Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/zMlF99tevrUqUfM3vtsGOFtCfIA.roa
File: zMlF99tevrUqUfM3vtsGOFtCfIA.roa (raw, json)
Hash identifier: a8/fLfBsRjLOtcCskGlEPiUzfl+KlpTmxSNtl8HWnlM=
Subject key identifier: CC:C9:45:F7:DB:5E:BE:B5:2A:51:F3:37:BE:DB:06:38:5B:42:7C:80
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4DE5330FD17516490B6311B29AC25
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/zMlF99tevrUqUfM3vtsGOFtCfIA.roa
Signing time: Sun 01 Jan 2023 19:35:22 +0000
ROA not before: Sun 01 Jan 2023 19:35:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 269729
IP address blocks: 46.29.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:de:53:30:fd:17:51:64:90:b6:31:1b:29:ac:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccc945f7db5ebeb52a51f337bedb06385b427c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:ca:2e:39:83:8d:15:bc:80:3f:e3:f0:03:
31:78:36:f4:0b:77:3f:10:11:59:03:a1:d0:f1:29:
aa:b6:4d:79:6d:e3:d8:96:f2:1b:e4:4d:cf:ee:dd:
e2:8d:b2:ce:96:ea:ed:1e:32:78:96:4d:34:c3:e9:
14:66:de:32:96:ae:50:64:e9:8a:74:0c:0e:9f:45:
58:b2:50:87:c4:b1:bd:99:dc:bf:18:8f:e3:fd:09:
fc:95:a7:44:53:7f:3b:27:d9:ba:f8:c6:16:61:01:
a2:df:4e:24:8e:85:e8:d6:7f:a1:8b:a3:80:24:03:
0a:b3:ef:0d:d9:c8:6a:de:08:c3:fa:90:ad:1f:19:
8f:21:e3:4b:49:32:35:cd:66:02:4a:14:3d:4b:20:
31:27:54:e1:c4:ed:0e:cb:8d:c8:cf:4b:e4:2a:88:
25:34:0b:a2:80:33:98:d4:38:4e:73:1f:d3:d1:1f:
20:12:ac:4a:d9:65:ad:6b:5b:f7:26:65:cf:ab:9f:
52:75:c1:2f:5e:33:8b:b8:29:d6:8e:60:18:9c:5c:
55:85:5c:0b:de:f7:11:14:c4:95:9b:1c:91:5d:19:
a8:b3:6b:48:b6:f8:a9:bf:f6:19:8f:7f:0c:79:87:
f3:24:b8:cc:60:e7:69:a7:c7:87:eb:ff:9c:b0:9b:
62:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C9:45:F7:DB:5E:BE:B5:2A:51:F3:37:BE:DB:06:38:5B:42:7C:80
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/zMlF99tevrUqUfM3vtsGOFtCfIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.30.0/24
Signature Algorithm: sha256WithRSAEncryption
57:1a:8a:92:d9:e4:42:b6:f8:64:b3:5c:1e:cb:da:31:30:57:
f4:41:f8:b2:65:5a:e8:ee:e8:a6:87:26:d7:f8:4e:8d:d3:59:
f2:92:a5:40:43:c8:8f:fd:49:c5:ce:a1:c5:00:26:fa:4b:a9:
76:d4:0e:ff:ea:25:98:b1:c4:3e:28:bc:6d:8d:8f:07:49:3d:
4f:45:57:e8:83:30:29:07:51:71:c6:85:a1:a1:7d:a0:a5:01:
2b:5e:58:41:ef:db:67:ff:19:88:a8:af:ed:f3:47:48:a0:61:
46:07:49:51:a1:db:cd:af:c2:16:e6:19:91:0e:78:22:c3:67:
a0:ad:96:d7:1f:c2:ea:ab:d1:e4:a8:31:5b:98:66:54:0d:f7:
c6:eb:af:4d:aa:a8:29:76:82:b9:01:e2:62:02:c7:20:bf:05:
16:c6:01:40:0d:ef:d8:92:0e:22:8b:98:91:29:d8:42:ed:f1:
ba:2e:f0:1e:10:f0:a8:a7:1c:c3:f2:5b:2b:85:a8:0c:35:63:
db:88:a3:90:f0:97:0c:8d:e6:23:1b:c4:db:38:cf:fb:4b:b8:
31:5d:d5:6e:60:9a:38:99:82:66:e2:80:00:e4:94:73:0e:a7:
1e:46:d0:86:c2:67:f6:7b:96:b8:34:07:53:f3:87:8a:b8:d0:
6f:8b:7a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:09 2024 by rpki-client on console-ams.rpki-client.org