Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/oQV6IMG9c3hr59WbHJDdmiTgzbs.roa
File: oQV6IMG9c3hr59WbHJDdmiTgzbs.roa (raw, json)
Hash identifier: VqzD6pFhV6UsBocqxOiSZ6PBIVPn4i+zglAptuLR/vI=
Subject key identifier: A1:05:7A:20:C1:BD:73:78:6B:E7:D5:9B:1C:90:DD:9A:24:E0:CD:BB
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0185703990BC8661B7A8363867ADA2781828
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/oQV6IMG9c3hr59WbHJDdmiTgzbs.roa
Signing time: Mon 02 Jan 2023 02:04:58 +0000
ROA not before: Mon 02 Jan 2023 02:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48434
IP address blocks: 46.38.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:90:bc:86:61:b7:a8:36:38:67:ad:a2:78:18:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 2 02:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1057a20c1bd73786be7d59b1c90dd9a24e0cdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:3c:0a:90:ff:2d:2a:49:06:ac:28:6e:05:
62:26:50:ad:50:14:6d:cb:d8:00:a7:8c:47:81:35:
f8:b0:73:90:ac:b2:73:e2:ce:31:a3:53:fc:af:8d:
75:6e:f7:6d:bb:8d:5c:82:f7:b8:c5:f8:81:2b:49:
80:37:2e:8e:22:ea:c9:a4:7c:b4:41:d5:43:b9:0c:
87:af:6d:e9:cb:7a:85:f1:ab:a6:d7:fa:b4:a5:9e:
f2:67:f7:e6:f8:94:ba:e4:d9:2b:4f:d6:35:c6:fe:
83:35:d7:5f:bc:46:e9:82:5c:89:e4:e0:b9:f6:28:
e4:66:67:c2:31:65:c9:35:53:a4:cf:fc:9e:8b:6b:
7f:84:21:eb:6c:7c:d2:8a:8c:0e:30:e8:f0:88:93:
b7:c2:6a:f9:82:9a:47:23:3b:ba:e4:bd:4b:67:80:
85:7d:6c:89:c4:ea:0b:aa:dd:85:35:fa:ee:66:71:
1b:82:5a:64:eb:5c:6a:0c:00:7b:c8:1c:e8:38:64:
e6:55:40:b8:4c:ac:f4:ea:20:62:78:a4:d7:66:08:
d8:e6:34:0a:3a:79:48:54:d2:c5:d9:7c:b5:d3:ec:
db:50:bf:6c:5b:ca:27:55:bb:24:6c:40:d4:ef:09:
6e:6a:8b:6c:98:26:a5:71:1e:0e:5f:09:0d:d6:fb:
4b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:05:7A:20:C1:BD:73:78:6B:E7:D5:9B:1C:90:DD:9A:24:E0:CD:BB
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/oQV6IMG9c3hr59WbHJDdmiTgzbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.159.0/24
Signature Algorithm: sha256WithRSAEncryption
61:a3:c0:26:07:c9:9f:37:86:aa:99:a1:48:29:76:cd:7b:6b:
44:fc:2b:71:92:7c:64:ac:63:76:94:0e:3c:e7:3c:eb:c1:47:
ff:f2:58:fa:ca:b0:78:18:6f:80:0e:06:d7:e0:6d:cb:e5:6d:
9d:c7:c1:f8:c0:a7:2d:18:04:18:da:26:cf:18:be:85:5f:ae:
12:c1:ca:12:56:a7:6b:5b:0a:65:f9:ef:9f:93:cf:59:8f:75:
a1:57:fe:97:69:07:91:90:d8:91:4c:3c:27:88:01:df:92:e2:
a9:75:8c:c7:9a:2a:b1:a7:e1:05:7d:07:b6:f6:2a:8a:cf:69:
6d:89:4b:3e:ca:b8:5d:b0:80:50:a1:19:d5:83:18:2e:ed:a9:
df:d7:7a:86:49:ab:4b:fb:a3:34:cb:c8:38:02:a3:ed:43:f2:
0e:89:36:27:c1:85:b5:c7:53:6d:80:76:dc:39:b4:ff:71:dd:
47:11:88:70:7f:9a:89:b5:74:0e:76:3c:d1:50:ce:96:ce:92:
66:5b:dc:82:eb:f2:a1:a7:40:34:03:89:35:2c:3c:b2:e1:05:
46:f0:18:91:48:04:75:93:9c:f8:b1:0b:ae:cc:c5:6b:4e:3f:
5f:62:fa:23:1d:26:c0:28:75:db:f6:eb:69:32:db:df:d1:81:
c0:d9:f4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:40 2023 by rpki-client on console-ams.rpki-client.org