Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/BOatuimuqncnqIa7X92gaQZNl-8.roa
File: BOatuimuqncnqIa7X92gaQZNl-8.roa (raw, json)
Hash identifier: DJXZKKu8ymQlpAmGsHz03JGiBvy17v/bu4P6xonfW7Q=
Subject key identifier: 04:E6:AD:BA:29:AE:AA:77:27:A8:86:BB:5F:DD:A0:69:06:4D:97:EF
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0187BD66C4F5A17B8580E04FDCEEDCE173D9
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/BOatuimuqncnqIa7X92gaQZNl-8.roa
Signing time: Wed 26 Apr 2023 11:50:41 +0000
ROA not before: Wed 26 Apr 2023 11:50:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.249.104.0/22 maxlen: 22
46.249.112.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bd:66:c4:f5:a1:7b:85:80:e0:4f:dc:ee:dc:e1:73:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Apr 26 11:50:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04e6adba29aeaa7727a886bb5fdda069064d97ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:62:f3:b7:b9:61:4c:dd:96:63:9c:c5:d7:71:
3f:97:5b:74:02:23:35:f9:4a:c0:ef:1b:79:86:b7:
fa:d8:b2:b4:8c:a2:50:0e:85:91:04:c5:eb:f3:91:
21:d6:5d:0f:9b:15:ed:44:4d:f3:80:69:f8:a3:6a:
42:6c:5b:6c:f4:42:b0:70:fc:89:d4:4a:64:b8:d7:
fc:15:0b:98:a0:f6:14:8c:76:f6:9c:77:5c:08:74:
1f:3b:8c:e1:79:f9:af:3a:98:46:03:65:15:e9:41:
28:8c:2e:79:34:b6:dc:a8:de:78:e1:5b:52:bb:b3:
76:5c:0f:6a:63:26:3b:29:d1:4b:e0:67:30:df:7d:
c0:27:b4:29:ce:71:fe:59:fb:c3:f1:11:cc:b3:3b:
1f:09:e8:89:0d:a5:15:92:8b:94:a6:5e:4f:e1:71:
9b:65:02:b6:39:cf:ff:25:1c:70:9f:1a:5a:96:bd:
a8:01:5e:24:5a:45:9b:b8:55:af:3e:05:2a:fc:1f:
ab:53:e7:79:b7:42:e0:d8:6e:b2:25:21:18:0f:ca:
51:c7:7c:6c:7c:a4:f1:68:da:80:b3:eb:1e:4f:ad:
78:9f:cb:c0:9d:f0:14:c4:8f:3a:37:fe:f0:0c:8b:
d3:71:5d:99:b2:2b:bc:12:f9:3b:06:5e:b2:80:d5:
8c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E6:AD:BA:29:AE:AA:77:27:A8:86:BB:5F:DD:A0:69:06:4D:97:EF
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/BOatuimuqncnqIa7X92gaQZNl-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.104.0/22
46.249.112.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:1b:4e:3c:b9:58:53:29:1a:cc:e5:ac:01:a8:60:ac:dd:f1:
3a:ff:9b:6b:56:7a:38:36:28:84:e9:09:e0:c7:27:c7:9c:0b:
90:40:cc:5f:bb:22:e0:00:8c:34:13:44:e0:68:18:51:30:51:
9a:bc:b5:ee:c5:97:9e:33:6e:1d:60:46:f6:8c:96:1c:90:2f:
14:72:14:32:65:ad:80:8e:64:85:a9:1b:f1:75:ae:1a:11:6c:
77:50:3d:31:49:05:0c:62:e3:49:c1:c0:82:dd:63:45:09:c1:
eb:92:b7:c5:96:77:fa:33:5d:32:5f:c4:e3:ea:97:7b:e8:b1:
4e:52:ca:6f:1d:3f:11:89:42:97:01:fc:c6:4c:df:e0:ca:11:
4d:cd:11:ad:a8:4f:da:ce:11:6f:69:21:42:8f:06:45:5e:68:
07:cd:2f:9d:77:ce:26:56:a0:31:ab:dc:0e:3f:2b:5a:af:83:
9a:0e:0a:ff:ef:85:57:61:17:5a:ef:05:97:2e:2d:6c:a9:c4:
48:f3:3f:4d:06:79:70:a9:77:8d:da:21:03:7b:ba:72:0c:02:
6a:12:fb:f4:71:9a:fc:b3:5b:b8:1a:e3:c8:89:de:39:07:18:
93:38:72:39:cd:82:61:6c:10:b9:ba:c7:45:69:85:e4:b7:dc:
68:4f:fc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:42 2023 by rpki-client on console-fra.rpki-client.org