Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/uDDfbuSd6Ye_JPQMTcGRqrbJI00.roa
File: uDDfbuSd6Ye_JPQMTcGRqrbJI00.roa (raw, json)
Hash identifier: GVS0iOcBADZ2BlKGmQWR0J2xm0pDcsN4qDTOW6f6QDk=
Subject key identifier: B8:30:DF:6E:E4:9D:E9:87:BF:24:F4:0C:4D:C1:91:AA:B6:C9:23:4D
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018C3564B8C5CC9CC769818922583108D822
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/uDDfbuSd6Ye_JPQMTcGRqrbJI00.roa
Signing time: Mon 04 Dec 2023 15:14:02 +0000
ROA not before: Mon 04 Dec 2023 15:14:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.249.112.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:35:64:b8:c5:cc:9c:c7:69:81:89:22:58:31:08:d8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Dec 4 15:14:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b830df6ee49de987bf24f40c4dc191aab6c9234d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2c:b0:d7:38:a3:18:22:8f:07:1a:f0:50:5e:
cc:9a:aa:9e:31:ed:6e:23:80:dd:dc:bc:ec:21:23:
04:88:c1:e1:5b:86:f5:19:d6:db:f3:22:84:f2:5b:
b7:b2:b1:4e:93:f5:aa:07:27:36:d4:66:b8:3d:cb:
f6:3b:64:a5:66:e4:47:f1:e1:2c:5e:1e:d3:04:f7:
dd:b2:20:ed:bd:c9:5d:15:46:bf:70:73:05:48:96:
2d:ef:a5:46:aa:f7:c0:a7:7e:4f:2a:0d:92:ae:86:
fb:48:b0:5f:cd:27:e5:4c:0d:98:85:4f:88:89:f0:
37:c9:87:2d:3b:cf:61:65:ee:24:64:14:51:9d:69:
1c:84:ca:73:70:16:52:eb:42:bd:14:70:84:23:ac:
cc:ba:4f:c8:7d:2d:53:94:68:ef:cd:c1:9f:f5:6a:
f0:05:bf:f9:ce:97:5a:b1:78:75:2c:f9:cb:9a:d9:
7f:91:e7:96:71:9c:2a:98:1a:83:20:06:dd:64:b6:
68:b3:4d:2f:db:27:40:64:dc:4e:8d:df:6c:41:46:
00:b8:4f:38:08:b1:42:97:b4:ae:3f:46:a8:ea:3f:
92:65:d0:2f:2a:9b:13:03:1b:67:3f:89:89:dd:3c:
3c:f2:92:ba:10:cd:56:14:fb:c2:be:7a:2c:be:17:
92:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:30:DF:6E:E4:9D:E9:87:BF:24:F4:0C:4D:C1:91:AA:B6:C9:23:4D
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/uDDfbuSd6Ye_JPQMTcGRqrbJI00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.112.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:29:f2:64:9e:18:ec:50:30:47:5f:cb:f4:76:ac:0d:39:9f:
05:cb:75:6a:42:cf:63:a1:53:80:93:36:1d:8c:be:6c:2a:19:
f3:5a:9e:b8:13:dd:84:22:a2:04:b8:01:91:a7:ff:c8:2c:b7:
35:cf:25:0f:6e:26:22:64:eb:62:7f:fd:af:d6:db:7d:73:a7:
eb:75:45:52:8a:b2:fd:21:0c:47:7a:3a:ca:75:e1:8a:4c:d2:
db:1b:11:fd:35:5b:7b:ba:6e:5e:3b:54:0b:13:c4:db:96:f0:
c3:c2:29:5c:89:83:8c:16:e1:7f:ef:61:30:29:f6:ea:9d:ca:
1e:ea:2f:bb:d9:1b:03:23:f6:18:8d:b7:ea:89:51:96:ff:a1:
8a:a2:2b:9f:2a:85:9f:a4:42:67:83:fa:eb:44:10:24:c2:e8:
0f:77:79:df:a6:34:27:c6:9b:6a:df:aa:8e:9b:92:b8:db:be:
92:3e:79:62:89:ec:6f:d8:dc:c8:bd:50:0e:66:8f:bd:77:25:
ba:98:96:4b:13:6d:23:9f:be:44:d7:0d:75:31:f2:5c:94:9b:
fe:f2:f5:29:c9:5e:22:9e:4b:3c:a4:42:85:5e:ff:8d:0b:78:
ba:37:f9:24:96:a0:fa:c2:ee:33:92:2b:a8:90:ca:09:37:60:
32:e3:fb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:24 2024 by rpki-client on console-ams.rpki-client.org