Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/vWLOHRpflm94Nd9-qJWW9GXINvE.roa
File: vWLOHRpflm94Nd9-qJWW9GXINvE.roa (raw, json)
Hash identifier: if5ZWvroDx4KHsLHJUQd/JFcz/njv6n5WQSMi8ikimI=
Subject key identifier: BD:62:CE:1D:1A:5F:96:6F:78:35:DF:7E:A8:95:96:F4:65:C8:36:F1
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018AB7ECB213C400AAEC9E433D2B7CB05C65
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/vWLOHRpflm94Nd9-qJWW9GXINvE.roa
Signing time: Thu 21 Sep 2023 13:27:37 +0000
ROA not before: Thu 21 Sep 2023 13:27:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24875
IP address blocks: 46.249.104.0/24 maxlen: 24
46.249.104.0/23 maxlen: 24
46.249.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:ec:b2:13:c4:00:aa:ec:9e:43:3d:2b:7c:b0:5c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Sep 21 13:27:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd62ce1d1a5f966f7835df7ea89596f465c836f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fc:60:19:77:fa:56:e6:40:c2:f8:3f:fc:a1:
92:a1:f0:4c:5e:e3:31:a5:30:6d:74:56:70:ae:26:
95:21:f6:49:82:93:01:18:2d:55:b1:da:62:02:c6:
6f:2d:9d:fd:25:fb:47:d4:6d:da:f9:8a:9b:81:bb:
03:75:94:3e:5b:ab:23:b9:38:7c:e0:2d:e3:a9:84:
5f:c3:95:0c:ae:b8:a7:b0:1b:fb:66:da:25:2d:25:
bf:82:b8:3d:48:06:58:91:de:99:ff:78:dd:95:f2:
4d:ae:b0:86:4a:89:6f:f7:37:13:5e:04:d6:64:05:
cd:7a:14:71:5c:f8:0f:d7:82:ed:60:2b:98:c7:d9:
4e:80:6c:74:17:18:ae:67:d0:30:41:03:58:58:2a:
a4:8d:d0:1b:19:0d:b2:ef:4b:31:67:3d:10:59:e3:
9c:25:28:06:b8:4b:a2:59:1f:f8:93:9f:46:b4:65:
27:ef:7c:c1:83:b3:52:c2:ac:c9:79:12:66:1d:d5:
dd:00:b1:25:d3:c1:a1:d3:d3:ba:e9:d3:64:f6:7d:
79:1c:a6:cf:91:56:8b:44:2f:db:6b:5a:36:14:38:
df:6c:39:64:ec:f2:95:1a:c3:6c:a1:19:7d:ee:ea:
67:23:bc:d5:f6:64:41:14:b3:98:d7:d5:1d:80:9f:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:62:CE:1D:1A:5F:96:6F:78:35:DF:7E:A8:95:96:F4:65:C8:36:F1
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/vWLOHRpflm94Nd9-qJWW9GXINvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.104.0-46.249.106.255
Signature Algorithm: sha256WithRSAEncryption
9d:cc:14:60:e1:27:85:7c:e7:69:10:2e:5a:eb:d8:a0:0e:4e:
7f:82:2a:e1:04:66:9b:fe:05:e3:e0:c3:1b:63:55:8a:c3:00:
6d:c9:51:f2:1d:ed:ae:f1:a2:69:fb:18:45:eb:45:b2:77:10:
b5:ab:6c:54:eb:bc:6c:d9:3b:5f:e4:b7:43:ec:dd:38:61:98:
44:50:d6:0d:3f:97:fd:89:3c:6d:00:d6:db:31:50:1e:e2:6e:
52:e4:75:b8:3f:11:83:f0:60:b2:3b:9a:3a:3f:44:79:25:25:
b6:0a:86:88:53:17:46:14:86:de:96:52:a2:2a:36:40:be:6d:
dd:f1:d0:2e:0a:12:0d:de:6c:ec:68:5e:90:31:11:74:be:31:
9f:c4:c1:7a:4b:b8:40:51:8b:a8:bb:d1:92:ff:75:78:fd:eb:
4a:d5:40:f2:eb:97:48:be:4a:dd:9d:45:1b:8f:43:5f:db:27:
22:66:ab:18:e9:40:fb:4a:9d:3d:75:2b:d3:ff:f4:fa:b5:de:
11:45:af:83:06:23:9b:9b:d7:44:18:53:c6:29:04:2b:cf:5f:
96:a2:7e:58:4b:22:92:0c:b0:72:8d:1b:66:d8:9d:cc:82:d0:
0c:7a:9a:92:e9:96:a0:22:e0:79:7e:10:56:7b:e5:fb:68:cd:
f9:40:40:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:24 2024 by rpki-client on console-ams.rpki-client.org