Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/3tAfLJ2R0Rkgdu6A9IF_xJ__y_g.roa
File: 3tAfLJ2R0Rkgdu6A9IF_xJ__y_g.roa (raw, json)
Hash identifier: H2F0uWJjYzzsavqXX8t+Gf+Rh1ToaIiI0BYtu2szYVM=
Subject key identifier: DE:D0:1F:2C:9D:91:D1:19:20:76:EE:80:F4:81:7F:C4:9F:FF:CB:F8
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0187B1D50DC9B98B3CA984762BA91AE7983E
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/3tAfLJ2R0Rkgdu6A9IF_xJ__y_g.roa
Signing time: Mon 24 Apr 2023 05:55:42 +0000
ROA not before: Mon 24 Apr 2023 05:55:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 46.249.116.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b1:d5:0d:c9:b9:8b:3c:a9:84:76:2b:a9:1a:e7:98:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Apr 24 05:55:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ded01f2c9d91d1192076ee80f4817fc49fffcbf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dd:26:08:22:2e:77:e1:a6:d6:2d:6f:80:bb:
28:9a:5b:bd:9f:82:60:c8:9a:56:94:11:15:2e:56:
e6:2d:19:59:c9:ab:bc:65:91:80:e5:83:11:a9:0b:
cb:b9:f4:25:f1:d9:ea:4e:ca:fc:3b:43:2f:d1:2f:
79:00:3d:c9:f6:b8:1f:a1:03:35:34:b4:14:be:e6:
e1:9b:9d:86:7b:68:d8:ec:98:a4:fa:17:f5:0a:01:
6a:f5:de:1a:ca:31:e7:f8:4b:c8:b8:e2:ce:34:fb:
35:c1:56:00:ae:e3:32:e1:66:8c:5d:b3:ea:b4:5b:
f0:65:f8:d2:ea:9a:2a:23:be:c6:d8:96:66:cb:f4:
a6:59:ac:cd:2b:0b:b7:e9:5a:1a:c7:d3:0a:25:98:
05:b3:59:30:f7:7a:b4:14:cb:fb:f4:aa:82:e0:2d:
7f:7a:59:a2:e8:f4:56:4f:57:dc:8b:23:ae:64:3f:
04:64:fc:e9:89:4b:78:ec:92:65:a1:ad:19:ec:50:
74:c0:2b:25:91:a0:45:e6:ee:b7:9b:2b:a7:41:29:
43:c8:37:2d:88:5a:bc:58:98:fd:ff:e9:3c:c6:05:
e7:93:bc:c0:eb:00:1b:d5:db:c9:6e:34:24:94:c5:
23:ea:49:06:3f:ca:73:0b:80:17:4f:18:8a:65:a2:
64:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D0:1F:2C:9D:91:D1:19:20:76:EE:80:F4:81:7F:C4:9F:FF:CB:F8
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/3tAfLJ2R0Rkgdu6A9IF_xJ__y_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.116.0/22
Signature Algorithm: sha256WithRSAEncryption
66:ad:05:6f:53:44:2a:ec:19:53:72:c7:a6:21:76:06:24:1d:
2f:89:c4:6f:53:15:56:0f:27:16:a2:7b:8c:04:fb:5f:89:51:
8b:41:98:e3:71:5a:b0:45:fe:3b:b5:59:9e:f8:86:35:3b:76:
b7:d5:30:b2:b1:40:3f:f7:8b:19:f9:ab:d8:de:b8:c8:2e:eb:
9d:5d:95:8e:4d:a8:18:d3:7d:fa:08:3c:34:0f:00:f9:69:5a:
97:9c:40:8b:a4:98:b7:c6:e8:aa:df:b7:d6:48:6f:5e:4b:e3:
78:37:b0:94:9f:e2:30:ed:42:88:f1:f7:fb:83:20:fd:97:c0:
e9:68:db:17:09:9c:f9:eb:4e:e1:4c:32:d1:fa:00:9d:4a:98:
ec:22:f4:d2:bf:b3:eb:be:f7:0a:60:59:67:c1:07:ae:88:7d:
22:47:5a:76:69:11:40:19:ce:9a:f4:2e:3d:a4:19:f3:76:43:
23:cf:90:c6:73:61:4d:91:4e:e3:08:f8:65:51:27:56:5f:e4:
fa:62:76:80:73:e0:9d:5d:6c:d5:5f:d1:9b:99:88:25:c8:8a:
98:2b:7a:91:76:c5:fc:25:5f:16:75:ca:f9:70:0f:61:00:bb:
53:1b:de:71:64:d5:1b:b0:8a:af:10:45:0a:82:ce:81:a7:56:
74:f9:0e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 16:16:11 2023 by rpki-client on console-ams.rpki-client.org