Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/OjqSSltLpd12vt5aeecnoLAD_RE.roa
File: OjqSSltLpd12vt5aeecnoLAD_RE.roa (raw, json)
Hash identifier: 5ArEKBV+T4HGYV56NFqC4UUYfosuP/WuDBpmUWHdz6I=
Subject key identifier: 3A:3A:92:4A:5B:4B:A5:DD:76:BE:DE:5A:79:E7:27:A0:B0:03:FD:11
Certificate issuer: /CN=32507f9e078be89932e91b23acf882ab467c6aa7
Certificate serial: 01856E01EE9FF1C95105F2633EF99EA36D0C
Authority key identifier: 32:50:7F:9E:07:8B:E8:99:32:E9:1B:23:AC:F8:82:AB:46:7C:6A:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/OjqSSltLpd12vt5aeecnoLAD_RE.roa
Signing time: Sun 01 Jan 2023 15:44:58 +0000
ROA not before: Sun 01 Jan 2023 15:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197503
IP address blocks: 46.149.144.0/20 maxlen: 20
46.149.146.0/23 maxlen: 23
46.149.152.0/23 maxlen: 23
46.149.148.0/23 maxlen: 23
46.149.150.0/23 maxlen: 23
46.149.156.0/23 maxlen: 23
46.149.158.0/23 maxlen: 23
46.149.154.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:ee:9f:f1:c9:51:05:f2:63:3e:f9:9e:a3:6d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32507f9e078be89932e91b23acf882ab467c6aa7
Validity
Not Before: Jan 1 15:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a3a924a5b4ba5dd76bede5a79e727a0b003fd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:aa:7a:e8:55:62:e2:16:a5:28:6b:a7:b4:
e3:43:2e:33:10:b7:61:bc:d6:5c:20:7d:a4:39:d8:
a9:b5:6e:a2:4d:ab:49:2a:ec:88:b5:b3:33:0d:bb:
27:c1:bb:90:10:e9:ab:37:fc:86:c8:c7:5f:93:4f:
d6:16:76:97:31:05:be:73:e7:79:72:44:8b:f2:45:
23:ce:65:df:80:da:81:6e:ea:5a:fc:a6:c6:e2:57:
fe:22:91:2d:63:e1:ff:e1:5c:33:87:62:6b:de:de:
c8:62:a6:a3:4c:d3:9b:b4:63:d9:08:66:21:75:57:
f3:3c:88:0e:0c:c1:7a:63:b6:8f:45:1b:31:f4:2b:
79:06:94:bc:4f:df:f6:02:42:d8:60:33:7c:c6:f8:
5c:b7:0b:e4:c8:ec:eb:b9:43:f2:49:cd:09:be:5e:
84:06:71:f1:b0:ad:a3:09:51:77:4f:93:93:02:7d:
39:b4:b3:97:c6:a8:33:ba:be:33:60:03:05:65:3c:
3e:11:34:cf:60:55:33:32:87:eb:7f:3c:37:d2:1e:
36:69:76:91:cb:05:ed:d8:bd:04:a0:d1:4a:3d:37:
3c:be:bc:8a:8d:df:5a:e2:c7:6c:65:7f:1d:06:3e:
23:ba:fd:88:c5:58:d3:d8:66:de:3d:2a:95:63:d4:
0d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3A:92:4A:5B:4B:A5:DD:76:BE:DE:5A:79:E7:27:A0:B0:03:FD:11
X509v3 Authority Key Identifier:
keyid:32:50:7F:9E:07:8B:E8:99:32:E9:1B:23:AC:F8:82:AB:46:7C:6A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/OjqSSltLpd12vt5aeecnoLAD_RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.144.0/20
Signature Algorithm: sha256WithRSAEncryption
40:6d:15:e9:9a:03:e1:96:15:b7:63:2b:46:96:9d:13:3f:65:
0b:e9:5a:86:97:fa:ac:5c:a7:04:83:32:7f:79:0c:63:c9:9f:
5f:e5:dc:9e:52:07:51:28:5d:fd:b5:15:83:2d:52:e7:b1:d6:
f2:6d:01:39:e6:03:1a:31:89:70:22:b7:7d:0f:18:4d:a6:37:
3c:a9:43:c3:33:40:21:43:e3:83:ea:dc:97:52:60:41:59:e6:
76:63:ed:59:6c:0a:8d:54:75:5b:73:d8:92:4b:2c:aa:df:2d:
49:09:84:e2:fc:2d:61:36:96:5c:2b:de:4e:b7:bf:ca:f3:a0:
8a:5e:47:0d:72:f0:d2:62:76:04:a9:50:8b:0f:a5:13:09:9e:
b1:89:9b:dd:d4:52:7e:56:ff:64:b4:25:51:fa:bb:df:83:46:
a9:12:01:f8:fb:c6:6d:67:2d:b8:d1:5f:ef:43:1b:3b:ec:a5:
6c:b6:08:99:29:5a:e2:fd:af:f8:fd:1b:ae:39:14:68:31:0c:
b2:da:14:f4:f5:f6:50:22:39:69:aa:dd:90:75:0a:66:a8:20:
5c:9d:54:13:af:8c:99:3e:f8:5f:e9:50:38:d5:ef:32:b2:3e:
e1:48:9e:92:1b:0e:33:4f:fd:1e:f8:94:6f:96:c3:2e:92:53:
46:77:c6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:52 2024 by rpki-client on console-ams.rpki-client.org