Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1-hE8OuZlwrKxV6wNhO6haiE9dko.roa
File: 1-hE8OuZlwrKxV6wNhO6haiE9dko.roa (raw, json)
Hash identifier: PhzHyPaHqgzjrkEb9yb/EAisRURJAFX5IedYNlTNcQk=
Subject key identifier: FA:11:3C:3A:E6:65:C2:B2:B1:57:AC:0D:84:EE:A1:6A:21:3D:76:4A
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018A9415A5FCF8BF414A61EE7B63111DBB84
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1-hE8OuZlwrKxV6wNhO6haiE9dko.roa
Signing time: Thu 14 Sep 2023 14:26:01 +0000
ROA not before: Thu 14 Sep 2023 14:26:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212027
IP address blocks: 46.249.112.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:94:15:a5:fc:f8:bf:41:4a:61:ee:7b:63:11:1d:bb:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Sep 14 14:26:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa113c3ae665c2b2b157ac0d84eea16a213d764a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b3:fc:60:3f:cc:9d:06:3c:fa:6c:dc:22:43:
d0:96:cb:60:83:e5:13:a5:33:67:75:23:02:51:69:
8c:f6:10:ba:cb:22:c8:82:ab:6e:6e:1a:6d:1c:22:
3c:5b:dc:9e:e8:a1:e3:75:db:00:5e:1f:21:4d:65:
2a:50:6c:ab:7e:27:30:a4:df:69:f5:c8:db:c8:d4:
6c:4b:0e:9e:28:46:dd:5e:98:2e:84:a7:fd:1c:da:
99:c6:d9:8f:66:86:d5:6b:c2:9d:27:d3:11:0a:e7:
43:70:02:54:93:2b:5a:b6:58:62:b4:31:fe:2d:a8:
82:2a:42:29:1d:68:54:c7:e0:a0:01:d2:76:e8:55:
5c:64:80:7e:e1:1e:51:c9:58:42:14:96:fc:52:6c:
69:80:da:a5:b4:4f:58:39:c5:d9:c4:ea:ef:b7:be:
6a:8b:95:9b:ee:4b:ac:85:21:68:09:6c:1a:fb:38:
a8:1c:2d:59:8c:9f:64:39:d8:58:04:17:a0:c3:70:
d5:93:77:73:1d:f1:f4:55:39:55:1b:86:e5:af:fe:
df:59:6a:95:2b:b7:e7:93:84:58:77:fb:6c:b8:cf:
48:6c:32:d5:89:60:36:b6:e6:c8:ea:27:29:91:e3:
7c:30:1c:d0:12:a8:ce:5f:fe:2d:33:92:04:18:83:
8b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:11:3C:3A:E6:65:C2:B2:B1:57:AC:0D:84:EE:A1:6A:21:3D:76:4A
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/1-hE8OuZlwrKxV6wNhO6haiE9dko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.112.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:60:7d:1c:4d:4d:f9:63:09:64:16:3e:27:6b:81:c1:42:e5:
78:66:77:cf:43:b4:f4:56:dd:44:47:57:f2:7e:5c:87:17:41:
af:40:44:00:16:4a:9c:a3:2c:3c:65:21:36:0c:92:b0:2d:29:
83:5a:78:05:d4:97:9e:1f:bd:c6:e6:5a:e0:f7:ef:e7:01:84:
38:65:62:7e:09:e0:3d:7e:09:db:da:2f:63:ab:03:e7:d6:37:
1c:6f:ca:5f:65:e7:06:1f:b3:a3:97:d6:9b:2e:3a:31:44:24:
b3:67:34:4b:2f:61:46:e8:22:47:7b:be:e1:74:b9:63:d9:0f:
7b:9a:86:37:00:51:fe:70:5c:a9:61:4c:3f:53:4d:2f:c9:96:
a6:df:8d:a9:a9:a2:de:b8:fa:04:d9:10:06:08:72:a7:c7:ed:
b8:08:28:60:17:0b:30:1f:59:01:3a:5e:b5:15:1b:96:6c:0e:
33:50:c0:0d:85:d5:f9:ce:4b:b7:a4:c1:9b:e8:f4:13:e8:70:
51:23:4c:13:7b:63:49:58:f2:28:e7:f0:48:1e:e4:95:e6:15:
69:90:ff:e0:40:a3:4c:da:b5:f7:2d:d5:8b:68:12:50:1d:db:
42:70:e5:4f:f0:07:ac:aa:3e:5a:08:0d:76:14:a2:d6:80:14:
b1:54:a8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 16 14:53:15 2023 by rpki-client on console-fra.rpki-client.org