Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/6FGWH0nDJmjDbubWceG2NAI582I.roa
File: 6FGWH0nDJmjDbubWceG2NAI582I.roa (raw, json)
Hash identifier: bJNK77zU3Wk2Pmeihl/pmtQzqkDMmKDIP/IX27GLFG8=
Subject key identifier: E8:51:96:1F:49:C3:26:68:C3:6E:E6:D6:71:E1:B6:34:02:39:F3:62
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018BE12D420CE1EBBDD12FC5A1ECA002CF2A
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/6FGWH0nDJmjDbubWceG2NAI582I.roa
Signing time: Sat 18 Nov 2023 06:45:21 +0000
ROA not before: Sat 18 Nov 2023 06:45:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57175
IP address blocks: 82.115.8.0/23 maxlen: 24
46.249.98.0/23 maxlen: 24
46.249.108.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e1:2d:42:0c:e1:eb:bd:d1:2f:c5:a1:ec:a0:02:cf:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Nov 18 06:45:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e851961f49c32668c36ee6d671e1b6340239f362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c5:8f:76:0a:69:93:f7:7f:04:47:f3:00:64:
e8:ec:41:59:b8:b1:37:d3:d7:78:35:f8:08:17:ce:
e4:41:41:d4:84:76:2e:fd:ec:e5:0a:fa:6e:2b:41:
a6:f6:7a:fb:e6:cd:99:fc:13:1c:1c:40:eb:cf:26:
c6:6d:11:00:96:c0:3c:3b:3b:72:38:1c:43:07:f9:
9c:f3:7d:61:fe:d3:f3:9a:c2:99:05:85:0b:a0:26:
5d:eb:22:2d:1e:1a:32:4b:fb:8c:bc:62:8f:74:67:
ef:8a:65:b1:17:56:72:86:a3:37:3d:00:c8:c7:1e:
d2:01:70:68:29:35:de:79:97:e0:8a:05:ff:4a:fa:
7a:85:29:c1:9c:6d:e3:81:59:84:15:57:58:22:62:
42:5f:cd:3c:b8:a8:fa:85:36:ad:b6:47:48:b0:f9:
9a:39:82:07:52:7a:3e:6c:de:10:04:bd:6a:dd:d5:
fa:a5:0f:6c:50:25:62:e6:e1:c8:45:02:b8:fc:2b:
83:e4:b1:8f:6e:9e:09:e8:a5:db:7f:0c:8a:53:d9:
01:8f:e6:c5:6a:af:ba:f9:e0:0a:ea:42:a9:0f:fa:
eb:74:45:aa:e8:82:ba:ea:eb:62:8e:ce:94:db:07:
64:8e:58:16:24:97:fd:58:dc:f2:ac:67:a2:db:ca:
81:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:51:96:1F:49:C3:26:68:C3:6E:E6:D6:71:E1:B6:34:02:39:F3:62
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/6FGWH0nDJmjDbubWceG2NAI582I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.98.0/23
46.249.108.0/23
82.115.8.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:3f:f9:39:9f:53:cd:4c:69:56:31:1a:99:2b:2a:0c:e2:a6:
ce:77:21:92:19:95:b4:62:59:6f:66:84:97:c4:c9:f2:8f:e5:
cb:2e:c6:7c:e7:a0:e5:d1:89:91:33:c6:ee:d3:f7:8d:a5:2f:
2e:69:7e:77:25:8b:ab:ce:d9:82:d8:75:96:56:23:df:92:e3:
c0:fa:12:04:cd:d2:64:47:2e:84:ce:db:d0:61:1c:21:98:04:
2c:0a:47:b2:d8:78:14:77:47:eb:0a:6d:6d:cb:6b:b7:39:4b:
f0:1c:80:2f:1f:e6:9a:0e:ae:bb:f9:3d:77:5e:34:6a:86:c3:
ff:b2:42:7f:15:23:67:01:0a:e2:7e:55:2d:96:df:04:3c:a0:
01:3f:9e:5f:ed:7c:ed:4a:06:92:c3:80:c2:43:74:15:e8:1e:
6f:ab:e6:46:d0:aa:a4:9b:cd:71:5e:fa:2b:e0:18:b6:24:02:
50:29:94:c2:25:9a:6f:92:ed:b8:d7:24:3c:73:1e:5b:99:a4:
69:6d:a7:75:fe:36:a2:c7:1b:9e:7b:03:f6:22:e2:7f:48:ea:
65:d9:e5:31:22:83:e2:1b:16:29:0f:eb:d5:1e:91:20:f1:19:
f2:06:ab:5d:a5:8c:5b:c8:c7:4e:5f:8b:3a:f4:cc:c4:4f:8f:
cc:73:67:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 18 08:50:15 2023 by rpki-client on console-fra.rpki-client.org