Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/oS5gKbUihYuCFhiow55JHYOmAv8.roa
File: oS5gKbUihYuCFhiow55JHYOmAv8.roa (raw, json)
Hash identifier: gJu0H9L7IbeWoyPkb6ctsP3mS2YBJ96/YPnVhXG18wc=
Subject key identifier: A1:2E:60:29:B5:22:85:8B:82:16:18:A8:C3:9E:49:1D:83:A6:02:FF
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018BE1651AD30326F051F1C0D7F7B09DF538
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/oS5gKbUihYuCFhiow55JHYOmAv8.roa
Signing time: Sat 18 Nov 2023 07:46:21 +0000
ROA not before: Sat 18 Nov 2023 07:46:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 82.115.10.0/23 maxlen: 24
46.249.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e1:65:1a:d3:03:26:f0:51:f1:c0:d7:f7:b0:9d:f5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Nov 18 07:46:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a12e6029b522858b821618a8c39e491d83a602ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:93:c7:8d:f4:69:3d:6b:c2:3a:ec:17:24:ac:
5e:8b:51:63:05:31:71:69:8c:33:5e:5d:93:42:79:
f0:0e:eb:8b:29:70:c8:bd:68:b2:c3:1f:a3:ec:e5:
a3:02:b3:f7:6b:40:8b:d9:c0:b9:89:48:c5:bd:24:
d4:2a:7b:ac:b8:ff:d4:5f:6c:86:f1:53:3e:65:8f:
6d:a0:2c:bd:99:d3:ac:8c:35:7d:31:4e:fe:2d:86:
0f:57:47:28:ed:81:60:fd:82:79:9d:64:42:f0:ac:
1f:d7:f8:f1:ba:39:44:45:35:f6:84:56:08:24:41:
7b:1e:b3:f3:98:da:d4:c8:40:c2:4f:6f:42:36:dd:
9f:3e:f0:52:f7:4b:c8:08:55:1d:11:ff:bb:88:f5:
02:77:4a:67:bf:8f:6f:f2:e0:09:81:80:36:d0:06:
1f:35:2b:8f:fa:6a:a0:6f:7a:99:b1:92:04:ad:34:
03:c2:81:a4:63:5b:2b:e2:ba:6d:29:47:9e:1c:f9:
f6:44:2f:2e:cc:57:54:ef:fe:7c:c0:04:1b:7a:a9:
50:f3:4c:64:1d:25:d2:0d:cb:fd:b8:21:6b:48:01:
32:c0:a7:37:9d:7d:e2:4f:42:3a:a6:eb:5b:40:a2:
b7:8b:0a:f4:be:a9:20:30:fb:e0:7a:2a:1a:f1:65:
bf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2E:60:29:B5:22:85:8B:82:16:18:A8:C3:9E:49:1D:83:A6:02:FF
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/oS5gKbUihYuCFhiow55JHYOmAv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.110.0/24
82.115.10.0/23
Signature Algorithm: sha256WithRSAEncryption
da:af:b6:8d:4e:10:15:d2:9f:c5:3c:3b:41:33:89:a9:7d:b9:
21:c1:52:73:e0:d3:2f:33:69:fa:00:c2:fb:4f:02:7a:20:f1:
4f:3b:83:95:f7:f0:f9:fb:69:bd:46:30:62:45:31:89:11:e3:
9e:c3:6a:ff:8c:15:50:0b:02:7d:35:cd:0a:1f:f8:57:71:dc:
eb:0f:e1:0a:c9:02:bc:9e:1a:a8:8d:66:a5:93:2f:a3:0b:f7:
27:c2:47:c0:f0:84:c0:2d:10:d8:ea:04:e8:25:2e:12:40:0c:
3f:02:a4:ad:c6:3c:8e:fd:98:c0:f2:7e:3c:b0:3e:e0:03:a4:
a7:e8:e8:e3:54:9d:88:81:5c:f4:13:52:7d:67:ee:87:21:2c:
3e:f2:64:cc:59:b4:b6:95:a5:d0:7f:60:55:9d:03:9c:58:6a:
67:3d:b5:2a:7f:47:a2:88:b7:b9:cb:34:44:fc:a4:26:e3:84:
d5:7d:06:f8:05:f9:63:70:8b:3a:e3:87:1d:42:c1:8c:cd:47:
7a:31:cb:93:47:33:00:19:a4:a1:02:cc:3d:98:2e:e2:10:10:
48:2b:f6:46:0e:dc:54:e2:0d:90:4c:e4:91:58:02:eb:36:39:
a4:42:03:fb:10:63:ae:c8:d1:a8:23:09:ea:60:d6:f0:fe:d2:
6a:92:b1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 13:11:41 2023 by rpki-client on console-ams.rpki-client.org