Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/UTVnIzi5moq-Vpm7BHFJpQguEEA.roa
File: UTVnIzi5moq-Vpm7BHFJpQguEEA.roa (raw, json)
Hash identifier: 2h9fC4N1mtUIzgY5PjciSGtsVZrrqY8Gkj2YZwcG4Cg=
Subject key identifier: 51:35:67:23:38:B9:9A:8A:BE:56:99:BB:04:71:49:A5:08:2E:10:40
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018AAD5E41B7427319761AB61DE1A0C4240B
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/UTVnIzi5moq-Vpm7BHFJpQguEEA.roa
Signing time: Tue 19 Sep 2023 12:15:50 +0000
ROA not before: Tue 19 Sep 2023 12:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24875
IP address blocks: 46.249.104.0/23 maxlen: 24
46.249.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:5e:41:b7:42:73:19:76:1a:b6:1d:e1:a0:c4:24:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Sep 19 12:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5135672338b99a8abe5699bb047149a5082e1040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c5:27:fe:1a:d8:df:25:11:b7:48:72:7d:9e:
d0:2a:d3:e7:46:f4:77:31:ca:98:85:e4:a1:03:2b:
c5:a0:53:5d:e5:78:9e:d8:fe:08:cb:3f:4a:75:f9:
44:b1:76:5d:ef:96:a2:15:2b:5e:b1:d3:33:ad:87:
91:76:e2:28:92:73:d5:a8:24:74:8a:87:3b:32:7a:
25:fa:9b:bb:2f:da:74:1c:ac:d8:d0:55:06:f2:b3:
45:72:d9:2f:f3:30:74:63:5f:ee:03:3a:80:a8:7c:
4b:a7:ef:06:0d:2e:1c:72:9e:fb:d3:ff:c7:bd:65:
c3:89:58:7d:59:4a:2b:dc:69:64:4e:f6:cb:ca:4e:
79:f1:94:a2:97:87:8b:94:fe:71:92:97:8c:68:38:
1e:c1:b0:2d:76:a5:dc:7a:71:fe:e1:13:40:d3:36:
c0:fa:7c:d0:ff:3a:89:96:2f:74:5a:e9:74:c2:38:
53:32:51:87:db:c7:9b:8b:95:94:d2:ac:ed:c8:e1:
82:15:ca:80:df:d3:2c:e7:87:77:79:93:4a:ab:bf:
9d:94:df:06:3f:d5:c0:69:1d:7f:10:d3:ba:d7:77:
0b:78:5d:ad:22:d1:ef:e8:49:17:9f:2a:85:20:11:
df:a9:e5:8c:1d:d2:fd:7a:b5:5c:e5:2b:ee:f0:bb:
3b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:35:67:23:38:B9:9A:8A:BE:56:99:BB:04:71:49:A5:08:2E:10:40
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/UTVnIzi5moq-Vpm7BHFJpQguEEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.104.0-46.249.106.255
Signature Algorithm: sha256WithRSAEncryption
b0:fb:28:fe:19:3f:a1:84:fc:4f:76:c8:41:7c:c7:bc:09:b1:
9d:c0:84:b0:73:ca:ea:41:27:ed:48:96:10:c4:2b:ac:cb:ee:
13:79:78:8e:7a:ab:b3:dc:e4:47:e6:78:6e:36:65:0f:ff:e5:
5b:21:31:bc:0d:69:61:d2:59:9c:53:44:fe:e8:46:0c:7f:d2:
89:92:74:66:75:a7:26:67:39:c9:2a:73:51:d3:5a:85:f2:74:
52:d9:08:35:68:dc:b2:71:36:9e:b8:fe:f2:8e:a0:42:18:03:
9a:4e:77:46:71:21:de:99:cf:b2:aa:38:89:1b:18:ec:dd:36:
14:2b:10:32:ac:2c:6d:65:08:63:56:97:5e:c2:36:9f:96:fc:
76:dd:f8:c9:ee:7e:54:eb:45:7c:f7:52:57:c5:9d:ac:5b:fb:
69:6d:8e:98:53:70:84:d5:8c:9f:a0:96:dd:75:24:8f:8d:95:
d0:b6:be:a8:de:3e:a9:46:52:a1:8b:72:d4:ce:46:6a:23:c1:
9a:90:58:e0:1d:5a:78:7a:dd:40:31:32:5e:0b:70:a3:35:d9:
e3:2c:e8:04:f0:e7:7f:1d:30:94:e3:b1:6a:6d:2b:4f:53:43:
04:3c:bd:42:70:51:a2:c5:6b:8a:d1:f0:aa:c9:db:2d:e7:0f:
ff:27:a4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 14:07:10 2023 by rpki-client on console-fra.rpki-client.org