Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/ReXoBhYlvPuPrSovOpHaChvHZDw.roa
File: ReXoBhYlvPuPrSovOpHaChvHZDw.roa (raw, json)
Hash identifier: XDCSGxcCyozPsMDgrQYZwA8KeHypQAWGuglt/8LvZxw=
Subject key identifier: 45:E5:E8:06:16:25:BC:FB:8F:AD:2A:2F:3A:91:DA:0A:1B:C7:64:3C
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018572BA5197E8A5684F606947E5DED931F4
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/ReXoBhYlvPuPrSovOpHaChvHZDw.roa
Signing time: Mon 02 Jan 2023 13:44:51 +0000
ROA not before: Mon 02 Jan 2023 13:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60144
IP address blocks: 46.8.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Feb 2023 05:46:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:51:97:e8:a5:68:4f:60:69:47:e5:de:d9:31:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45e5e8061625bcfb8fad2a2f3a91da0a1bc7643c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:56:07:9b:71:3a:7e:e9:e1:86:72:68:4a:d7:
da:a9:c8:22:ed:d0:69:3b:4a:28:59:bd:ae:2e:1a:
4e:56:d3:7e:c3:b1:ba:f2:d3:63:09:b0:d4:71:be:
e3:d5:35:16:31:5a:4a:3a:3f:7c:06:e2:22:e8:e7:
1c:66:23:7a:24:b3:52:50:d2:ae:79:94:50:c5:ea:
9e:82:f0:12:f9:2f:38:68:50:9e:e8:95:5c:13:03:
58:9e:87:c1:c6:b6:50:cc:9f:85:70:e3:57:93:cc:
01:9d:a0:bb:3d:bf:ad:ee:b9:99:03:dc:96:22:43:
82:b1:cc:cd:83:a1:4b:63:c0:f4:65:86:04:88:ab:
a5:63:ff:b7:e6:49:74:d7:b6:54:db:78:d2:17:8e:
bb:12:34:e6:2b:7e:c4:02:d6:c2:98:d3:12:16:7d:
06:8d:32:80:46:a9:c4:93:91:1d:9f:ee:28:85:78:
4d:9e:14:61:be:85:01:8f:42:0c:61:7e:78:7d:28:
f0:2e:0f:8d:a2:42:14:ac:58:61:b3:c2:5f:ff:7f:
6b:77:ae:b3:08:c5:b3:e6:e4:18:9a:b6:01:11:df:
17:62:de:3f:38:4a:a6:ac:6a:ef:b4:96:7e:03:4f:
a8:e6:ea:65:b7:67:6d:e2:1f:d4:e6:20:47:b1:b7:
d7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E5:E8:06:16:25:BC:FB:8F:AD:2A:2F:3A:91:DA:0A:1B:C7:64:3C
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/ReXoBhYlvPuPrSovOpHaChvHZDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.184.0/24
Signature Algorithm: sha256WithRSAEncryption
31:43:40:85:ce:49:4d:02:22:46:82:3a:3f:01:c3:db:09:30:
5c:e3:44:4b:fd:46:a4:7e:3f:44:fd:b1:7a:56:76:1d:15:38:
7c:2e:84:ad:aa:ca:fd:ab:4d:40:a1:e8:54:c1:69:85:d7:6c:
33:2e:bf:ac:d9:ca:04:80:7d:0b:43:bf:ce:a3:96:c7:18:b1:
40:0a:c6:c8:57:49:cb:7e:9e:e9:22:1a:1f:80:aa:a3:08:0a:
17:27:3e:e3:85:56:bd:3b:a4:d9:74:45:05:59:77:4e:77:cc:
80:39:69:13:05:36:a9:a7:9e:74:38:24:46:9d:24:04:ff:60:
bd:45:b5:d4:88:13:47:d7:a0:17:66:fc:90:75:1c:ee:0d:f8:
8a:0f:76:f4:1b:87:68:73:ac:33:ac:d0:4f:61:9d:bb:60:33:
6b:6b:a8:5a:61:55:d0:46:21:e0:1a:21:ed:10:54:05:68:18:
3c:d4:e5:fc:61:99:cc:fc:0a:8e:d4:31:5b:33:7d:70:85:4f:
47:2a:bb:de:d0:35:3c:c6:6a:c4:45:16:f2:49:49:cf:8a:b5:
4c:2e:0a:0f:48:8e:34:51:95:72:47:3a:7e:0c:f3:8f:6b:44:
48:12:f7:80:8d:d5:42:50:06:a4:c0:0e:fe:1f:43:68:9e:9a:
d0:0b:74:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:00 2024 by rpki-client on console-ams.rpki-client.org