Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/pv7H89AdOAttPBxIzz91M9vihbc.roa
File: pv7H89AdOAttPBxIzz91M9vihbc.roa (raw, json)
Hash identifier: 4V3vE6SwqvWAaarGepKLOGpOhNkLgjnPOymEyM2M3i4=
Subject key identifier: A6:FE:C7:F3:D0:1D:38:0B:6D:3C:1C:48:CF:3F:75:33:DB:E2:85:B7
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018B56720965A9E291BBE2C19F3A90AD10A4
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/pv7H89AdOAttPBxIzz91M9vihbc.roa
Signing time: Sun 22 Oct 2023 08:13:15 +0000
ROA not before: Sun 22 Oct 2023 08:13:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56687
IP address blocks: 212.80.8.0/22 maxlen: 22
46.38.132.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Nov 2023 07:15:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:56:72:09:65:a9:e2:91:bb:e2:c1:9f:3a:90:ad:10:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Oct 22 08:13:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6fec7f3d01d380b6d3c1c48cf3f7533dbe285b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e1:d0:99:81:db:2e:20:5f:82:47:c5:cb:41:
8c:98:13:34:7b:6b:06:50:fd:20:51:09:58:12:04:
7f:70:85:5f:73:0a:ae:26:fd:df:dc:6c:89:3f:99:
96:b1:dc:9a:7c:d9:f1:b0:33:f0:a9:78:c5:83:72:
84:7c:74:bd:e0:c4:79:73:7a:b2:33:95:3b:4f:92:
9f:9a:0d:56:32:b5:0c:81:27:f6:5b:44:87:57:91:
3a:d7:55:c2:02:ca:6f:9c:ee:c7:5d:da:05:03:74:
77:ae:71:a0:7a:ff:01:29:44:5b:d7:8f:b0:40:34:
69:90:c3:f0:3e:64:be:2f:a9:1c:c1:67:40:c6:f6:
d2:0a:c7:ce:43:49:09:bf:8f:05:87:c3:55:33:66:
02:e8:8a:11:eb:df:6c:76:ed:45:41:55:d4:6f:4b:
65:1d:3d:cc:7b:ab:3b:78:cd:22:1b:61:38:b8:9e:
61:aa:b8:0a:9a:ef:64:94:a9:e8:21:22:4c:98:7d:
8f:21:da:18:60:43:4d:b5:ec:c7:0f:90:d3:dc:0f:
4e:10:bb:88:ea:44:5b:fc:d5:bd:09:bd:50:73:82:
ff:76:7c:ed:7d:a8:df:92:cc:65:31:92:5b:cf:58:
a0:ae:49:26:39:87:41:85:84:90:74:04:fb:18:e7:
a4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FE:C7:F3:D0:1D:38:0B:6D:3C:1C:48:CF:3F:75:33:DB:E2:85:B7
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/pv7H89AdOAttPBxIzz91M9vihbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.132.0/22
212.80.8.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:cf:ea:7d:5f:ad:39:18:be:ca:d0:14:b0:ad:1e:5e:0e:3d:
97:f8:7e:cd:01:f5:21:a4:2a:10:42:60:b3:56:83:fe:6f:0e:
23:2e:67:cc:12:02:7f:26:57:01:ee:3b:85:de:9a:78:b2:df:
99:f3:77:30:37:fc:b8:02:55:32:4f:5e:7e:b1:57:6d:07:ca:
3b:90:99:47:65:d9:cc:f4:81:a8:17:26:2e:d8:90:0a:9e:7d:
e0:9c:cc:4f:a7:aa:72:bc:b4:3b:f9:e6:c5:17:ee:37:a2:b3:
6f:e5:e1:b8:13:67:3c:df:76:ac:cc:32:af:70:53:de:ae:5c:
2b:d4:3d:aa:4c:55:f1:36:55:8a:39:75:e9:63:d9:1b:7d:34:
f8:4c:5e:c2:84:1f:fd:e4:4e:db:c1:ef:0c:db:da:93:f6:e5:
66:89:31:23:e8:2e:3a:b1:41:87:c3:8f:fe:f8:e3:0f:16:f0:
9a:91:49:b4:be:98:c8:c2:27:88:92:e9:04:fe:a4:39:57:e3:
8f:f6:f6:b6:cd:f9:8d:01:71:ec:2d:6c:dc:79:70:59:c0:ce:
3b:1f:ed:df:85:b4:50:4e:9e:b7:0b:1d:59:16:f7:73:53:29:
09:d0:30:c2:1e:eb:68:29:bb:16:a2:c3:4c:c7:ec:8e:f2:13:
ff:be:03:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:24 2024 by rpki-client on console-fra.rpki-client.org