Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/wf2Fg5EpASBBtTZZkg0fT_Dz4Qc.roa
File: wf2Fg5EpASBBtTZZkg0fT_Dz4Qc.roa (raw, json)
Hash identifier: iMENq1yPZrUvqJfdxcYxzk1g+HGs/IQVtvE2iMNmy/U=
Subject key identifier: C1:FD:85:83:91:29:01:20:41:B5:36:59:92:0D:1F:4F:F0:F3:E1:07
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01892FC2EDCB2913FEA752621C805813D968
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/wf2Fg5EpASBBtTZZkg0fT_Dz4Qc.roa
Signing time: Fri 07 Jul 2023 09:50:51 +0000
ROA not before: Fri 07 Jul 2023 09:50:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60931
IP address blocks: 46.8.80.0/20 maxlen: 20
46.8.80.0/21 maxlen: 21
46.8.84.0/22 maxlen: 22
46.8.80.0/22 maxlen: 22
46.8.88.0/21 maxlen: 21
46.8.88.0/22 maxlen: 22
46.8.92.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2f:c2:ed:cb:29:13:fe:a7:52:62:1c:80:58:13:d9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jul 7 09:50:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1fd85839129012041b53659920d1f4ff0f3e107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cd:9b:aa:0c:ac:5a:c2:02:a1:25:af:5f:53:
f1:13:de:ac:fc:71:43:7e:65:54:00:ee:05:75:34:
96:da:7b:b8:81:ab:d3:30:b8:6d:ff:e7:e2:52:13:
de:61:c0:e9:54:38:41:38:34:e8:c2:ce:ed:c5:b3:
24:1c:03:9d:d1:d3:d7:eb:1f:4d:78:5f:f7:47:a1:
bb:b6:c6:16:e4:f1:df:f9:31:e6:a4:02:d7:9c:51:
ef:fd:0e:53:9d:dc:38:58:cb:3d:09:79:22:50:0d:
71:96:ee:c4:37:8f:59:2c:77:e2:28:0a:cf:44:b2:
03:2b:9f:37:a6:82:a1:88:a9:81:4f:4d:ad:b0:45:
84:38:64:eb:7f:9d:a2:c4:cf:a6:bf:f4:4f:2f:ca:
55:ef:7b:a8:01:a9:12:e3:93:db:a6:8e:0f:1d:ab:
5c:43:04:7f:cb:46:8e:d7:d7:99:ee:30:a8:15:aa:
ea:cc:32:de:b6:85:d3:9f:d0:18:8e:a3:cb:27:c2:
eb:06:93:40:5d:0f:88:b9:5c:31:1b:f3:f1:23:49:
b3:06:5c:f5:86:1d:cd:f3:c6:38:b8:a9:cd:56:c6:
75:86:26:57:c1:8f:50:fb:57:c1:c1:98:47:14:4b:
06:9f:b2:1f:c4:ff:44:50:de:1d:4f:a9:6d:05:ae:
32:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FD:85:83:91:29:01:20:41:B5:36:59:92:0D:1F:4F:F0:F3:E1:07
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/wf2Fg5EpASBBtTZZkg0fT_Dz4Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.80.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:7e:55:cf:df:dd:98:9e:04:65:8b:35:01:cc:00:aa:f0:63:
eb:96:22:a3:2e:e2:ac:b9:54:9d:8e:6e:d2:a7:97:8c:cf:3b:
b2:11:aa:1e:2d:00:81:44:e7:1c:3f:43:29:d2:46:c8:4d:47:
3f:ce:c1:24:c6:96:61:d1:39:b9:f8:87:45:75:ed:39:0e:c7:
e8:c9:52:9d:d7:d7:95:97:75:49:81:e2:d6:10:ca:1d:61:c7:
c0:11:dc:de:93:39:10:f7:1f:81:e9:31:74:0a:f7:8a:05:5d:
7e:1d:bd:d0:ac:34:f5:95:29:e8:4d:c8:6f:eb:b6:c6:39:c4:
bb:cf:82:8d:1e:49:b9:08:b8:f3:b7:db:f4:aa:e5:e6:9b:b5:
bd:82:4f:25:6f:e9:98:72:9a:39:8c:24:58:44:1a:ef:f3:9f:
1b:77:9e:e4:23:06:13:77:35:ca:47:28:05:c4:bd:ee:06:50:
71:47:89:ea:5c:fc:ee:53:cd:5a:3c:7b:7b:c8:98:0d:4b:16:
55:80:5f:a2:e2:bf:19:cc:c7:9e:20:f3:30:1a:9d:4a:26:6b:
b3:cb:6a:74:23:5b:dc:0c:d6:8d:cc:f5:d0:12:12:ac:c6:fc:
6c:f3:74:b8:99:01:4a:72:c9:b3:79:51:d0:8d:c4:fd:9c:4c:
fa:98:03:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:00 2024 by rpki-client on console-ams.rpki-client.org