znYyDEcLwKNzbd-M0Y.roa
File: q-jMuJML9znYyDEcLwKNzbd-M0Y.roa (raw, json)
Hash identifier: 3LaBi8ylg/P/XYw9IYtRUZ3guer5pLw5adAyVO8pfMA=
Subject key identifier: AB:E8:CC:B8:93:0B:F7:39:D8:C8:31:1C:2F:02:8D:CD:B7:7E:33:46
Certificate issuer: /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Certificate serial: 0187E741D127B2F1B388626B2F48841FDAC1
Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/q-jMuJML9znYyDEcLwKNzbd-M0Y.roa
Signing time: Thu 04 May 2023 14:54:22 +0000
ROA not before: Thu 04 May 2023 14:54:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9121
IP address blocks: 46.31.112.0/24 maxlen: 24
46.31.117.0/24 maxlen: 24
46.31.118.0/24 maxlen: 24
46.31.113.0/24 maxlen: 24
46.31.114.0/24 maxlen: 24
46.31.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e7:41:d1:27:b2:f1:b3:88:62:6b:2f:48:84:1f:da:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Validity
Not Before: May 4 14:54:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abe8ccb8930bf739d8c8311c2f028dcdb77e3346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b2:4c:36:65:57:b8:a6:20:bd:4c:36:f6:bf:
29:99:ae:b8:00:fd:0c:e4:4f:4d:35:61:f1:bf:1c:
d1:1e:d0:f7:59:e0:dc:18:85:fc:31:9b:79:5f:0a:
b6:3d:26:7b:6c:9a:1d:91:06:ea:27:3a:34:3b:9b:
09:36:0f:ac:48:45:3a:1f:63:5f:65:ea:ad:6e:91:
56:33:33:0e:b5:e7:af:a1:7f:e4:9f:1e:f5:db:7b:
2a:dd:d0:9f:97:aa:1e:b1:af:c7:80:ac:bb:65:22:
68:24:99:e3:bc:71:fd:52:80:21:77:87:ef:53:31:
2c:fb:38:b4:1c:0e:a7:63:d0:33:44:75:56:8d:a3:
f3:72:e8:0a:7a:1f:0f:28:d0:47:bf:d0:0a:aa:f4:
cd:4f:69:24:50:ef:15:02:7e:18:34:65:6a:ab:88:
36:71:d2:66:dd:c3:ff:a3:6a:e7:be:18:45:a9:69:
a8:ee:3e:6d:54:a3:93:a0:b5:49:f3:a8:4b:5c:ee:
0a:32:bd:14:f0:5e:e3:02:bc:0a:97:8c:3d:78:c9:
87:e6:c5:b3:37:95:46:16:6c:8d:38:fa:de:e0:3a:
c0:60:12:28:10:2f:b5:c7:b1:15:05:ad:2b:ba:7d:
c5:b7:b5:5c:6a:dc:7f:46:7d:21:36:45:69:6f:cd:
47:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E8:CC:B8:93:0B:F7:39:D8:C8:31:1C:2F:02:8D:CD:B7:7E:33:46
X509v3 Authority Key Identifier:
keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/q-jMuJML9znYyDEcLwKNzbd-M0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.112.0-46.31.114.255
46.31.116.0-46.31.118.255
Signature Algorithm: sha256WithRSAEncryption
7f:f3:66:1e:d2:eb:98:69:8b:47:fe:65:c7:69:3b:8a:d1:2b:
3f:cf:37:15:8a:4e:6c:f3:9f:02:0d:c2:90:cb:5a:8d:73:35:
8d:64:87:50:34:d1:9f:46:2a:71:15:7b:65:25:0f:4a:f2:36:
77:ed:3b:48:14:04:2a:e8:fe:8f:eb:44:79:f9:6f:1a:a0:a9:
b5:66:27:8b:ba:52:86:fd:ca:82:31:a7:09:d8:c3:2c:aa:b6:
e5:4b:bb:25:b2:ae:c2:f8:9c:6e:7e:7f:69:9e:bc:41:77:21:
f1:ac:16:bd:98:5e:9b:c0:36:37:51:90:1b:72:33:5c:53:23:
12:3a:e8:38:cd:a4:3a:04:77:c7:c7:b5:6e:4e:30:47:bb:0b:
8a:97:4e:f0:8c:73:02:6c:c1:c7:31:9a:7a:e2:01:05:8c:29:
cb:44:90:78:7e:2a:bd:a1:28:4d:9a:64:97:02:1f:a3:08:90:
f1:e3:52:1c:2c:1d:75:1a:1c:e3:7e:d5:7f:89:3b:cc:c0:36:
ce:b3:3f:4a:39:be:e0:63:59:b3:1b:68:13:58:53:ec:c9:0f:
0e:9a:e6:2c:43:cb:48:d9:ed:00:50:58:e5:97:91:78:03:5f:
de:83:57:bd:05:fe:1d:28:07:94:d7:3d:d6:24:2e:f5:fc:9d:
09:9f:f4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:38 2024 by rpki-client on console-fra.rpki-client.org