Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/dt9T-QgQYQhwRNeVlxKqQ0m9G_I.roa
File: dt9T-QgQYQhwRNeVlxKqQ0m9G_I.roa (raw, json)
Hash identifier: XflsxXxQsB0kM4+E/QMJqMKeceWuwzEzX0H2hYgZieM=
Subject key identifier: 76:DF:53:F9:08:10:61:08:70:44:D7:95:97:12:AA:43:49:BD:1B:F2
Certificate issuer: /CN=51f866f32b47c69d478ad95354e257e51a236a57
Certificate serial: 018570674E70097AFF817BAE64BC94FD5533
Authority key identifier: 51:F8:66:F3:2B:47:C6:9D:47:8A:D9:53:54:E2:57:E5:1A:23:6A:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ufhm8ytHxp1HitlTVOJX5Rojalc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/dt9T-QgQYQhwRNeVlxKqQ0m9G_I.roa
Signing time: Mon 02 Jan 2023 02:54:56 +0000
ROA not before: Mon 02 Jan 2023 02:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60463
IP address blocks: 46.21.218.0/24 maxlen: 24
46.21.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:4e:70:09:7a:ff:81:7b:ae:64:bc:94:fd:55:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f866f32b47c69d478ad95354e257e51a236a57
Validity
Not Before: Jan 2 02:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76df53f9081061087044d7959712aa4349bd1bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fc:aa:5c:e4:1f:3f:a9:e5:a7:ad:51:bd:8e:
9b:85:f1:7d:a7:7a:22:f1:c5:be:e4:02:d3:00:bf:
fc:36:57:79:d1:bc:bf:bf:d9:f1:05:08:5d:3b:19:
e1:f4:68:92:1c:aa:c0:e5:fe:e1:4a:01:ef:13:34:
bc:d4:94:67:f5:df:7b:20:27:93:37:f1:74:60:90:
ac:22:d2:9c:64:65:aa:c7:dd:54:ea:4e:fa:22:90:
19:dc:f3:c5:8a:da:47:6b:ab:b4:25:8b:44:97:3f:
01:c6:d6:1a:62:49:46:68:79:5a:1a:99:19:92:b4:
b2:11:3e:d5:8a:ca:ba:d1:57:00:cc:f8:0e:f2:50:
10:87:75:80:e0:aa:6c:f8:0a:4a:03:db:0d:c3:d4:
73:00:60:b4:bc:66:b7:47:36:17:f3:de:ac:18:e6:
46:3f:7a:4e:7a:7b:32:81:15:15:34:ed:39:9f:9b:
1d:b0:6f:69:f6:85:21:7a:b0:45:05:5f:bd:d4:a6:
f5:f1:65:71:e5:10:df:c7:11:7f:be:82:36:ad:4d:
a9:73:d2:a2:fb:84:64:7e:02:fb:64:6a:7e:a7:f8:
41:2f:d7:1c:9d:25:31:65:02:11:81:63:37:e1:df:
c9:01:22:9a:18:55:70:2b:0b:ea:2d:94:77:0a:24:
b4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DF:53:F9:08:10:61:08:70:44:D7:95:97:12:AA:43:49:BD:1B:F2
X509v3 Authority Key Identifier:
keyid:51:F8:66:F3:2B:47:C6:9D:47:8A:D9:53:54:E2:57:E5:1A:23:6A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ufhm8ytHxp1HitlTVOJX5Rojalc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/dt9T-QgQYQhwRNeVlxKqQ0m9G_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/Ufhm8ytHxp1HitlTVOJX5Rojalc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.217.0-46.21.218.255
Signature Algorithm: sha256WithRSAEncryption
45:10:e2:87:f8:15:6d:2c:67:73:e3:87:29:2c:af:8a:4b:e9:
f7:71:65:ce:5b:ef:9c:3c:11:c8:8a:65:af:18:9e:9b:e8:aa:
83:85:f7:70:f7:63:af:e7:ed:a0:e5:d2:83:de:95:0e:8f:7c:
19:ae:30:27:dc:70:52:45:7e:86:8a:13:a6:54:1c:df:6e:87:
8e:62:1a:4a:79:9c:ce:e7:95:54:3e:b1:d3:5a:c6:8c:84:2a:
e0:e9:c3:e1:aa:34:60:61:77:4c:ca:6b:e4:9f:4e:17:cf:ef:
99:dc:21:4c:ef:80:0d:17:9a:1b:9b:8c:b7:e0:1e:fd:2d:82:
8a:42:86:bf:cf:c4:e3:74:d1:07:22:4c:85:6d:95:c6:2f:7a:
64:92:4e:0a:11:3a:82:3e:6e:c7:d9:20:68:5e:a0:be:98:97:
65:4c:b9:21:a1:3e:c1:7a:75:91:6a:65:b1:9a:31:32:3f:45:
a0:a0:4c:76:90:e0:3a:eb:2c:85:8b:c7:51:38:48:08:9f:3c:
e9:9f:9e:27:30:73:11:c0:08:c6:43:29:03:cc:94:1b:34:71:
71:a4:f8:bd:10:03:a8:ee:6b:60:c7:a4:b8:9f:02:8e:87:94:
5a:32:be:fe:88:37:f7:45:44:fe:40:c9:0b:1b:9b:23:73:3f:
0e:8f:1e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:17 2024 by rpki-client on console-ams.rpki-client.org