Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/5qfLc4KZPaHvZ4gPIrXsZEtOZs8.roa
File: 5qfLc4KZPaHvZ4gPIrXsZEtOZs8.roa (raw, json)
Hash identifier: 3e5OxWXPHv2f/0PcmtEohdHZlCWoWsuJAiplREP037E=
Subject key identifier: E6:A7:CB:73:82:99:3D:A1:EF:67:88:0F:22:B5:EC:64:4B:4E:66:CF
Certificate issuer: /CN=dc849c7369e7e52c7051d21dba7298308be9c428
Certificate serial: 01856E78CCD535A90CC741DDC07D489032F1
Authority key identifier: DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/5qfLc4KZPaHvZ4gPIrXsZEtOZs8.roa
Signing time: Sun 01 Jan 2023 17:54:48 +0000
ROA not before: Sun 01 Jan 2023 17:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 46.183.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:cc:d5:35:a9:0c:c7:41:dd:c0:7d:48:90:32:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc849c7369e7e52c7051d21dba7298308be9c428
Validity
Not Before: Jan 1 17:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6a7cb7382993da1ef67880f22b5ec644b4e66cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:42:ef:24:cd:8c:47:1f:51:9c:82:14:f3:14:
ac:48:94:68:c2:15:c5:b5:ea:3f:92:1d:a1:19:54:
aa:8c:09:4e:7a:f0:fc:c8:19:6d:f2:2e:89:7a:97:
37:2d:b6:a5:94:32:4d:89:03:b7:b0:36:4b:2b:ad:
77:5a:a7:f1:d3:10:cd:b1:e1:a5:b5:58:e6:b8:e2:
50:06:5b:69:fe:0a:f5:bf:f2:c1:8b:eb:9a:60:2c:
84:9d:52:6b:5c:89:e2:1a:1f:0f:ef:8c:d6:fa:8e:
d7:87:ba:6d:8e:db:13:56:b7:cc:f9:57:5d:9d:72:
a1:d8:c8:4b:77:30:93:ba:ac:7b:76:24:5c:18:a0:
af:ed:d7:d3:2f:e0:b9:1d:20:cf:54:0d:50:ec:6f:
ab:26:fa:68:f3:c7:54:35:ba:5e:f8:8d:c4:41:d6:
89:d2:1c:ab:57:f2:4b:1b:cf:01:07:90:a3:b6:8f:
55:a4:fd:80:09:5c:4d:f5:18:47:58:e9:e8:eb:5b:
58:ae:00:c4:20:6f:e8:93:a4:7d:29:c0:0d:e0:7e:
ed:c0:3a:6c:6a:9c:bd:1b:14:8f:95:25:d9:99:bf:
d7:8a:67:c5:fa:42:d4:4e:71:91:89:b7:ac:54:f1:
52:5e:52:f0:82:2f:f2:41:47:30:95:9f:bd:30:f7:
11:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A7:CB:73:82:99:3D:A1:EF:67:88:0F:22:B5:EC:64:4B:4E:66:CF
X509v3 Authority Key Identifier:
keyid:DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/5qfLc4KZPaHvZ4gPIrXsZEtOZs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.47.0/24
Signature Algorithm: sha256WithRSAEncryption
97:f5:62:e9:78:3d:42:e9:63:1e:81:f9:0d:9a:84:c2:a3:c2:
f6:04:5b:36:15:b0:f2:96:c3:24:59:c9:bb:f4:e6:d2:e2:d3:
53:48:a7:5e:4d:eb:97:ee:b0:7b:ae:cd:75:26:7b:4f:d7:e4:
ee:23:ca:8e:9a:af:12:dd:a5:70:c8:f1:1b:f8:bf:ee:b4:ea:
8d:a2:db:be:da:16:64:e9:8a:70:20:d2:55:54:12:c0:2b:af:
77:a7:fd:00:aa:30:e8:53:ee:64:d4:4f:e5:59:c6:a3:e0:be:
19:9f:ba:7b:e5:83:43:fe:d7:29:2a:da:f9:09:2a:2a:8f:47:
0b:ac:96:18:5e:f5:68:59:11:ea:84:78:38:5c:27:00:15:53:
89:2f:0c:d1:d9:64:83:8f:7a:20:67:44:9d:d1:bb:21:60:ff:
b7:36:68:c2:03:d8:9b:3c:30:83:ce:c1:3d:b9:00:ef:f4:c7:
5e:12:10:dd:1e:95:91:2a:89:55:72:1e:13:b6:37:82:fe:1f:
82:a7:49:fe:5e:06:96:22:0d:4f:08:dc:5e:80:79:ef:2c:f8:
84:36:3c:2b:37:6c:41:2e:46:ef:8f:76:2d:40:a8:0c:88:4d:
86:82:0b:b3:62:db:a6:b4:e8:4f:57:d2:a2:e7:59:58:fe:bf:
db:dc:17:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:21 2024 by rpki-client on console-ams.rpki-client.org