Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/b1b7q852ftWh_z2wQiwJIskRkbM.roa
File: b1b7q852ftWh_z2wQiwJIskRkbM.roa (raw, json)
Hash identifier: ntA+WHNx5o/QRVTaht4rUo8MLj8zugLNlBCGHLm3Asc=
Subject key identifier: 6F:56:FB:AB:CE:76:7E:D5:A1:FF:3D:B0:42:2C:09:22:C9:11:91:B3
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0185727A2CF2765AFDF848A5300E3A0666A2
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/b1b7q852ftWh_z2wQiwJIskRkbM.roa
Signing time: Mon 02 Jan 2023 12:34:47 +0000
ROA not before: Mon 02 Jan 2023 12:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8220
IP address blocks: 46.249.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:7a:2c:f2:76:5a:fd:f8:48:a5:30:0e:3a:06:66:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f56fbabce767ed5a1ff3db0422c0922c91191b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:c0:22:d9:f9:dc:7f:14:c8:ac:ed:c7:aa:
71:b2:c9:96:93:c9:5c:54:38:c3:fd:11:3c:6c:7a:
22:3b:61:c4:90:89:fe:84:29:0b:1f:52:1e:41:06:
02:1a:00:08:16:b4:21:8d:10:b8:00:ca:e8:51:0c:
39:71:ab:8d:50:95:4c:29:ec:b4:d9:b6:e5:db:f2:
00:f4:c8:d3:f0:59:9a:ce:08:8c:af:97:e4:15:85:
27:f9:df:ee:46:26:9f:e3:ac:c3:5b:ad:61:d9:1b:
b2:32:6b:2b:d4:48:8c:0c:10:bd:76:e6:6a:5d:2d:
8f:0a:6e:f1:85:48:d1:b0:ca:54:ef:5c:db:d7:89:
13:3a:78:46:62:f5:61:7c:bb:09:96:23:c4:29:39:
0e:73:fa:fc:14:cd:82:e0:47:d0:52:79:87:f5:d5:
c6:06:3b:5a:ee:61:b5:f8:b1:8c:cc:ce:e5:91:6f:
b0:15:9a:c6:19:c3:11:78:3a:11:b3:f5:2c:ea:b2:
4a:3e:ce:03:86:d1:89:c1:f6:bd:8a:14:5e:37:e9:
75:1f:5e:53:3c:86:49:3c:0c:d7:7b:20:c7:97:40:
ba:23:7b:1d:01:4d:a6:0a:c2:c4:23:fe:e5:ae:5f:
0c:8d:fa:63:38:c0:10:c6:21:9a:e9:17:30:b5:36:
d6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:56:FB:AB:CE:76:7E:D5:A1:FF:3D:B0:42:2C:09:22:C9:11:91:B3
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/b1b7q852ftWh_z2wQiwJIskRkbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.97.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:09:6c:5e:71:a8:ed:22:35:87:57:dc:43:f0:d2:9b:e8:c3:
e2:92:35:80:f9:fd:f1:d4:bf:b4:1f:34:5c:97:a8:df:71:23:
c9:17:d3:93:19:ee:39:11:99:e4:f8:3d:2a:93:5f:04:8c:41:
2b:ce:f9:9a:b9:4b:c9:01:9b:e7:b1:1e:59:55:87:a4:8b:60:
73:30:6b:5b:c3:c9:74:ee:9d:24:e8:11:98:6b:26:2d:9c:e3:
df:29:18:1d:80:ed:ab:6f:2e:6a:e9:ff:bf:92:70:e7:af:f3:
84:40:c5:26:70:a6:d2:8b:97:dc:0d:7a:69:e3:74:ef:6b:36:
49:53:b9:fd:ef:9f:af:3b:fb:0c:25:2a:1f:0a:55:80:ff:5a:
a1:c8:46:ee:75:7b:54:5e:a3:e2:46:6e:65:45:43:64:5f:6f:
8b:cb:15:3b:6d:5c:43:84:68:cf:6f:1e:4e:41:71:d2:e8:fd:
0b:28:ee:f1:19:7e:8e:32:db:55:8e:09:73:83:82:68:a6:28:
88:eb:bf:90:6a:20:40:af:79:ea:5a:bc:7e:19:eb:06:d6:02:
0e:25:c1:dd:a3:af:84:16:c5:a1:f3:fa:62:78:78:10:20:26:
93:03:c0:0b:28:10:a7:10:0d:d9:62:42:c7:da:26:d7:af:ea:
79:07:40:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:24 2024 by rpki-client on console-ams.rpki-client.org