Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/m4BjvVD-OUNlWP655Ts9gSJLQAQ.roa
File: m4BjvVD-OUNlWP655Ts9gSJLQAQ.roa (raw, json)
Hash identifier: Uk7sxLW7wOgeKwmvJwS/OOe2pexYp9Yo3LV8mVIXXOw=
Subject key identifier: 9B:80:63:BD:50:FE:39:43:65:58:FE:B9:E5:3B:3D:81:22:4B:40:04
Certificate issuer: /CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3
Certificate serial: 018679EA34D3277018F4D44B6D6BF1EEED58
Authority key identifier: 0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/m4BjvVD-OUNlWP655Ts9gSJLQAQ.roa
Signing time: Wed 22 Feb 2023 16:17:17 +0000
ROA not before: Wed 22 Feb 2023 16:17:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56588
IP address blocks: 46.226.136.0/21 maxlen: 21
2a00:6a00::/29 maxlen: 29
2a00:6a07::/32 maxlen: 32
2a00:6a00::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:79:ea:34:d3:27:70:18:f4:d4:4b:6d:6b:f1:ee:ed:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3
Validity
Not Before: Feb 22 16:17:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b8063bd50fe39436558feb9e53b3d81224b4004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0c:72:a3:43:5a:59:cb:4f:be:56:f2:0d:da:
6e:0c:3f:fa:7e:f9:79:43:e5:1f:ef:92:7d:37:6a:
53:76:b2:4d:40:1b:db:13:64:d0:ae:22:d4:56:9c:
55:61:5b:18:de:7f:8e:81:d0:a8:6e:4e:33:5c:07:
4d:79:4c:fe:e8:8c:a7:28:d1:03:98:d8:5d:5a:72:
f0:c4:86:ba:6e:e9:9e:98:6e:e4:d6:2f:89:fc:85:
13:15:d5:b1:53:d2:b2:09:16:50:17:03:f8:ad:7e:
40:71:79:13:9f:8e:33:16:c9:69:e2:25:1e:3e:98:
79:d6:81:f5:9c:3a:91:5a:b2:60:c6:a6:70:75:06:
1c:25:21:02:cd:81:fb:8b:7b:77:27:ba:1f:a7:b9:
cc:7a:9c:ba:d3:ce:c9:f6:b6:6f:4a:c1:bd:ed:70:
82:08:4f:86:7c:68:e3:a6:6f:17:d2:2d:c3:38:09:
71:75:f9:bb:dc:e6:d4:ba:1c:f7:8b:ad:bc:12:05:
85:a7:a2:42:1d:df:81:a5:b3:cf:43:f7:4d:95:ea:
5e:b2:8c:03:e0:33:7a:31:40:e9:4f:12:29:3b:dc:
a4:18:97:30:ca:71:54:37:52:ad:25:f3:fb:8a:fa:
41:9d:10:d3:a0:aa:08:5b:9d:dd:fc:ba:cf:c6:30:
2b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:80:63:BD:50:FE:39:43:65:58:FE:B9:E5:3B:3D:81:22:4B:40:04
X509v3 Authority Key Identifier:
keyid:0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/m4BjvVD-OUNlWP655Ts9gSJLQAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.136.0/21
IPv6:
2a00:6a00::/29
Signature Algorithm: sha256WithRSAEncryption
1a:ac:f6:f8:99:78:56:05:73:9f:e7:46:61:e5:74:15:7e:0b:
0e:7e:43:61:48:ee:0e:5a:31:dd:ff:21:55:49:58:3f:b7:3b:
34:c0:80:ad:2b:7e:56:67:c7:12:0b:ca:11:a6:03:4e:b7:3d:
4b:05:56:9f:5f:67:82:20:a1:77:35:83:61:3c:dd:7f:0e:86:
5e:10:44:b0:9c:8b:48:75:b2:f6:09:0a:db:24:1d:71:fe:49:
79:34:1b:44:1c:1b:ef:a0:90:79:bf:d1:2a:86:60:0e:79:28:
3b:83:6d:04:84:11:fb:b9:8d:21:5f:ce:c2:ac:c3:29:b4:3d:
3c:34:2e:5f:45:cd:e0:14:ae:c6:40:68:5f:b7:ae:ef:80:d4:
a3:57:f0:73:3f:ea:34:c1:e3:14:48:a4:ef:9a:03:5d:56:55:
6f:41:aa:a1:27:93:3d:d1:a2:a6:59:3d:52:08:cb:93:75:da:
90:4f:43:43:f8:bf:c0:b3:ab:ac:aa:ec:fa:36:23:19:e9:88:
29:3a:b4:72:e0:19:01:e4:fe:59:e4:36:ba:e0:3a:6d:89:b4:
c2:a9:3d:9c:a2:e1:b1:24:1b:f2:30:f0:df:f6:f6:12:9d:27:
f0:a2:f8:32:fe:31:c7:4a:b3:b5:6e:59:f2:1f:f6:7b:cc:f2:
28:e5:19:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:37 2024 by rpki-client on console-ams.rpki-client.org