Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/2Vs6vc1ILHwPC3YdLbr8faqGf5k.roa
File: 2Vs6vc1ILHwPC3YdLbr8faqGf5k.roa (raw, json)
Hash identifier: Kt2EVkaqXk7ayzWa7ECMT4yXAzN6HoIWe1JLj8ER0Hg=
Subject key identifier: D9:5B:3A:BD:CD:48:2C:7C:0F:0B:76:1D:2D:BA:FC:7D:AA:86:7F:99
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 0188BF93F28E5BE92B346F4CDF853E07EF0A
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/2Vs6vc1ILHwPC3YdLbr8faqGf5k.roa
Signing time: Thu 15 Jun 2023 15:02:03 +0000
ROA not before: Thu 15 Jun 2023 15:02:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198150
IP address blocks: 46.8.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:93:f2:8e:5b:e9:2b:34:6f:4c:df:85:3e:07:ef:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jun 15 15:02:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d95b3abdcd482c7c0f0b761d2dbafc7daa867f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:de:a9:21:7d:67:4f:2e:b4:c3:43:06:af:
6e:d9:eb:20:77:eb:4d:76:d6:df:84:eb:a8:38:73:
ba:98:bd:b9:74:12:44:d2:4b:78:75:4f:be:28:b4:
11:79:9c:fb:60:c7:7f:aa:5e:7f:2c:28:03:8f:fb:
a1:f9:fd:d2:35:37:e8:9d:b4:cd:04:d9:0f:24:20:
fe:e6:37:68:22:81:b2:6d:a0:4c:c7:d9:c7:14:b7:
69:a4:6c:cf:00:43:75:55:63:05:78:40:42:28:36:
81:ea:b4:7b:a0:bd:6a:97:d4:00:70:01:41:24:10:
36:ad:48:58:c7:88:b4:3e:2a:9f:dc:80:86:ff:f4:
2e:6e:99:fb:f9:63:dc:db:a2:23:61:5d:b1:f3:25:
60:7c:ef:39:72:70:63:a8:05:80:e8:a9:2f:c8:79:
67:52:0e:e9:c7:e2:5e:b4:2c:7d:21:69:df:30:47:
3c:c6:49:c7:6a:20:db:6f:ac:f1:76:87:a0:8e:e3:
f5:ef:49:94:bb:0c:3b:9b:d9:23:a5:ab:93:4e:5c:
06:4b:d9:a3:60:ac:1d:cb:fd:cb:b1:a5:3d:0f:e9:
dd:f4:1a:06:2e:af:24:97:d7:98:65:7d:81:f4:18:
62:45:75:7e:60:ac:0b:d4:71:2d:0c:ba:2b:88:ce:
68:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5B:3A:BD:CD:48:2C:7C:0F:0B:76:1D:2D:BA:FC:7D:AA:86:7F:99
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/2Vs6vc1ILHwPC3YdLbr8faqGf5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.37.0/24
Signature Algorithm: sha256WithRSAEncryption
73:5d:90:17:7d:f4:0f:01:eb:bd:4d:eb:3a:ca:38:96:e0:25:
13:f8:0d:2e:e5:cd:84:c4:93:b3:c5:f3:ce:31:d5:1c:02:d7:
70:24:60:e6:29:03:fa:3d:3b:61:d0:29:57:0e:2a:a2:12:b1:
8a:d5:36:c5:ab:9f:7f:82:95:ad:7d:78:dd:53:4e:1f:fd:c4:
4e:8d:f9:09:40:3b:6c:46:cf:1d:bc:31:ea:03:13:12:29:08:
df:a9:81:1e:be:b8:0b:3b:8d:68:e3:20:43:9a:a9:cd:5e:17:
02:9f:3a:19:0c:bf:63:07:e3:f8:33:70:50:d6:a8:36:6e:db:
01:9e:67:f1:89:d6:01:f9:42:e2:42:66:ab:13:64:50:d4:ec:
8f:40:dc:ea:6e:8c:71:85:c4:27:33:5a:59:35:82:f1:b7:84:
2c:bf:0b:48:aa:26:7e:84:eb:5e:0c:db:a2:fe:72:22:78:ef:
c0:14:13:9f:cc:6b:0a:9f:8f:68:ce:66:e0:51:41:f6:c8:90:
22:42:81:e4:6d:85:8d:90:e3:c0:10:7e:dc:35:63:00:10:97:
9a:7f:3c:c0:53:f0:c1:25:0f:d3:c5:91:f4:c1:8a:3f:7b:7f:
c2:69:b9:37:8d:5c:5c:bd:f6:8d:5f:bb:89:c2:b9:bb:70:80:
da:0a:17:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:00 2024 by rpki-client on console-ams.rpki-client.org