Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/8SeTeqltFfp-EZMPC8z5JAmD9wE.roa
File: 8SeTeqltFfp-EZMPC8z5JAmD9wE.roa (raw, json)
Hash identifier: vLo4S5zuUjui/zzzQpxkGbfA2RYIsCpuzbQGtfgArRU=
Subject key identifier: F1:27:93:7A:A9:6D:15:FA:7E:11:93:0F:0B:CC:F9:24:09:83:F7:01
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018B482DFFCC94838F01D8DCC24A92E9D7CE
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/8SeTeqltFfp-EZMPC8z5JAmD9wE.roa
Signing time: Thu 19 Oct 2023 13:44:15 +0000
ROA not before: Thu 19 Oct 2023 13:44:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62633
IP address blocks: 46.249.112.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:48:2d:ff:cc:94:83:8f:01:d8:dc:c2:4a:92:e9:d7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Oct 19 13:44:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f127937aa96d15fa7e11930f0bccf9240983f701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bc:bc:26:da:e2:fe:d6:f7:2b:bf:b3:7d:bd:
d7:fb:9c:82:27:63:d4:33:ff:2f:26:00:df:6e:24:
ec:f4:21:99:aa:ec:af:59:4c:dd:76:f5:5f:0c:67:
ff:1c:7e:1b:60:51:d1:19:2a:ef:aa:11:be:c0:fb:
28:9b:2f:e7:3e:55:4a:aa:57:70:de:c7:21:12:c7:
55:cf:64:50:c6:f8:88:7a:fb:d9:ca:78:bd:06:67:
5b:f8:7e:fa:73:a4:e6:29:d5:09:f9:fd:38:7e:7c:
49:f2:c3:63:27:0e:8c:47:69:ee:2a:09:26:3d:ca:
a9:1c:8e:8f:19:73:b1:d9:5e:b3:e0:b5:43:31:49:
9a:d3:20:34:ef:37:b7:93:b3:15:9d:2c:5b:a7:a2:
ef:24:ad:15:ea:15:54:bb:b4:d7:9b:c3:be:02:d5:
ba:bd:73:8f:b7:af:cf:1e:a2:6c:f8:a0:01:bc:04:
ab:79:2c:36:6e:f0:0c:69:6a:ca:ad:b9:2a:c4:97:
24:9c:7f:5b:b9:17:90:49:b9:88:f6:59:72:06:24:
4d:b0:07:72:16:e6:0b:a6:90:9d:80:e8:be:9e:c5:
f1:e0:d9:e4:11:03:7b:88:61:c2:b4:fa:ea:09:9d:
1b:6a:3f:f0:0f:38:6d:96:25:6f:9c:9e:0f:81:77:
e8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:27:93:7A:A9:6D:15:FA:7E:11:93:0F:0B:CC:F9:24:09:83:F7:01
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/8SeTeqltFfp-EZMPC8z5JAmD9wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.112.0/22
Signature Algorithm: sha256WithRSAEncryption
32:35:6a:61:da:7f:92:d1:d4:8c:6a:3c:63:8a:d7:8d:03:e5:
4d:8c:5f:bc:54:b8:d4:b5:39:bd:74:c0:90:a7:8d:b1:32:1b:
10:73:43:d5:76:9b:a4:2e:83:84:c1:a5:93:8b:84:cd:c7:66:
f3:36:90:b0:ed:4e:23:15:fa:92:7f:ea:87:3b:43:9b:28:f9:
a3:7e:62:77:37:e8:e4:a9:63:43:b0:cd:7e:de:f8:58:bc:3e:
77:70:49:f2:36:e2:9d:91:2b:b0:e4:e8:eb:79:dc:ec:a7:5d:
71:99:f0:50:9f:d3:b0:10:6c:4a:ad:12:86:b3:9b:4e:3e:a4:
38:c9:77:84:9d:c5:8f:5a:14:96:e8:7d:83:b3:a8:82:0b:a6:
c3:4f:f4:57:2a:9e:14:dc:cf:2a:02:3d:2d:61:31:69:0b:c7:
7b:d8:ad:ee:e0:54:d9:c7:2a:5f:41:6e:0b:67:6e:80:f2:7e:
94:a3:b2:36:95:76:13:e2:e7:5a:77:51:d5:f0:87:ba:e1:3f:
a6:2b:dc:d1:aa:ba:da:4e:36:5f:e2:31:ec:9f:f8:d6:b6:e6:
55:29:7d:a7:c8:e6:28:b9:75:a3:3a:65:ea:ce:eb:27:c8:c0:
97:ed:1f:e0:bd:31:11:90:97:8d:e5:96:c5:f0:8c:c6:f3:48:
98:d8:99:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 14:13:42 2023 by rpki-client on console-fra.rpki-client.org