Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/_li0KjTLWdM8MlRlEL3j3_cyUQU.roa
File: _li0KjTLWdM8MlRlEL3j3_cyUQU.roa (raw, json)
Hash identifier: hMnidkqLBy3QFhgA+vRE9EyGW52qKjKgd7nNlnb/Oeo=
Subject key identifier: FE:58:B4:2A:34:CB:59:D3:3C:32:54:65:10:BD:E3:DF:F7:32:51:05
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018692CC91710F3A001F2F0819B3457FF364
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/_li0KjTLWdM8MlRlEL3j3_cyUQU.roa
Signing time: Mon 27 Feb 2023 12:15:25 +0000
ROA not before: Mon 27 Feb 2023 12:15:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49901
IP address blocks: 46.249.98.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:cc:91:71:0f:3a:00:1f:2f:08:19:b3:45:7f:f3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 27 12:15:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe58b42a34cb59d33c32546510bde3dff7325105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:23:64:55:58:b3:cd:ed:77:45:80:f3:bf:
c8:4c:56:84:30:d3:c2:2c:b2:e7:de:0c:66:0c:e3:
97:cf:f2:c3:f3:07:a7:a4:66:9a:bc:a4:78:ab:af:
1f:66:f1:df:4c:0c:ad:3a:6f:b1:4d:dd:47:6a:d1:
05:6f:20:a7:23:78:50:92:b1:7b:bc:c0:77:df:68:
2d:2a:b3:4f:d3:9d:45:85:ac:d2:49:23:41:c3:74:
5e:40:86:45:29:b9:65:8b:e1:7f:6e:eb:06:ef:04:
78:4c:eb:b3:47:ce:dc:c4:b6:59:43:c4:dc:e8:a6:
a8:2a:6a:f8:0c:53:ff:da:4a:b9:4a:ea:d6:fe:ff:
2d:37:e2:50:eb:b3:f4:8c:82:94:37:6a:69:58:7f:
a8:3a:48:ab:56:3b:c6:4f:d1:c8:00:6d:79:56:38:
5b:58:14:24:24:d9:69:af:80:9e:1d:65:c5:5a:cf:
48:b0:a9:46:30:5c:83:87:d3:d0:1d:39:4d:f8:98:
cc:c1:6d:29:36:69:56:41:1b:fa:d5:5c:f6:d4:14:
91:ab:10:98:30:18:e3:97:b3:68:59:78:3f:31:65:
af:71:c4:3d:dd:17:e8:e8:fb:c2:0f:f5:63:be:2e:
9d:6c:08:88:41:a8:c7:e3:3e:ee:06:4e:4e:12:5b:
99:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:58:B4:2A:34:CB:59:D3:3C:32:54:65:10:BD:E3:DF:F7:32:51:05
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/_li0KjTLWdM8MlRlEL3j3_cyUQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.98.0/23
Signature Algorithm: sha256WithRSAEncryption
d9:51:c5:5c:33:50:d5:ac:81:1c:bb:8a:62:3d:9f:00:f7:0e:
f5:44:e2:1f:51:e0:27:49:39:5e:8e:3b:89:7b:42:7d:7f:5a:
25:4f:2a:bc:52:cc:cf:4f:89:4c:90:25:73:75:06:70:ac:42:
63:ef:eb:49:61:d5:6c:82:8b:de:0f:f5:93:93:f4:00:5c:35:
bb:6f:65:0c:66:fb:e5:10:a0:81:57:8d:5f:c9:67:2c:e0:c6:
59:2a:77:f3:cf:18:1a:3d:32:7f:2a:78:79:06:56:5e:8c:7e:
96:c4:bb:2a:a4:17:31:8f:d6:e9:97:ca:a4:ef:d2:46:e7:c3:
00:da:b2:c6:32:5f:0f:46:3b:80:60:bf:49:14:1e:87:a9:41:
6c:a7:8d:1f:1a:8c:f8:26:89:ef:85:ac:fe:47:5e:f4:41:73:
18:59:82:a5:b3:54:47:e4:bf:94:49:97:d5:90:cb:0b:4c:ba:
c2:ea:78:9b:ae:8d:22:fe:ed:08:59:60:b8:36:f4:04:0e:3c:
b3:ba:d6:95:9c:a8:17:8f:f0:0f:db:16:7e:24:e2:32:d3:5c:
64:6d:da:87:98:e5:d9:f2:5d:bd:24:78:48:45:44:90:d1:84:
e1:6c:bc:13:27:57:00:64:c1:06:c5:0e:c9:09:32:76:57:a8:
45:29:75:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 25 06:10:11 2023 by rpki-client on console-ams.rpki-client.org