Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/oy4PpYW4DCG82LKjy2HSrpBUtf8.roa
File: oy4PpYW4DCG82LKjy2HSrpBUtf8.roa (raw, json)
Hash identifier: yNzty+QwlR971xsNdFSUVpaZas7HopAfFHb3C/Fn8W0=
Subject key identifier: A3:2E:0F:A5:85:B8:0C:21:BC:D8:B2:A3:CB:61:D2:AE:90:54:B5:FF
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 01856B8A10431F90DEF1AEBABE38691333FE
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/oy4PpYW4DCG82LKjy2HSrpBUtf8.roa
Signing time: Sun 01 Jan 2023 04:14:48 +0000
ROA not before: Sun 01 Jan 2023 04:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197254
IP address blocks: 46.229.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:10:43:1f:90:de:f1:ae:ba:be:38:69:13:33:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jan 1 04:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a32e0fa585b80c21bcd8b2a3cb61d2ae9054b5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b7:83:86:54:bc:ca:16:c4:ba:21:6c:89:7d:
12:67:35:cd:b9:bd:93:1d:f7:ed:e3:c0:96:07:56:
7d:a7:fe:d5:63:7b:64:c4:25:e7:f5:b8:e3:fd:2d:
48:81:e8:1f:fb:fa:ee:f1:f6:77:25:e9:3d:60:ea:
49:18:c7:03:52:ab:72:10:e9:6d:06:fe:fb:f7:65:
41:d5:9c:50:35:76:62:35:06:b6:2e:5c:3c:da:75:
f3:0e:a5:31:73:b4:b7:e7:70:2d:f0:80:16:05:ee:
d4:c3:a1:08:b1:e5:16:d7:92:ee:c1:9b:38:8f:2c:
8c:9f:52:6f:b0:cb:47:96:da:03:df:ad:83:37:74:
bd:16:20:16:ea:04:1c:b9:59:45:73:9b:ae:c9:08:
94:46:bf:f5:b6:c4:8f:48:c6:b4:14:ac:7c:5c:db:
eb:aa:6b:68:68:90:99:17:96:92:d6:12:f0:65:41:
0a:38:17:2c:8b:76:82:70:05:45:1f:a8:7f:b1:ba:
50:d5:3c:63:86:38:84:79:b2:99:23:1e:6f:17:e0:
05:6b:dc:1b:a8:82:6e:02:ad:c7:67:82:03:17:b2:
6a:d4:8a:ae:c9:56:1c:75:d2:d8:31:e5:f7:4c:e2:
40:28:80:46:7c:7c:d1:98:4b:11:e4:b6:a2:9a:88:
6c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2E:0F:A5:85:B8:0C:21:BC:D8:B2:A3:CB:61:D2:AE:90:54:B5:FF
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/oy4PpYW4DCG82LKjy2HSrpBUtf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.61.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:43:d8:9a:f6:62:53:cd:10:ac:73:26:49:ba:2a:00:63:11:
91:7e:72:3d:fb:eb:1b:c7:13:d9:b3:13:fb:34:3e:56:51:7f:
36:95:52:bf:12:5f:3a:83:7b:b7:d4:a0:25:46:75:7b:65:39:
6b:72:42:1f:3b:6d:5d:12:70:af:67:a5:8e:5a:bf:ce:0f:26:
74:c3:ee:b5:f6:88:8b:97:e7:07:37:59:e5:47:ed:04:2c:01:
1d:94:7f:f5:0e:7a:da:65:f4:a5:af:ff:3e:52:48:5e:3b:53:
91:96:4a:34:97:31:61:fa:6d:23:ee:bc:84:b2:db:7e:c4:bc:
64:16:72:b1:f2:f5:3d:69:72:53:ab:3e:0e:68:b3:2a:8f:66:
4a:4d:74:6c:97:b2:35:c9:07:e5:0f:c6:c6:30:de:04:06:a2:
22:ad:c1:b8:75:8a:a1:e8:36:98:0d:3e:f1:a7:40:82:6d:71:
2e:90:6b:cc:dc:b8:4d:24:4f:95:3c:8b:09:15:57:28:8f:5f:
f3:9c:24:11:d1:f8:dd:ff:5b:b2:89:a8:4a:da:9f:f8:06:48:
cc:de:76:52:dd:df:8f:10:3e:81:c8:a7:c0:fa:c5:08:d0:9a:
41:ed:21:82:24:1f:c3:5e:55:dc:37:7f:b7:7c:01:54:58:15:
de:4e:16:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:42 2024 by rpki-client on console-ams.rpki-client.org